Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F75A3530332811F0A5248CBEDAE4EC9C.roa
File: F75A3530332811F0A5248CBEDAE4EC9C.roa (raw, json)
Hash identifier: jO/GdVj36PXQOdY2dyC+8K+YD7sAy6u48TirMFkXWV8=
Subject key identifier: C7:0E:49:10:BB:D8:9C:86:CE:A5:20:AA:5C:68:6A:13:4C:B7:08:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01813E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F75A3530332811F0A5248CBEDAE4EC9C.roa
Signing time: Sat 17 May 2025 14:12:29 +0000
ROA not before: Sat 17 May 2025 14:12:24 +0000
ROA not after: Tue 16 Jun 2026 14:12:24 +0000
asID: 984
IP address blocks: 154.193.35.0/24 maxlen: 24
154.193.42.0/24 maxlen: 24
154.193.43.0/24 maxlen: 24
154.193.44.0/24 maxlen: 24
154.193.45.0/24 maxlen: 24
154.193.46.0/24 maxlen: 24
154.193.47.0/24 maxlen: 24
154.193.48.0/24 maxlen: 24
154.193.67.0/24 maxlen: 24
154.193.84.0/24 maxlen: 24
154.194.192.0/24 maxlen: 24
154.194.193.0/24 maxlen: 24
154.194.194.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.194.196.0/24 maxlen: 24
154.194.197.0/24 maxlen: 24
154.194.198.0/24 maxlen: 24
154.194.199.0/24 maxlen: 24
154.194.200.0/24 maxlen: 24
154.194.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98622 (0x1813e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 14:12:24 2025 GMT
Not After : Jun 16 14:12:24 2026 GMT
Subject: CN=6828994d-c2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:d0:8e:db:19:b1:a1:63:fb:99:6a:02:d3:
d3:1c:4f:ba:2c:f2:95:ca:cc:b7:39:7d:93:b1:e5:
26:f9:80:59:e3:4a:8d:03:b4:f3:82:93:cb:07:63:
eb:e6:b3:06:3a:18:32:b6:18:c1:be:93:22:7d:71:
b7:ee:f9:5e:83:7b:66:f2:90:3d:10:ea:0e:93:8a:
61:cc:e7:32:fc:88:4b:28:6a:2d:8c:8a:0f:69:54:
12:ba:db:e2:78:03:b1:1c:8d:ba:eb:16:37:eb:50:
f8:39:f3:59:e2:ba:34:5c:b3:a9:62:6b:0d:74:84:
d3:40:a4:f9:09:87:73:10:61:0d:bb:c7:0f:21:5e:
fa:d5:d0:db:48:18:dc:38:93:b4:10:1a:d8:52:99:
13:dd:e9:f3:ac:74:32:8b:fb:43:cf:5e:f4:86:f9:
58:8e:81:16:03:69:d2:4c:ec:24:82:74:56:59:1d:
ba:89:a4:6c:82:03:12:92:dd:e6:60:0c:cf:a6:82:
26:84:e9:af:e7:b5:e0:19:47:92:ea:3e:42:89:71:
10:55:1c:7b:14:81:76:5f:86:7f:cb:ed:48:11:37:
61:8d:86:88:ea:fb:c1:c7:58:e1:8b:21:bc:41:6a:
2d:46:4f:44:4a:4b:ae:91:41:b3:3f:01:e4:aa:b2:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0E:49:10:BB:D8:9C:86:CE:A5:20:AA:5C:68:6A:13:4C:B7:08:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F75A3530332811F0A5248CBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.35.0/24
154.193.42.0-154.193.48.255
154.193.67.0/24
154.193.84.0/24
154.194.192.0-154.194.201.255
Signature Algorithm: sha256WithRSAEncryption
33:29:a8:9e:7c:69:2b:b1:05:b4:7b:1b:a9:90:5c:b6:c8:39:
01:da:ae:c1:00:8a:0d:53:de:5d:58:74:5e:af:90:a8:c2:eb:
d8:5a:1e:99:66:a3:73:11:fc:cd:5d:6f:e7:ec:76:db:89:1e:
fb:43:ac:11:4b:bc:c2:5d:fc:09:b2:db:5e:2c:d7:1c:19:4a:
ff:f8:b7:04:cb:7e:15:6c:82:7b:bc:a0:bf:b6:dc:e2:ad:59:
9e:61:49:73:97:94:30:ec:16:10:64:56:dc:26:98:14:d7:2f:
27:41:cf:7a:f8:c6:92:3a:a3:c5:82:1e:8f:20:5a:24:9b:91:
78:f8:8c:12:0a:b8:0f:28:9a:43:a3:cb:09:1e:00:64:80:1c:
ae:0c:57:8a:87:4a:47:ad:b5:8a:27:78:eb:b7:1b:21:5a:fa:
dc:94:7c:ac:83:22:42:82:75:41:bc:07:d0:0c:ff:46:f7:90:
1b:e8:94:4b:d4:36:cd:b2:25:e5:c5:91:28:ed:d2:80:a1:73:
bb:c1:a1:58:31:88:3c:0c:9d:0e:b9:7f:bf:f4:66:85:28:d8:
82:4b:dc:42:ac:4d:7e:4e:56:45:af:63:be:6f:48:f5:4d:d3:
77:1f:91:7f:d3:a2:0d:f8:8a:1a:28:22:ef:a9:b3:44:5e:0f:
74:05:20:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:47:57 2025 by rpki-client