Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA598186439811F0BA3CA0DBDAE4EC9C.roa
File: DA598186439811F0BA3CA0DBDAE4EC9C.roa (raw, json)
Hash identifier: k8PzqwM4WxHcg6yC0iw87UIJQavf0XSOhHQVAjcXK0A=
Subject key identifier: EA:72:F8:CF:85:BD:DB:05:70:A0:A1:EC:00:D2:7B:83:86:1A:96:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018560
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA598186439811F0BA3CA0DBDAE4EC9C.roa
Signing time: Sat 07 Jun 2025 12:13:43 +0000
ROA not before: Sat 07 Jun 2025 12:13:38 +0000
ROA not after: Mon 14 Jul 2025 12:13:38 +0000
asID: 203020
IP address blocks: 154.207.32.0/20 maxlen: 24
154.207.48.0/22 maxlen: 24
154.207.52.0/23 maxlen: 24
154.207.56.0/23 maxlen: 24
154.207.59.0/24 maxlen: 24
154.207.60.0/22 maxlen: 24
154.209.224.0/20 maxlen: 24
154.209.240.0/21 maxlen: 24
154.209.248.0/23 maxlen: 24
154.209.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99680 (0x18560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 12:13:38 2025 GMT
Not After : Jul 14 12:13:38 2025 GMT
Subject: CN=68442cf7-59d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:08:02:ff:bd:b1:7f:b5:32:87:19:61:7e:
48:22:8b:0f:a7:b8:05:47:52:cb:a3:42:ff:7b:70:
bd:c9:77:bb:8d:87:15:08:3b:11:bf:f0:d3:28:52:
d2:d2:3a:3f:c2:cf:00:a3:39:ea:a5:10:0a:84:bf:
04:5f:30:db:e5:30:19:7b:c6:33:d9:47:45:32:d2:
ed:91:05:22:3f:c5:4d:c3:b1:47:e9:8f:4f:aa:cf:
98:9d:76:a9:1b:d9:2e:bf:ca:6b:71:ce:62:93:e8:
4d:59:03:92:e2:3b:90:e3:5d:fd:30:46:d6:6b:57:
56:45:fb:a9:14:ba:53:a8:e8:1b:66:8a:85:c9:7f:
e6:2d:25:e0:6f:0a:d5:15:34:bf:c2:78:57:05:3b:
f6:3f:28:54:79:cd:0c:b7:85:28:05:29:4c:37:e4:
c0:6b:e6:74:93:3d:f5:97:c1:59:da:62:3c:ef:d5:
5f:f2:83:cb:e7:61:9a:02:a5:fd:9c:0e:aa:48:3e:
cf:6c:39:41:64:a8:d0:5d:61:fb:4e:86:d6:b5:3c:
f2:7c:a5:a8:9d:3f:35:a5:db:3a:b6:15:f9:38:e1:
c4:1f:73:ed:ce:59:d9:7b:79:ee:bb:d0:f7:8c:0d:
91:06:64:32:86:03:33:7a:f4:11:eb:61:83:11:66:
4d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:72:F8:CF:85:BD:DB:05:70:A0:A1:EC:00:D2:7B:83:86:1A:96:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA598186439811F0BA3CA0DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.32.0-154.207.53.255
154.207.56.0/23
154.207.59.0-154.207.63.255
154.209.224.0-154.209.250.255
Signature Algorithm: sha256WithRSAEncryption
58:3f:b1:42:7c:91:b0:e4:5b:11:6d:59:cc:f9:28:a2:4c:38:
78:85:82:27:51:43:78:c4:7b:7b:0d:20:3e:eb:fb:3c:0a:44:
7d:d7:0e:ec:05:d0:aa:56:a8:cb:58:88:ac:a6:92:2a:7d:60:
10:d8:29:73:d1:ba:52:83:e2:d7:f0:84:12:b8:91:e5:10:a2:
37:cb:49:8a:86:d1:fb:6d:f6:0c:4f:c1:92:95:fc:65:20:1b:
34:94:de:62:db:e7:29:66:02:3c:77:79:b2:1b:d4:d7:a6:8b:
dc:e5:de:73:ee:5d:52:c0:54:ad:6c:1a:ea:e4:e8:7f:2a:2e:
5c:ef:ae:5b:df:fd:3c:3c:b1:ba:cc:f6:22:35:e0:f5:f9:31:
8f:57:7f:5a:48:74:e6:38:e2:30:c6:51:4d:b8:a6:ba:3e:b6:
56:0c:28:1e:2a:8f:3d:90:5c:00:24:a5:3a:bc:c5:b9:5b:9f:
1b:fd:39:4d:d3:b2:2a:76:4f:89:a3:6a:0a:4d:9c:93:7e:31:
59:b8:65:2d:79:0e:af:96:d3:88:7a:86:f0:d5:25:dd:ae:c5:
88:a3:6d:0a:8d:98:60:6e:f8:e4:bc:d0:0a:54:4c:db:b7:33:
31:06:5b:0f:25:18:b0:93:07:32:ef:fe:ab:f0:db:a6:20:96:
01:d6:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:21:16 2025 by rpki-client