Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E59E050A67CC11F0B55DD0F4DAE4EC9C.roa
File: E59E050A67CC11F0B55DD0F4DAE4EC9C.roa (raw, json)
Hash identifier: JlimjOAE3BjghemTUIAHe00DQWwFVIfEXx8hk4FMvKw=
Subject key identifier: 77:05:BC:90:BD:62:4C:40:FD:D4:7E:CA:C1:CA:C6:AC:0F:28:CC:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E59E050A67CC11F0B55DD0F4DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 13:56:58 +0000
ROA not before: Wed 23 Jul 2025 13:56:52 +0000
ROA not after: Mon 15 Sep 2025 13:56:52 +0000
asID: 138915
IP address blocks: 154.203.133.0/24 maxlen: 24
154.203.134.0/24 maxlen: 24
154.203.135.0/24 maxlen: 24
154.203.138.0/24 maxlen: 24
154.203.139.0/24 maxlen: 24
154.203.140.0/24 maxlen: 24
154.203.141.0/24 maxlen: 24
154.203.142.0/24 maxlen: 24
154.203.146.0/24 maxlen: 24
154.203.147.0/24 maxlen: 24
154.203.153.0/24 maxlen: 24
154.203.154.0/23 maxlen: 24
154.203.156.0/24 maxlen: 24
154.203.157.0/24 maxlen: 24
154.203.158.0/24 maxlen: 24
154.203.159.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
154.223.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102188 (0x18f2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 13:56:52 2025 GMT
Not After : Sep 15 13:56:52 2025 GMT
Subject: CN=6880ea29-cb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:fb:2b:4a:0f:f7:65:23:a0:4f:5f:40:48:
81:de:5f:93:5c:73:e4:75:8c:d1:84:d3:a5:ec:5c:
a5:9d:2c:32:ba:8a:62:cf:cc:bc:09:3e:03:2e:9b:
8f:79:20:99:9a:58:ca:58:21:0c:a3:f7:0f:78:87:
52:fe:e8:2a:36:8a:bb:73:77:30:2f:74:c8:88:2e:
ca:bf:bc:44:e2:a4:eb:5b:77:f1:ff:86:0c:c7:65:
fc:15:19:63:00:09:3b:76:1f:3e:ff:30:69:e6:10:
f1:2b:e5:ce:fb:81:65:0f:bd:2a:2c:7f:54:e0:e7:
86:f2:f6:ca:25:7e:c8:66:7c:db:b3:af:e5:44:06:
a7:14:43:da:6c:2f:1d:a7:d5:b3:c3:02:56:86:cf:
4a:24:18:9f:eb:32:ac:52:ed:1e:7e:46:95:78:bb:
cd:1c:e2:4f:27:ff:8a:54:8a:d8:47:4c:30:cb:05:
b6:b2:34:a7:f9:a4:5e:c9:32:ff:d9:a7:9d:e6:d3:
8e:47:1b:2f:65:17:9a:df:cf:27:4f:1a:1a:e5:b7:
37:3f:8e:ec:39:8d:d2:10:5c:1d:81:78:c1:e5:c1:
16:78:7c:6f:59:db:16:f5:75:c1:fc:3b:33:5c:de:
51:44:2b:75:d6:1a:83:24:3f:47:ba:0e:c8:ca:77:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:05:BC:90:BD:62:4C:40:FD:D4:7E:CA:C1:CA:C6:AC:0F:28:CC:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E59E050A67CC11F0B55DD0F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.133.0-154.203.135.255
154.203.138.0-154.203.142.255
154.203.146.0/23
154.203.153.0-154.203.159.255
154.203.164.0/24
154.203.166.0/24
154.203.169.0/24
154.223.16.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c2:c6:2b:8f:f3:88:8e:09:94:84:1b:b2:6f:61:dc:2e:4d:
33:8f:8c:8e:80:b7:e8:e7:65:ef:43:03:99:e4:a6:d8:4b:7d:
3b:ef:43:0c:ac:95:7d:e5:18:fd:39:c5:2e:30:cc:e9:68:5f:
5f:64:7c:ee:16:69:02:ca:ca:60:e9:df:7b:f2:95:74:a4:47:
a9:06:25:8e:b6:2d:49:ae:27:ae:ce:d0:33:d8:13:a3:30:45:
de:0b:f0:29:d4:70:6a:93:a7:08:29:5f:2a:82:ab:d7:72:75:
08:42:95:4b:e9:af:17:3e:75:17:54:9c:52:5e:7d:7f:16:d2:
aa:66:6e:d2:bf:26:6d:fd:21:df:cc:48:8f:34:bb:2f:e4:1a:
d4:5e:63:a6:a4:f6:39:7b:89:2b:bd:45:82:12:c8:7e:6c:3c:
e5:63:a5:6d:a5:81:f9:64:2c:32:7a:18:35:aa:a9:d6:b3:f2:
ce:03:8c:3a:99:74:9b:2a:7d:d8:79:aa:a7:6a:56:ca:ca:01:
2d:b3:83:23:cd:39:86:85:65:bf:93:04:68:86:20:97:2d:2f:
45:b8:37:04:4e:6a:09:8e:f2:fb:b2:a2:d9:17:23:e1:a4:61:
35:4f:f5:e2:2a:e5:ba:cf:54:3b:4e:d9:7d:50:ba:d4:71:b8:
f5:c6:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:02:01 2025 by rpki-client