Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3A1BA4866BB11F0B6DE5C8ADAE4EC9C.roa
File: D3A1BA4866BB11F0B6DE5C8ADAE4EC9C.roa (raw, json)
Hash identifier: J62zSNsHHLdlt2EeLLLRCuGXBLdnAqbHLX8V1KtKrjs=
Subject key identifier: E6:B8:4A:28:65:66:5C:CB:19:2C:5A:1E:B3:16:74:9C:10:F3:86:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EAB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3A1BA4866BB11F0B6DE5C8ADAE4EC9C.roa
Signing time: Tue 22 Jul 2025 05:22:15 +0000
ROA not before: Tue 22 Jul 2025 05:22:10 +0000
ROA not after: Mon 25 Aug 2025 05:22:10 +0000
asID: 203020
IP address blocks: 154.82.24.0/21 maxlen: 24
154.85.24.0/23 maxlen: 24
154.88.10.0/23 maxlen: 24
154.88.18.0/23 maxlen: 24
154.90.160.0/21 maxlen: 24
154.90.168.0/22 maxlen: 24
154.90.176.0/21 maxlen: 24
154.90.184.0/22 maxlen: 24
154.94.10.0/23 maxlen: 24
154.94.20.0/23 maxlen: 24
154.94.24.0/21 maxlen: 24
154.94.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102059 (0x18eab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 05:22:10 2025 GMT
Not After : Aug 25 05:22:10 2025 GMT
Subject: CN=687f2007-deba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:24:3c:b1:8b:bb:4c:69:d5:96:2c:44:8e:
cb:c9:55:ac:74:98:ce:c9:7b:71:5c:80:01:af:3c:
64:77:4a:e9:59:0b:c0:bd:7e:63:4d:0a:33:5a:66:
58:39:db:a3:4d:15:f2:ea:16:a7:1c:73:62:5d:10:
fb:41:c1:e0:45:17:70:29:a0:da:ed:cd:3d:7d:61:
63:6a:81:90:d3:82:56:d3:6d:9c:74:bb:0d:fd:2c:
b3:7f:78:d0:9a:3e:e0:30:0a:75:d6:c6:41:12:f3:
6c:81:6f:80:dc:b5:84:bb:fa:f8:fe:e7:14:a0:ce:
d2:c8:52:8c:00:ba:2b:b4:9c:df:f8:2d:28:06:8d:
64:76:76:05:06:f5:cc:fa:f7:9b:43:d7:c8:b9:8c:
a6:e4:2d:ad:8f:4a:da:95:4f:78:75:93:cf:42:9b:
46:ec:4d:b7:03:8d:c6:b0:ed:c9:12:cd:dc:53:45:
e9:fd:94:b8:c9:bc:92:f7:c9:62:7d:0e:a5:eb:f4:
7e:86:86:1b:93:d3:1a:9b:bb:67:ae:09:4f:b1:c6:
a4:13:c4:df:c9:73:2f:b4:83:4d:9f:54:48:e1:93:
70:29:42:f0:23:3d:11:93:a7:9b:5c:9f:4f:7a:87:
53:32:bf:cf:80:05:d0:84:4b:f4:b4:0e:66:9d:14:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B8:4A:28:65:66:5C:CB:19:2C:5A:1E:B3:16:74:9C:10:F3:86:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3A1BA4866BB11F0B6DE5C8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.24.0/21
154.85.24.0/23
154.88.10.0/23
154.88.18.0/23
154.90.160.0-154.90.171.255
154.90.176.0-154.90.187.255
154.94.10.0/23
154.94.20.0/23
154.94.24.0/21
154.94.54.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:3d:b0:af:ee:b8:d8:9f:0f:64:3c:f6:ac:96:38:05:13:18:
20:3f:7e:7c:d3:50:11:99:88:9a:55:ee:db:4a:a2:a7:f0:46:
fe:e7:82:93:59:0b:dc:2c:8a:c2:b8:9b:47:f2:ee:b0:66:d7:
49:6e:9b:10:b8:df:ab:41:a1:2d:5d:46:d5:6b:4a:73:05:3d:
a5:5f:2c:c2:eb:b1:66:73:fd:37:54:b9:58:aa:9f:12:63:c9:
98:ac:a1:65:69:15:fa:a9:77:6e:c0:38:b5:b4:0f:91:3a:30:
fa:39:74:69:05:5d:38:97:33:c1:17:0d:c5:2f:d5:fd:52:9d:
86:e2:3d:84:e7:5d:3c:1e:40:9d:41:07:17:6e:db:9b:d2:ca:
1e:d7:ab:cc:b7:e3:93:70:42:3e:f0:67:03:5f:c9:8c:11:40:
43:e0:f5:ec:9e:3e:a7:9b:c1:76:cb:78:45:4f:60:20:d6:d8:
8d:fa:c2:63:9a:56:d8:bd:25:3a:6d:41:a7:6d:a4:10:ae:e8:
40:2d:99:32:65:6e:12:95:f6:bb:03:3e:61:59:a4:97:48:92:
aa:a3:68:b2:0a:6e:53:57:bf:93:0b:8c:33:98:9c:4a:0b:60:
4f:e7:e7:df:6d:5f:22:b4:a3:f1:6a:92:db:75:9a:f2:aa:a6:
a1:f4:d1:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:23:46 2025 by rpki-client