Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C71DE360663D11F09E5268CBDAE4EC9C.roa
File: C71DE360663D11F09E5268CBDAE4EC9C.roa (raw, json)
Hash identifier: DBI46jGe6hwgr0Z1GpzL9xVFVh2FfA6zMEbmfHmpdaI=
Subject key identifier: 00:A0:92:45:4E:66:CD:54:51:43:3C:1B:98:1A:B8:9B:A0:2B:CA:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C71DE360663D11F09E5268CBDAE4EC9C.roa
Signing time: Mon 21 Jul 2025 14:19:57 +0000
ROA not before: Mon 21 Jul 2025 14:19:52 +0000
ROA not after: Wed 16 Sep 2026 14:19:52 +0000
asID: 63199
IP address blocks: 154.196.4.0/22 maxlen: 24
154.223.129.0/24 maxlen: 24
154.223.130.0/23 maxlen: 24
154.223.132.0/24 maxlen: 24
154.223.134.0/23 maxlen: 24
154.223.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102001 (0x18e71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 14:19:52 2025 GMT
Not After : Sep 16 14:19:52 2026 GMT
Subject: CN=687e4c8d-5929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e9:94:84:ad:e7:10:7c:96:d0:d2:51:a3:1e:
78:d4:e8:0e:19:74:4f:4e:28:8f:dd:00:a6:18:ce:
ab:0e:d9:e7:66:5f:77:7b:76:0f:02:bb:e5:11:34:
38:44:f4:0d:d5:ad:25:7b:50:31:23:35:9a:a6:84:
63:19:bc:90:bc:40:fc:46:1f:dc:c9:ed:69:82:72:
2c:b4:1e:4c:ea:dd:d8:b5:26:7f:fc:b6:08:93:27:
ed:d7:3d:0e:ec:70:f4:e4:d1:67:ea:07:90:7a:e8:
31:d7:88:71:eb:4c:ae:af:f7:cd:92:ff:6f:fa:9e:
bd:92:41:c0:5a:98:e4:72:79:94:8f:6e:85:bf:cc:
9c:da:f5:71:78:a6:69:22:d2:01:3c:72:82:fa:56:
25:e8:0f:78:19:9e:61:ef:48:84:ad:d9:82:01:0d:
5b:56:54:23:5c:81:80:2b:b9:13:a6:1e:6f:2d:57:
1d:8a:4e:92:1b:99:b8:28:1a:4a:cc:22:ce:28:b4:
8d:e8:3e:d3:dc:e9:3b:81:50:ca:9e:e4:97:a1:ad:
d8:25:7f:3a:ea:5d:1a:73:15:55:fc:03:23:bc:bb:
83:cf:45:2a:9a:47:d2:3a:79:0a:48:fe:e2:f8:4f:
74:58:cd:c1:1a:77:f3:cf:88:fe:aa:26:45:68:72:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A0:92:45:4E:66:CD:54:51:43:3C:1B:98:1A:B8:9B:A0:2B:CA:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C71DE360663D11F09E5268CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.4.0/22
154.223.129.0-154.223.132.255
154.223.134.0-154.223.136.255
Signature Algorithm: sha256WithRSAEncryption
5a:fb:93:64:dd:64:93:ce:e0:bb:b0:9f:c4:5c:16:a5:6e:b2:
2b:cf:3e:39:5d:06:2a:b5:01:82:6d:be:ca:29:45:0f:bf:a6:
2e:a6:0d:5b:d5:bb:6f:48:69:9b:44:8b:dc:89:66:01:d6:d0:
07:f4:2b:3f:38:b5:a2:e7:f7:ae:ae:4a:52:55:a5:9b:a9:6c:
28:f5:b8:d8:99:7c:e7:93:1d:16:0f:7a:86:e8:42:57:47:53:
64:44:ec:fb:04:bd:27:10:66:6e:c1:47:08:d7:5c:7e:cb:33:
cd:90:7e:66:95:05:12:9a:c6:5a:b1:37:b4:14:37:71:6d:07:
4a:80:a8:e9:53:cc:aa:fe:4d:f7:00:b3:81:34:95:4b:5f:e4:
d3:a9:a8:ab:9c:0c:e5:ce:a1:51:76:46:7f:95:ae:32:ac:f5:
be:b9:cf:6d:37:23:cb:57:0e:fe:4d:a4:2c:97:4f:93:07:49:
a7:3a:ee:80:82:4f:ad:f2:a5:9f:7d:b5:11:74:56:d2:9f:23:
15:a5:75:12:82:43:6f:42:08:02:39:ff:2c:de:5a:c0:b6:66:
b8:61:63:fc:bf:98:0f:10:ca:54:b8:2c:18:98:26:4b:52:61:
1f:f0:e5:38:98:93:ce:78:9b:26:79:21:0f:a3:7b:6e:c5:43:
0a:2d:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:33:46 2025 by rpki-client