Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13C71A565ABD11F0AE12757ADAE4EC9C.roa
File: 13C71A565ABD11F0AE12757ADAE4EC9C.roa (raw, json)
Hash identifier: AALYI1iAFnJ34G584ybeuUehk0AXizuoJVYL7CeI9Z4=
Subject key identifier: 22:74:12:2E:52:B7:E4:2B:7A:35:42:6F:59:48:3A:D2:CA:18:0A:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13C71A565ABD11F0AE12757ADAE4EC9C.roa
Signing time: Sun 06 Jul 2025 23:00:59 +0000
ROA not before: Sun 06 Jul 2025 23:00:53 +0000
ROA not after: Thu 04 Sep 2025 23:00:53 +0000
asID: 54600
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.90.224.0/19 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101338 (0x18bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 23:00:53 2025 GMT
Not After : Sep 4 23:00:53 2025 GMT
Subject: CN=686b002b-9b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c7:04:55:0a:77:7c:d6:c5:e4:e3:57:9e:cf:
b0:95:d2:af:2f:56:70:62:39:03:99:82:90:f3:2f:
0d:70:7e:33:dd:34:80:af:3f:1a:7e:ee:80:55:01:
af:ca:33:7b:ba:fe:d6:77:3f:af:17:e5:84:85:fc:
b9:d2:9f:f6:bd:de:06:71:80:04:cf:47:a6:b6:c8:
d1:fe:b1:3d:53:dc:71:f1:9f:4a:fc:87:26:2b:f3:
c5:68:6c:81:e7:33:8d:d1:18:fd:67:f7:79:68:e1:
0f:2f:b0:76:9f:a1:e7:5b:20:bd:e4:d6:d2:08:14:
e8:20:57:85:f6:c0:8d:02:c0:5b:b9:31:da:39:c1:
7b:56:e1:8a:7c:03:8f:54:1b:89:4d:71:aa:73:0d:
f2:d9:1b:6d:71:7d:e5:bb:d7:43:60:fb:cc:5e:82:
47:0a:83:9f:f5:ed:f8:2e:a0:ff:17:38:19:79:46:
e3:d9:be:75:af:e0:01:3c:37:67:e1:0a:94:c1:ab:
4f:3d:f1:a4:09:06:01:9e:10:65:d2:af:01:7f:7a:
27:fb:1e:12:42:40:2a:29:d9:df:05:4f:f9:15:ba:
e9:14:90:79:0a:9a:c7:f1:50:49:87:31:2f:30:59:
6a:ba:af:5b:d2:20:33:48:ee:ea:6d:89:f9:59:5a:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:74:12:2E:52:B7:E4:2B:7A:35:42:6F:59:48:3A:D2:CA:18:0A:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13C71A565ABD11F0AE12757ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.90.224.0/19
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:6e:e2:83:86:8b:88:59:c5:e8:b4:3b:ab:a8:d3:31:8c:49:
ca:f7:bf:6f:5d:d8:61:31:81:33:f6:d8:3f:ba:72:f7:d4:77:
3a:cb:64:a9:e2:a8:ea:7d:64:72:1f:3c:ec:e6:48:99:01:2d:
72:21:86:39:45:43:84:c8:37:6d:d3:12:92:1a:de:db:4c:b0:
7c:12:c9:6e:61:fe:ce:86:f6:80:1a:c0:a6:26:76:1a:73:94:
89:93:30:3d:01:3e:ab:72:59:b0:fb:8e:ae:02:9a:2f:13:df:
66:63:4a:31:26:80:aa:84:8a:f0:14:e9:72:b7:b0:7c:5f:8c:
98:4d:45:91:d1:fd:1c:9a:99:3f:72:ad:23:25:66:96:ce:05:
0c:f7:03:64:51:e3:ac:be:f2:60:ab:93:5d:fa:1d:12:a4:06:
46:85:b7:ea:21:bb:c5:30:82:42:98:53:b4:73:d7:76:9d:5d:
4d:35:03:de:01:e5:87:a5:b3:45:d9:39:8b:bf:80:ac:c6:af:
6c:7d:aa:0e:76:f0:98:a7:f1:7e:67:3a:ea:b7:ab:57:fb:71:
85:ff:cc:d8:52:c2:58:89:9f:6d:70:87:f3:22:f6:f7:45:04:
51:8b:1a:a6:bd:03:7c:b9:75:e9:47:fe:4f:7e:37:f7:3a:14:
19:d2:84:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:40 2025 by rpki-client