Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/957FE9746FA311F0A5848983DAE4EC9C.roa
File: 957FE9746FA311F0A5848983DAE4EC9C.roa (raw, json)
Hash identifier: 7kV8F/mVqvAjBlPocMVFpqaIYH+x5QndiQt5UpsmDAk=
Subject key identifier: AC:62:F3:96:FD:AC:B6:71:79:22:3B:1A:7B:16:2A:64:B9:5F:33:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01903E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/957FE9746FA311F0A5848983DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 13:21:23 +0000
ROA not before: Sat 02 Aug 2025 13:21:18 +0000
ROA not after: Sun 07 Sep 2025 13:21:18 +0000
asID: 9009
IP address blocks: 154.85.100.0/22 maxlen: 24
154.85.124.0/24 maxlen: 24
154.85.125.0/24 maxlen: 24
154.85.126.0/23 maxlen: 24
154.92.112.0/21 maxlen: 24
154.92.120.0/24 maxlen: 24
154.92.121.0/24 maxlen: 24
154.92.122.0/24 maxlen: 24
154.92.123.0/24 maxlen: 24
154.92.124.0/24 maxlen: 24
154.92.125.0/24 maxlen: 24
154.92.126.0/24 maxlen: 24
154.92.127.0/24 maxlen: 24
154.95.0.0/23 maxlen: 24
154.95.32.0/22 maxlen: 24
154.95.36.0/23 maxlen: 24
154.95.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:09:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102462 (0x1903e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 13:21:18 2025 GMT
Not After : Sep 7 13:21:18 2025 GMT
Subject: CN=688e10d3-4214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7d:e4:70:76:db:5a:7a:c8:de:dc:d4:50:0b:
6b:9b:00:91:c0:e2:7f:d2:fe:ad:a0:4d:2e:17:bc:
0b:05:5b:be:03:c6:45:b8:19:07:9c:3b:f9:11:96:
3e:88:fb:92:b8:66:f1:7d:e2:36:4b:52:b5:ec:97:
0a:eb:75:f1:c6:ad:90:dd:e2:b7:eb:df:95:a7:b5:
8c:21:a2:41:4c:1f:1b:64:3b:11:62:b3:7e:dd:50:
a2:50:05:62:fa:7d:25:df:70:1c:76:cc:98:2e:43:
d4:cd:f0:95:78:91:5e:29:1b:0f:92:00:ab:4d:f4:
1b:7c:1b:c1:8d:68:e3:d6:c0:48:30:59:7a:58:87:
8c:20:80:14:40:47:90:cf:17:9b:4b:cf:10:6a:44:
97:b2:7d:16:3a:66:40:87:3e:71:f5:9c:0a:62:c6:
84:1a:49:9a:0c:a7:df:c5:23:70:d1:64:ca:15:ba:
95:4d:fa:9f:49:dd:fa:3f:3b:14:e5:15:15:7e:1d:
24:9e:cf:08:44:f1:99:d2:39:f8:63:1f:b7:06:83:
2e:41:21:9a:da:cc:22:a0:ab:21:7c:d3:52:dd:e2:
da:84:f9:7b:84:42:ed:f9:d7:7c:44:fb:14:09:a9:
f4:25:47:85:ba:81:aa:c3:b7:0e:32:c2:74:a8:d7:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:F3:96:FD:AC:B6:71:79:22:3B:1A:7B:16:2A:64:B9:5F:33:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/957FE9746FA311F0A5848983DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.100.0/22
154.85.124.0/22
154.92.112.0/20
154.95.0.0/23
154.95.32.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:47:20:8d:51:29:0e:fb:3c:48:b3:49:ea:93:d9:ad:16:ec:
18:33:b6:d9:8a:ac:42:22:77:ae:82:d3:1b:b6:f9:71:d2:33:
8a:17:41:62:91:8e:aa:ee:c5:63:1a:05:6a:5a:0a:68:f6:c1:
8b:f9:77:91:b8:02:e3:38:94:79:5a:73:6b:3b:be:f6:fd:51:
20:8b:0c:14:4b:e6:74:ef:66:0f:10:92:3c:1b:6a:8b:2a:67:
c7:c4:e1:20:8e:a5:52:ba:a4:6e:51:c3:cb:fe:0c:1a:d3:61:
27:f8:56:92:58:be:53:3c:84:72:26:6d:c3:a3:27:8f:24:b1:
21:b6:15:e0:41:54:c8:2a:cb:42:05:c3:8a:b0:7b:c6:fe:53:
b8:db:06:23:7f:7c:77:03:f3:89:a4:88:37:22:a7:5e:4c:be:
ce:03:55:b7:48:03:ea:b3:59:e7:5b:f3:e9:24:bc:84:3d:ed:
33:ac:b8:a7:e8:c7:2d:96:2f:84:d6:d9:d0:2f:8b:85:e4:ad:
7f:6c:78:04:c5:28:71:47:3e:e8:e5:93:e8:b5:26:3c:f8:87:
0e:e5:92:dc:da:a6:9e:56:86:ea:78:02:86:e6:3e:81:f5:61:
b7:15:1d:96:4b:4e:7e:32:1a:65:2f:f6:a3:ed:28:44:b0:1f:
10:28:66:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:05 2025 by rpki-client