Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7D5E43E6FE111F0AE380F91DAE4EC9C.roa
File: D7D5E43E6FE111F0AE380F91DAE4EC9C.roa (raw, json)
Hash identifier: Tpq1x3ReR2ZpAS62MfQBT2YBeVAnoe+J8dlVff+/3fM=
Subject key identifier: 80:E5:BD:05:CD:15:95:79:43:07:98:59:C2:1B:62:38:C2:DE:A0:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019074
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7D5E43E6FE111F0AE380F91DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 20:47:03 +0000
ROA not before: Sat 02 Aug 2025 20:46:58 +0000
ROA not after: Wed 24 Sep 2025 20:46:58 +0000
asID: 139923
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102516 (0x19074)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 20:46:58 2025 GMT
Not After : Sep 24 20:46:58 2025 GMT
Subject: CN=688e7947-9df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:04:f4:82:42:b4:44:6f:6e:2c:14:ac:78:
c7:9d:e2:22:91:ac:45:43:32:9e:48:9c:ab:38:ab:
e6:43:d2:b0:40:47:1e:76:d1:e7:4a:c7:4c:de:3d:
81:68:54:a0:1d:5e:03:33:1d:98:4a:62:5c:84:d0:
e1:8c:ed:fc:67:2c:ca:36:ba:c9:83:e8:9f:f7:5d:
ba:fb:51:53:96:9a:93:6c:bb:cc:11:b4:88:a6:33:
4f:09:39:1c:1f:89:85:25:aa:43:03:31:c2:42:c5:
57:c4:a7:e6:47:ec:c2:8f:30:fd:0a:20:47:34:0b:
72:27:7b:7d:f8:cc:d1:7c:1a:a9:b5:33:a1:1c:4e:
6d:2c:d9:8f:7f:3b:38:95:80:b6:bd:4f:54:42:cd:
1b:fe:fb:84:04:53:af:63:76:27:32:3c:9b:8c:cc:
83:2b:ba:8f:1b:25:fd:84:96:13:e3:b3:b5:19:03:
1d:bf:ee:2e:7b:47:ba:1d:81:c6:e9:dc:95:a6:06:
1c:9f:e1:0d:cc:ee:09:70:47:06:f4:04:8e:e7:75:
80:45:43:45:c9:46:12:e3:8c:3a:b7:86:62:1c:71:
6e:33:7f:16:9d:8a:20:9d:07:09:c9:9b:de:0e:9b:
c8:80:ad:15:eb:6b:a4:40:47:b2:43:fd:32:8e:71:
9c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E5:BD:05:CD:15:95:79:43:07:98:59:C2:1B:62:38:C2:DE:A0:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7D5E43E6FE111F0AE380F91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e1:b4:fe:75:4a:8e:64:91:d4:b4:26:61:70:d6:63:7b:e6:
94:ba:ac:43:e0:d9:39:5b:4a:6f:7c:93:51:5f:d4:3f:0a:ae:
ac:48:28:9c:82:74:a8:eb:cf:e9:91:af:0c:34:8f:88:6c:c2:
82:78:cd:ff:7c:a5:88:45:97:3e:44:1d:f9:4b:21:06:15:93:
d4:87:38:ef:0f:79:99:5c:27:a4:e9:77:42:ec:15:02:74:48:
77:3c:a1:5e:eb:bc:02:1e:09:5a:a8:c7:21:d7:15:db:1a:4a:
5b:7e:3e:65:70:48:74:a8:19:59:e7:e0:77:a4:32:de:1e:d3:
b2:79:a3:4a:29:90:eb:8b:c8:a7:fb:b5:04:13:11:08:42:5a:
61:f1:3f:6d:21:ba:23:6a:cb:53:be:05:d5:3c:42:b5:23:49:
92:7c:12:e6:70:93:b6:58:5c:20:cc:37:f2:a0:79:83:53:28:
44:fc:cb:8c:b8:b9:6f:83:e5:17:75:8c:4a:ee:34:00:d9:b8:
ff:b2:42:3d:df:dd:b0:46:6c:60:4b:6d:c2:12:c2:18:19:07:
47:4a:11:38:dd:55:c2:f3:e4:2d:b8:e8:7f:01:db:48:10:0a:
14:f7:8b:53:15:72:e8:59:63:d6:d4:23:80:77:f4:fc:1e:e2:
04:ec:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:27 2025 by rpki-client