Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB60FB706B8C11F08808C0E5DAE4EC9C.roa
File: CB60FB706B8C11F08808C0E5DAE4EC9C.roa (raw, json)
Hash identifier: zVDcjC29kue3y6cLELJQPijqSWklZ6O8SnqDiTK72Gs=
Subject key identifier: 3F:1D:A1:85:ED:20:92:88:5D:D3:29:19:70:6F:B9:BD:25:74:BB:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB60FB706B8C11F08808C0E5DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 08:28:10 +0000
ROA not before: Mon 28 Jul 2025 08:28:05 +0000
ROA not after: Mon 25 Aug 2025 08:28:05 +0000
asID: 54801
IP address blocks: 154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.200.248.0/23 maxlen: 24
154.201.7.0/24 maxlen: 24
154.201.8.0/22 maxlen: 24
154.201.40.0/23 maxlen: 24
154.213.176.0/20 maxlen: 24
154.213.211.0/24 maxlen: 24
154.213.212.0/24 maxlen: 24
154.222.77.0/24 maxlen: 24
154.222.78.0/24 maxlen: 24
154.222.136.0/23 maxlen: 24
154.222.146.0/23 maxlen: 24
154.223.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102340 (0x18fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:28:05 2025 GMT
Not After : Aug 25 08:28:05 2025 GMT
Subject: CN=6887349a-568d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:6d:22:4a:dd:17:30:22:2e:6a:57:79:cb:
c6:63:40:a0:5d:4d:38:13:e9:de:2d:0c:77:90:93:
96:47:1a:71:92:08:d5:f2:7c:2d:2a:d2:2f:90:74:
f9:d8:5d:5e:04:f8:79:93:ce:27:2d:86:a3:33:a0:
85:78:06:6c:7e:aa:4b:06:4e:06:81:27:90:c3:11:
37:24:2b:dd:0e:5d:2b:af:20:0e:04:39:ef:48:1c:
60:f7:da:3f:8d:92:74:ba:aa:a6:c0:39:84:e9:c8:
52:ce:a9:94:c8:20:1d:21:9a:c7:10:fe:5b:8f:9d:
cb:24:46:f1:8a:4e:3d:8d:22:68:07:7d:25:06:1e:
3a:f0:1d:ef:11:c9:b3:0d:d4:04:a5:62:33:94:ce:
29:70:2a:ff:6e:c6:5f:e4:3a:d5:a4:43:67:c0:7e:
ff:ae:29:66:2b:5d:07:55:d5:d4:3f:28:93:3d:0f:
c5:2a:f3:95:d1:49:39:7c:47:47:b8:d2:f1:89:86:
a0:8a:a2:59:ac:79:ea:c3:6a:8a:90:ad:17:39:e8:
a2:90:60:45:08:e1:9e:9e:ed:ca:14:3b:d4:73:9c:
89:2c:9a:87:39:bc:04:87:7b:1c:9d:f9:2c:81:0e:
de:02:86:c6:20:54:8d:45:e1:a1:1e:55:22:f2:d0:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1D:A1:85:ED:20:92:88:5D:D3:29:19:70:6F:B9:BD:25:74:BB:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB60FB706B8C11F08808C0E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0-154.198.10.255
154.200.241.0-154.200.242.255
154.200.248.0/23
154.201.7.0-154.201.11.255
154.201.40.0/23
154.213.176.0/20
154.213.211.0-154.213.212.255
154.222.77.0-154.222.78.255
154.222.136.0/23
154.222.146.0/23
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
81:12:02:7c:fe:c9:0f:3f:e0:59:4f:5f:3d:32:fc:56:4b:ce:
d2:dd:13:29:8c:da:48:36:a1:18:8f:9d:d0:ad:e2:06:b8:dc:
24:01:bb:64:77:12:31:6a:30:43:b7:dc:fa:ac:0f:ef:6e:6d:
d7:fe:a2:68:d0:8e:ae:70:89:9d:05:47:6e:bf:e9:e9:fd:ea:
4e:ce:c5:97:29:0b:14:98:fa:c0:37:93:76:2c:d6:91:5f:08:
c3:c3:bb:c3:3c:73:88:34:df:b5:b9:9a:1f:92:9d:8b:91:65:
9d:55:4b:36:73:29:56:d1:d2:46:7e:c5:51:3e:98:8e:10:58:
05:1a:d7:3a:ce:5a:8a:0d:4b:ff:ea:51:ee:fd:95:a6:41:73:
83:6d:74:74:02:7f:34:25:4e:1a:85:68:e5:31:d8:76:88:28:
5c:a9:1b:6b:77:00:83:75:0b:20:7d:3e:1f:df:fb:4a:20:61:
69:8e:b6:a7:fb:cb:6d:7b:e1:61:49:02:a9:1b:da:5e:9c:6f:
1f:6b:c5:95:13:50:62:69:ef:46:91:29:53:f6:da:22:96:73:
d7:d2:13:17:59:02:eb:76:db:e1:3a:fd:7c:fa:72:54:75:3b:
9f:1c:89:c5:8d:1d:fc:1d:df:0e:82:f0:3d:b2:44:39:13:19:
4f:76:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:46:34 2025 by rpki-client