Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5AF601C6FF111F09CA5ABF6DAE4EC9C.roa
File: D5AF601C6FF111F09CA5ABF6DAE4EC9C.roa (raw, json)
Hash identifier: mkrMDAg9qSv0NNdKwyEJFbMCPGPAmEv34Ufi50hSQXg=
Subject key identifier: 9C:B2:82:11:E6:A3:64:EC:CF:92:77:8C:C7:8E:0D:7A:59:B9:90:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019088
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5AF601C6FF111F09CA5ABF6DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 22:41:31 +0000
ROA not before: Sat 02 Aug 2025 22:41:27 +0000
ROA not after: Sun 05 Oct 2025 22:41:27 +0000
asID: 54600
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.90.224.0/19 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102536 (0x19088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 22:41:27 2025 GMT
Not After : Oct 5 22:41:27 2025 GMT
Subject: CN=688e941b-c92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:ca:6d:f2:16:26:ad:49:a9:21:6a:4c:33:
85:83:2f:f0:dd:9c:c0:55:b3:b4:48:f9:d4:68:75:
f9:24:71:b3:28:d9:60:ce:9b:3b:32:17:09:70:0b:
a9:cc:20:e6:2e:84:fc:95:ea:0f:f1:58:4a:aa:48:
44:4e:5f:25:c4:5b:18:77:58:d4:21:42:cf:35:7c:
d1:33:cf:fb:13:0b:58:6b:0c:48:d0:a9:ba:e6:7f:
19:40:fd:5a:be:0a:94:c5:61:cc:b6:90:b9:cc:12:
63:c6:cb:64:50:fa:c9:19:1c:be:39:b2:e1:8d:4b:
af:d1:27:cb:30:a7:07:2a:55:bf:d2:69:c8:d3:b1:
09:89:c1:07:17:f1:78:ec:7f:40:42:9e:a8:8b:4c:
8a:86:0c:bf:07:e1:14:68:c9:01:eb:93:fa:87:bb:
6f:54:69:a6:e4:d3:b0:fa:af:1e:18:f7:84:1f:06:
ef:8f:62:8f:e2:17:d4:09:d4:19:1c:c2:91:02:c8:
8d:14:29:f2:c2:7f:b7:db:53:52:c5:31:dc:7b:2a:
cf:a1:89:d0:d9:2b:2c:fd:b5:98:63:a1:33:fc:7a:
f6:12:89:6c:c6:1f:0d:91:db:83:a4:5d:a6:62:a5:
e9:b7:09:d5:b6:c6:58:23:17:38:19:d6:03:00:40:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B2:82:11:E6:A3:64:EC:CF:92:77:8C:C7:8E:0D:7A:59:B9:90:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5AF601C6FF111F09CA5ABF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.90.224.0/19
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:12:01:d9:fc:30:30:c3:1d:d3:78:61:15:97:3e:c1:f6:6d:
77:65:d4:26:0e:37:e7:41:87:77:5c:f0:55:29:21:b6:94:e3:
f5:c3:0d:75:5c:b9:4b:a5:c7:9a:ad:75:97:3e:4f:36:05:b1:
b1:ce:0c:04:4e:e5:98:f0:a8:57:b8:69:64:9a:e1:21:46:9c:
53:97:cd:62:e3:e1:ae:6a:40:27:5f:35:24:40:55:03:a6:fc:
e2:a0:cf:58:ed:5a:55:40:9c:04:d0:6a:0a:e4:83:1e:e8:b3:
5b:2a:00:d1:e4:61:d7:d6:cf:1c:c7:20:61:f7:cd:df:c9:7f:
f2:a7:15:61:55:89:e7:92:57:be:ea:21:18:76:a4:7b:fe:1b:
1d:81:eb:df:a8:76:50:f3:82:d4:99:b8:4f:ba:ab:ca:c7:70:
10:0c:09:55:f3:b3:a2:82:a9:1a:6a:07:58:ee:ae:0e:84:97:
22:67:3b:f7:a0:f1:9c:3d:cc:0f:96:8c:5a:45:9b:48:91:4e:
d2:80:1f:3b:52:9c:26:4b:d2:e9:fd:4f:ff:44:48:bb:6d:ec:
cc:5d:f2:e3:6f:ef:91:9c:84:7f:e0:b1:8d:59:29:16:e5:c4:
f6:f5:ef:06:79:08:fd:01:fe:77:53:f9:59:d5:82:0b:3d:2b:
a0:e0:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:41 2025 by rpki-client