Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A20E54A867A311F08376B9ECDAE4EC9C.roa
File: A20E54A867A311F08376B9ECDAE4EC9C.roa (raw, json)
Hash identifier: 4YisklwjtqiaEZLBDhMu60amYfNaV9Rtaw8Ry+UzsOg=
Subject key identifier: D0:31:B8:1B:E6:37:57:8D:85:83:82:B8:25:1E:47:9A:14:2F:11:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A20E54A867A311F08376B9ECDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 09:01:35 +0000
ROA not before: Wed 23 Jul 2025 09:01:30 +0000
ROA not after: Wed 27 Aug 2025 09:01:30 +0000
asID: 3257
IP address blocks: 154.206.240.0/21 maxlen: 24
154.206.248.0/21 maxlen: 24
154.208.64.0/21 maxlen: 24
154.208.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102127 (0x18eef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 09:01:30 2025 GMT
Not After : Aug 27 09:01:30 2025 GMT
Subject: CN=6880a4ef-0bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:c6:72:65:a8:21:da:be:7d:76:f8:24:ed:
25:a9:df:17:85:e5:9c:d0:a2:2d:5d:0a:4f:b0:a0:
00:86:bc:3b:8d:77:8f:c1:5e:10:40:19:d8:44:0d:
e4:a1:f6:7b:64:da:be:86:c1:0a:9c:b4:48:c5:91:
c7:51:47:d4:07:c4:b8:28:a5:32:4d:30:0c:25:a5:
4f:c1:a2:a8:e9:a8:0a:30:75:18:73:cc:86:9e:8e:
1e:74:45:aa:0c:23:aa:78:6e:e4:c9:7f:f0:75:00:
c0:c1:57:2d:38:25:4c:a8:c6:2a:f7:9d:ef:cf:92:
cc:55:da:75:b7:86:92:3e:44:bc:dd:8c:4d:6b:3d:
57:e4:a3:61:a0:cc:a4:c7:0f:a8:15:4a:c0:c5:36:
16:58:cf:85:ce:9e:1a:4c:04:19:02:97:59:98:d0:
64:3d:f9:a1:8d:3b:4f:ef:33:b2:48:8a:35:91:ff:
cc:12:36:72:7c:1c:e0:ef:a5:2e:ca:0d:ce:54:78:
c6:30:16:91:cb:a2:52:4b:0b:20:32:a6:68:ee:60:
0c:78:10:ea:be:13:33:72:9d:e5:54:7e:1a:af:25:
38:19:a9:62:9b:ad:9f:7b:1e:a4:f8:89:6e:0e:58:
a5:83:0f:11:a5:6f:95:06:7f:88:48:92:f0:1e:1a:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:B8:1B:E6:37:57:8D:85:83:82:B8:25:1E:47:9A:14:2F:11:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A20E54A867A311F08376B9ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.240.0/20
154.208.64.0/21
154.208.112.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:27:bd:58:3d:d0:8d:d9:c5:1d:f8:ee:da:73:a5:fe:16:1b:
a1:de:fc:70:c3:34:14:17:23:2e:4b:e2:74:05:f1:30:12:a2:
d7:be:99:81:65:47:d9:c4:15:a1:77:2c:80:14:cb:60:b5:a7:
fb:f7:b4:9d:34:5f:01:88:87:2b:d2:b9:ea:03:72:ec:82:98:
07:58:41:29:2f:60:6a:e4:36:59:d2:0f:ce:e0:0c:d3:a0:bb:
70:26:9e:00:d6:b9:a8:8f:24:37:06:54:03:e3:00:13:0c:43:
27:77:5f:ce:dd:b0:d3:ce:3b:3a:4c:99:3c:8b:59:0e:74:68:
66:f9:97:e9:41:a2:13:20:4b:70:c1:e8:a5:23:fa:ec:12:05:
50:e3:3b:62:02:03:79:76:d7:8b:a1:a2:fa:f9:04:76:ac:8d:
d8:bb:a4:1d:c8:bf:86:aa:4c:4e:13:25:e1:49:45:15:ff:eb:
eb:ad:15:51:c5:92:6c:63:5f:a6:76:72:2b:ba:8f:2a:aa:da:
21:54:00:e2:63:96:16:09:71:bc:e8:67:a4:f6:6f:2f:98:6d:
7f:fc:66:02:fa:36:77:17:2b:46:1d:45:7f:15:87:d7:1e:77:
fe:4b:15:e9:21:0a:94:7b:c6:74:9f:76:63:b0:33:34:43:0d:
db:83:05:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:51:19 2025 by rpki-client