Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/096E4A6A631511F096E114BBDAE4EC9C.roa
File: 096E4A6A631511F096E114BBDAE4EC9C.roa (raw, json)
Hash identifier: zV+pwbN8L6SEbDEpBcqJQ4V1sgmLm8WAVNYu+qDVovw=
Subject key identifier: 6E:D9:0F:FB:A6:5C:0C:D7:F3:4E:58:EB:87:56:F5:C2:38:C2:97:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/096E4A6A631511F096E114BBDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 13:50:46 +0000
ROA not before: Thu 17 Jul 2025 13:50:40 +0000
ROA not after: Sat 30 Aug 2025 13:50:40 +0000
asID: 62240
IP address blocks: 154.194.72.0/24 maxlen: 24
154.194.73.0/24 maxlen: 24
154.194.74.0/24 maxlen: 24
154.194.89.0/24 maxlen: 24
154.194.92.0/24 maxlen: 24
154.194.93.0/24 maxlen: 24
154.194.98.0/24 maxlen: 24
154.196.18.0/24 maxlen: 24
154.196.22.0/24 maxlen: 24
154.196.50.0/24 maxlen: 24
154.196.54.0/24 maxlen: 24
154.196.55.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
154.196.62.0/24 maxlen: 24
154.196.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101952 (0x18e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 13:50:40 2025 GMT
Not After : Aug 30 13:50:40 2025 GMT
Subject: CN=6878ffb5-2cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:e8:97:84:57:e8:cc:06:49:27:cc:94:9d:
96:dc:7c:d6:5a:ef:6c:f3:c6:7a:86:b1:f3:60:0a:
be:c1:85:3f:45:ec:62:a8:49:7f:81:1d:15:bc:81:
86:36:45:a6:39:50:08:32:94:8c:79:6d:18:22:e2:
90:20:36:00:e9:f6:d5:7d:8d:ba:95:40:ba:8f:f5:
69:5e:5e:73:29:40:e2:11:95:2e:89:7a:1f:8c:a3:
f9:66:67:e7:7c:4b:06:bc:a5:fc:c8:d5:7a:a7:f9:
4d:d6:d2:c3:7d:c6:43:da:b5:e6:6f:77:b2:55:4f:
c3:2d:93:20:eb:95:77:c7:67:b2:03:4c:25:36:91:
71:69:b8:da:74:64:00:54:ce:90:9e:36:ab:0d:81:
ed:8c:c6:90:07:6b:ab:32:91:ba:d7:c6:de:07:fc:
a0:5b:72:ac:00:af:39:d5:2c:71:39:78:de:a0:3d:
92:62:ae:c5:8c:65:8d:08:ce:7e:43:1d:b0:fc:4a:
77:e1:b4:1e:32:e2:46:76:79:01:f4:36:0f:44:ad:
9a:af:1a:d6:86:5c:5d:53:59:bb:fc:14:a5:d1:42:
bd:89:47:08:15:d9:e1:d8:2f:e3:64:46:6c:4f:2a:
8d:49:25:33:3a:ef:dd:98:ae:d4:23:4c:00:b0:af:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D9:0F:FB:A6:5C:0C:D7:F3:4E:58:EB:87:56:F5:C2:38:C2:97:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/096E4A6A631511F096E114BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0-154.194.74.255
154.194.89.0/24
154.194.92.0/23
154.194.98.0/24
154.196.18.0/24
154.196.22.0/24
154.196.50.0/24
154.196.54.0-154.196.62.255
154.196.64.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:ca:2c:89:f9:c7:44:8a:ff:b5:1d:fd:10:1d:17:26:4d:ee:
15:cf:c9:68:b6:56:91:3e:3e:8e:f5:90:2d:e3:39:4d:9f:b8:
89:08:c9:52:a8:d3:78:8e:56:13:b6:17:94:f0:e8:b3:96:36:
c2:bd:1f:53:07:83:93:81:6a:88:67:cf:07:22:4f:81:2e:4f:
df:a1:cf:fc:ba:b0:53:a0:89:dc:3b:aa:c0:f2:12:0e:0e:17:
fb:9b:a3:42:01:7a:6d:21:23:a1:f1:02:3e:23:ee:70:1e:f9:
dc:86:41:4f:4a:6b:4f:24:ec:3b:7b:19:77:63:42:81:7d:4c:
b7:24:ee:1c:a4:34:63:18:51:7e:1c:e8:44:6c:92:99:5c:2f:
2e:3f:fc:58:f1:6a:94:25:39:d5:1b:22:19:5c:32:55:17:aa:
cf:bb:d8:d8:04:84:e0:1e:de:21:0d:a3:8f:b6:c8:86:ec:e7:
e9:b2:9c:d3:b2:f8:4b:89:d9:20:d9:c2:65:06:02:01:08:e5:
16:fa:28:b7:3f:38:f6:3c:42:d6:6a:8a:c0:43:58:62:b6:ef:
b8:55:5d:a4:b5:6b:77:8f:2b:e0:f5:a9:0b:0e:61:1d:de:4f:
e0:5d:86:15:f9:54:ef:0c:1b:09:74:b3:6c:ca:16:fa:5f:f6:
ad:57:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:23 2025 by rpki-client