Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60ED3BB4689E11F08B4EECC9DAE4EC9C.roa
File: 60ED3BB4689E11F08B4EECC9DAE4EC9C.roa (raw, json)
Hash identifier: fPb5I7fqUqIRIScUtb31+eEvk2KmBHvXymfrY2Gb77U=
Subject key identifier: 9F:52:2F:81:D7:E7:EB:25:96:C7:A9:09:8D:2F:F2:5A:B2:2E:96:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60ED3BB4689E11F08B4EECC9DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 14:56:29 +0000
ROA not before: Thu 24 Jul 2025 14:56:24 +0000
ROA not after: Fri 05 Sep 2025 14:56:24 +0000
asID: 48031
IP address blocks: 154.213.6.0/24 maxlen: 24
154.213.7.0/24 maxlen: 24
154.222.248.0/24 maxlen: 24
154.222.249.0/24 maxlen: 24
154.222.250.0/24 maxlen: 24
154.222.251.0/24 maxlen: 24
154.222.253.0/24 maxlen: 24
154.222.254.0/24 maxlen: 24
154.222.255.0/24 maxlen: 24
154.223.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102294 (0x18f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 14:56:24 2025 GMT
Not After : Sep 5 14:56:24 2025 GMT
Subject: CN=6882499d-e49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:c7:c5:1a:3d:68:5f:8f:36:2c:b6:d8:4f:
cb:b6:eb:0f:9c:ff:7d:dd:08:3f:07:b7:7b:9d:39:
d8:42:8d:bd:27:bc:60:33:03:d0:f0:2b:f4:f0:fa:
c7:26:22:7b:31:bf:eb:95:2e:b0:66:cd:5c:d1:eb:
bf:ac:b7:cd:3e:04:2b:ce:e3:4b:f6:9e:15:97:76:
e3:9e:fe:59:86:23:d7:65:f0:46:83:fd:9f:2e:2e:
04:62:d4:a8:c1:cd:b3:ec:c1:8c:aa:24:de:a4:97:
2a:58:36:de:98:82:5d:8e:7e:2e:b2:b4:80:14:ed:
bc:79:d6:e4:a8:51:44:9e:42:85:bb:e3:f4:b6:a0:
d1:b6:4a:8e:c0:ac:d2:09:92:70:f9:b3:dc:4d:81:
2f:3d:ca:13:4d:00:e0:a3:67:b2:10:fb:da:ac:db:
f6:4f:cb:aa:32:34:3a:91:40:a7:fc:78:2c:dd:93:
42:33:72:25:c2:45:59:2a:82:52:42:4c:95:e2:0d:
37:2c:ab:c6:5e:4a:1f:99:67:43:7b:ea:1c:db:57:
21:2e:0a:b1:39:a4:63:b9:19:84:6e:49:e8:a2:cd:
19:07:5a:1b:42:dd:19:78:06:43:5e:c7:7b:c0:43:
74:9f:5d:48:95:fe:55:df:68:24:83:8a:15:87:fe:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:52:2F:81:D7:E7:EB:25:96:C7:A9:09:8D:2F:F2:5A:B2:2E:96:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60ED3BB4689E11F08B4EECC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.6.0/23
154.222.248.0/22
154.222.253.0-154.222.255.255
154.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:ba:3b:ec:ae:f2:8c:a4:90:e6:5f:03:2a:82:4d:f2:01:ed:
6b:e8:7f:c8:45:ca:fd:df:f3:5d:bd:1e:58:18:85:f9:f5:8c:
38:d4:f3:1e:69:05:72:8b:70:09:97:2c:b9:84:80:d3:9a:fc:
69:9b:7d:42:44:59:3e:31:41:2f:c1:d7:a3:62:66:55:fe:16:
f9:41:4d:5e:d7:dd:2d:a0:bd:29:0e:2d:40:4b:07:51:78:02:
ea:dc:a3:55:88:bd:d3:ca:1b:e2:ee:67:50:65:a3:f8:d8:41:
42:4f:67:58:0a:35:cc:58:c7:9a:82:99:81:b9:ee:6c:8e:3e:
e6:18:d3:9e:3a:81:45:07:da:18:f5:6c:0b:74:9d:22:c3:50:
05:6a:37:de:cd:c9:4b:f4:30:90:01:de:8f:75:05:0e:3d:14:
f7:bb:e8:59:4d:6e:ac:84:fd:da:0d:6a:60:68:5c:82:ac:90:
1b:c3:2b:32:2f:b3:03:9e:95:f1:1f:07:6c:23:b8:e9:ca:79:
a2:2f:7d:60:f4:e1:98:6b:d0:22:5e:96:09:7c:7f:13:6c:b7:
b5:d5:d9:99:cd:09:11:d5:36:e2:f0:f8:80:45:8d:78:62:67:
23:28:76:fa:9b:b7:6b:01:ba:bb:6d:b2:29:b5:b4:5b:fd:c9:
e9:01:0b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:26:33 2025 by rpki-client