Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/951C8D5467AE11F0ACB03CB4DAE4EC9C.roa
File: 951C8D5467AE11F0ACB03CB4DAE4EC9C.roa (raw, json)
Hash identifier: mmautfB01OzLKouxN8wrBRZtJ1kKi8RXXYSQTxl9HTA=
Subject key identifier: B2:8A:40:3A:C5:1A:AC:86:50:36:48:70:04:FA:4B:EC:F2:9D:8C:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/951C8D5467AE11F0ACB03CB4DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 10:19:57 +0000
ROA not before: Wed 23 Jul 2025 10:19:53 +0000
ROA not after: Sat 30 Aug 2025 10:19:53 +0000
asID: 395886
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102147 (0x18f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 10:19:53 2025 GMT
Not After : Aug 30 10:19:53 2025 GMT
Subject: CN=6880b74d-d232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:8c:98:92:ec:5a:3c:3b:f3:5c:04:0b:e5:
ff:66:d8:03:54:c2:8a:c0:60:02:e1:d6:06:2b:dc:
47:5a:d4:25:30:c0:bd:3c:8d:43:4f:36:6e:b9:ae:
52:be:b4:ca:05:1b:f8:29:cc:5d:5a:cc:f7:66:00:
28:e8:a5:f6:6c:41:53:8e:c1:7b:17:3f:d5:49:78:
6d:23:b9:c4:9f:d4:1e:42:9c:a3:1d:03:11:d2:6c:
8e:84:49:eb:1c:d3:b5:56:b6:6b:da:27:67:ef:3a:
c9:c3:77:5b:09:ef:00:68:11:35:79:ad:1f:1b:e1:
9d:3f:59:5d:e8:ed:98:16:71:02:60:a9:29:d4:14:
77:4a:87:69:14:db:00:17:15:73:43:64:45:ad:29:
bf:24:5d:f6:9b:2f:0c:5e:6a:bd:76:cc:f1:df:a1:
fe:1c:56:cd:44:3d:67:10:e0:ed:9a:cf:ad:0b:6d:
b2:3b:44:20:d8:d2:71:a0:6c:4b:2a:97:8e:7e:94:
b3:15:d0:41:aa:af:4e:ec:c7:e1:8a:24:cd:f0:4d:
64:75:5a:3d:67:04:34:4d:3a:da:64:be:04:47:09:
e3:15:08:01:f3:9a:30:c3:7f:21:6a:0f:c2:a1:a2:
24:05:a6:80:73:fc:5a:58:e9:8d:2a:ef:e2:ed:39:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8A:40:3A:C5:1A:AC:86:50:36:48:70:04:FA:4B:EC:F2:9D:8C:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/951C8D5467AE11F0ACB03CB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
50:65:69:0b:e6:81:bc:05:32:c2:ec:0f:97:21:71:66:c9:bf:
7b:5c:a5:9d:4d:18:30:bc:30:3f:31:c8:57:19:1c:b2:3f:6a:
12:d4:c7:da:43:48:63:78:0b:71:fb:63:42:dc:b3:7e:02:b9:
38:02:2e:54:00:98:51:9e:2d:01:17:dc:d8:ca:20:ec:18:b0:
69:a3:0d:20:8a:b3:b1:27:9e:92:da:a1:a3:d4:22:dc:31:ee:
43:fb:ec:bd:45:73:66:b2:5e:9c:e2:6e:23:a4:20:f3:ce:7b:
26:b3:7a:17:8d:7b:4a:ba:84:75:4e:9c:82:7f:41:50:3b:3a:
5d:1a:a0:eb:fd:61:04:d8:b0:b9:ae:c1:7b:02:94:2a:4e:c5:
fe:1a:c2:bf:02:0c:86:4f:7b:f9:10:fe:a8:3a:61:cb:4e:d9:
d3:c3:13:0e:ea:3b:f4:25:f7:43:8a:94:2f:ab:37:f9:65:1e:
d8:7d:ed:83:13:95:c0:33:ad:bb:df:27:36:0b:ac:d7:be:cf:
f6:94:d7:8d:77:13:af:ca:06:0f:5b:69:c6:31:c4:bb:71:8d:
a6:6f:0b:cb:21:1e:ff:38:2e:f2:56:5b:88:eb:91:91:15:99:
48:c5:77:a6:99:eb:1b:98:dc:57:40:e4:f9:85:fb:d4:b4:0d:
23:88:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:49:29 2025 by rpki-client