Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74FC35BA49D111F0980711E4DAE4EC9C.roa
File: 74FC35BA49D111F0980711E4DAE4EC9C.roa (raw, json)
Hash identifier: a/GbdlIKoSSbkYrepN4rPdEEaWCnoQy6KawOvmXS1eM=
Subject key identifier: F3:1F:B3:58:B8:AF:B2:FB:FC:6B:1C:09:EE:5D:EF:C6:85:F6:80:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74FC35BA49D111F0980711E4DAE4EC9C.roa
Signing time: Sun 15 Jun 2025 10:14:01 +0000
ROA not before: Sun 15 Jun 2025 10:13:56 +0000
ROA not after: Sun 27 Jul 2025 10:13:56 +0000
asID: 54801
IP address blocks: 154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.200.248.0/23 maxlen: 24
154.201.7.0/24 maxlen: 24
154.201.8.0/22 maxlen: 24
154.201.40.0/23 maxlen: 24
154.213.176.0/20 maxlen: 24
154.213.211.0/24 maxlen: 24
154.213.212.0/24 maxlen: 24
154.222.77.0/24 maxlen: 24
154.222.78.0/24 maxlen: 24
154.222.136.0/23 maxlen: 24
154.222.146.0/23 maxlen: 24
154.223.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100022 (0x186b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 10:13:56 2025 GMT
Not After : Jul 27 10:13:56 2025 GMT
Subject: CN=684e9ce9-f2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:d2:5b:09:1d:cf:7c:94:19:48:b8:2b:f3:
4f:7a:b9:af:f2:f0:af:e7:58:dd:c4:d0:72:d2:aa:
d5:6a:07:8c:33:12:33:7a:0c:e2:18:9d:75:40:15:
fe:48:78:81:d1:d1:81:e1:7c:99:15:af:2a:99:1b:
e1:5c:d1:52:eb:84:05:78:45:cb:93:81:2d:8f:86:
23:bf:92:9c:e1:b0:78:c7:2a:e6:8e:28:61:3c:52:
52:7c:70:6c:77:d3:de:1d:a6:b1:29:a4:ff:de:e3:
e0:41:29:c7:af:50:21:ea:df:14:34:24:fb:17:b9:
3a:af:3e:62:a6:a6:6b:8f:19:e2:9e:be:a6:b8:76:
1f:46:3e:43:05:e5:6b:1a:e3:9e:1f:a1:10:9e:20:
9d:f8:f5:c1:4d:ec:76:c1:e6:8c:33:62:fc:cf:bb:
ae:92:39:61:d3:e6:f0:91:5b:6a:87:fc:4a:ab:d8:
b3:06:a1:15:dd:84:f3:5c:dc:77:e7:1d:d1:f6:0e:
84:ea:eb:73:23:33:60:4e:8b:ee:a9:65:08:93:df:
20:6d:31:9f:b9:66:69:91:5b:c3:26:66:c0:f2:09:
9c:70:74:2d:51:68:0b:1c:38:3c:4e:e7:de:c2:7d:
e9:4a:bc:13:b6:4e:14:47:b5:22:93:3d:86:c2:2c:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1F:B3:58:B8:AF:B2:FB:FC:6B:1C:09:EE:5D:EF:C6:85:F6:80:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74FC35BA49D111F0980711E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0-154.198.10.255
154.200.241.0-154.200.242.255
154.200.248.0/23
154.201.7.0-154.201.11.255
154.201.40.0/23
154.213.176.0/20
154.213.211.0-154.213.212.255
154.222.77.0-154.222.78.255
154.222.136.0/23
154.222.146.0/23
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
54:0c:84:66:03:0c:50:15:be:e9:97:fb:1e:96:7a:6f:d3:4f:
2b:15:08:c8:14:58:d9:9a:59:37:aa:1f:ed:d5:d2:10:ec:da:
73:30:0a:f8:80:5d:34:fa:cd:b8:48:13:21:e2:e5:37:69:6b:
e4:4b:4e:a7:82:90:5e:ab:98:57:89:f6:75:dd:e6:03:72:3a:
fe:35:f6:65:a7:8f:51:17:54:12:36:f4:29:cd:ee:0a:80:62:
e9:a6:ca:02:da:ac:65:dd:ae:b9:0c:8c:c3:a5:12:77:50:4b:
14:4c:87:c0:e2:03:83:c0:77:f4:7c:c9:b6:67:ea:7a:2e:6d:
da:f2:3d:37:15:e9:41:ae:92:52:7f:b1:1b:1b:0e:49:0e:25:
15:8f:aa:45:0d:28:6e:9c:90:5d:8b:49:02:1d:50:84:5c:8e:
a7:c4:82:90:88:41:d7:5d:c6:74:99:67:94:6a:b2:dd:39:51:
c3:73:f1:bd:72:bd:66:02:59:af:e5:dd:c1:78:8a:a2:3e:60:
2e:c2:ea:5e:db:c9:3e:e2:59:54:52:ff:49:c4:e7:2a:ca:c3:
2c:d5:8f:d8:7e:09:51:8d:64:0c:db:36:a8:83:93:47:d1:73:
76:ec:eb:d8:27:d3:d1:85:89:26:c9:ce:a6:39:58:b4:a3:ba:
a1:ca:e2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:19:19 2025 by rpki-client