Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8540EB6A67A811F0A2C5378DDAE4EC9C.roa
File: 8540EB6A67A811F0A2C5378DDAE4EC9C.roa (raw, json)
Hash identifier: dmgtei9gF+GVtc1HLZWUjCGZJ3axbpbRHYFZGHY2bvo=
Subject key identifier: 36:C3:75:8D:BC:D9:2F:8C:96:77:EF:69:51:EE:93:F2:65:62:A3:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EF9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8540EB6A67A811F0A2C5378DDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 09:36:34 +0000
ROA not before: Wed 23 Jul 2025 09:36:28 +0000
ROA not after: Fri 29 Aug 2025 09:36:28 +0000
asID: 214143
IP address blocks: 154.82.172.0/23 maxlen: 24
154.82.174.0/23 maxlen: 24
154.82.176.0/23 maxlen: 24
154.82.178.0/23 maxlen: 24
154.82.180.0/24 maxlen: 24
154.82.181.0/24 maxlen: 24
154.83.18.0/23 maxlen: 24
154.83.32.0/24 maxlen: 24
154.83.40.0/23 maxlen: 24
154.83.42.0/23 maxlen: 24
154.83.72.0/23 maxlen: 24
154.83.74.0/23 maxlen: 24
154.83.76.0/23 maxlen: 24
154.93.1.0/24 maxlen: 24
154.93.3.0/24 maxlen: 24
154.93.26.0/24 maxlen: 24
154.93.28.0/22 maxlen: 24
154.94.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102137 (0x18ef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 09:36:28 2025 GMT
Not After : Aug 29 09:36:28 2025 GMT
Subject: CN=6880ad22-e406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:17:56:b6:3d:a4:aa:2b:cb:a1:17:e3:ef:
7b:4d:ed:92:46:7e:3a:b8:9c:e0:fa:4a:a3:92:75:
67:0f:ce:29:5e:ea:00:0e:b1:6d:0f:84:2a:af:c1:
42:c8:9c:e2:4d:9c:8b:30:f6:82:ae:ff:a3:34:f2:
37:df:2e:e0:fb:cd:f1:51:46:c3:bb:82:f0:87:be:
57:f9:0b:a0:51:da:e7:da:f3:16:de:c0:b7:95:ef:
a4:57:c6:c4:66:fb:44:db:d4:34:6c:24:8a:e9:01:
85:1a:44:6a:ef:b0:93:fd:6a:32:c8:19:96:15:02:
22:a3:c8:bf:4f:4a:8d:c9:49:ff:22:c8:40:23:ca:
02:cd:87:99:e6:b4:87:0f:a9:bd:53:4a:48:22:5c:
1d:9d:50:3e:18:f8:cf:6a:47:03:6f:5a:0d:12:d5:
f9:f7:0d:15:f0:43:dd:16:a3:bf:20:79:2a:02:16:
88:fe:e0:1d:2c:19:09:eb:ce:31:90:71:42:d9:f8:
f2:a2:00:5a:a6:48:70:4e:cd:c5:cb:52:43:c6:53:
60:a2:8e:46:d0:eb:22:85:68:f0:00:69:5c:5b:5c:
ad:9b:6e:9f:68:47:a9:8f:16:9d:6c:da:16:8c:8f:
8e:d1:8e:fe:95:f6:9c:5c:60:3c:77:0f:b8:b0:ea:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C3:75:8D:BC:D9:2F:8C:96:77:EF:69:51:EE:93:F2:65:62:A3:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8540EB6A67A811F0A2C5378DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.172.0-154.82.181.255
154.83.18.0/23
154.83.32.0/24
154.83.40.0/22
154.83.72.0-154.83.77.255
154.93.1.0/24
154.93.3.0/24
154.93.26.0/24
154.93.28.0/22
154.94.35.0/24
Signature Algorithm: sha256WithRSAEncryption
06:91:5e:3a:5b:e9:79:eb:b9:39:29:0c:02:d3:59:2e:15:94:
29:e4:9a:19:49:09:e1:f3:3e:86:60:38:a8:31:99:2b:67:0c:
a4:fd:25:1a:a9:81:d3:2a:e7:99:15:e4:e6:3d:fa:5d:41:96:
31:3d:ec:3c:5c:b5:ae:e2:0a:f6:ae:73:51:2f:9e:30:b0:23:
1b:99:30:61:0d:bc:67:4d:4d:5a:ed:ea:6d:51:a4:f2:49:bc:
8a:23:42:dc:b6:61:88:22:81:8d:3b:a3:68:ae:58:a3:76:25:
4d:64:66:5b:8b:c2:eb:f4:2e:7a:0b:5c:84:8e:ef:aa:4a:95:
79:07:f0:f5:6f:50:1a:4d:b8:50:2c:2d:56:a2:c3:a0:e7:b5:
2c:7a:dc:61:9e:1d:29:28:c8:f3:b1:74:ec:51:c5:15:75:e4:
52:cf:42:cb:6c:55:6e:54:74:1a:2e:7d:f4:51:a5:34:9b:c6:
4f:5f:f6:7e:f4:6d:0d:21:2b:84:9d:9e:f6:49:71:64:8b:c1:
5c:27:e5:33:4f:15:8f:1d:68:00:6b:28:e2:c5:6f:b6:1a:72:
c2:60:e1:f5:36:2a:0d:0b:db:ce:7c:24:5c:6d:aa:bb:6e:a4:
69:88:f4:c6:5a:65:9b:c8:53:18:71:94:db:6e:f6:03:51:a8:
ad:21:94:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:48:56 2025 by rpki-client