Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/169943CA512711F0A69F73A1DAE4EC9C.roa
File: 169943CA512711F0A69F73A1DAE4EC9C.roa (raw, json)
Hash identifier: UAHUWncc+UFUZO0ZSapZ9EoZRaNM7XT5aW1S8fBSgeM=
Subject key identifier: 5A:65:39:00:E4:1E:06:1F:15:7F:19:47:1F:EC:EA:7B:2B:6F:D8:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01888C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/169943CA512711F0A69F73A1DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 18:14:38 +0000
ROA not before: Tue 24 Jun 2025 18:14:33 +0000
ROA not after: Fri 15 Aug 2025 18:14:33 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
154.203.153.0/24 maxlen: 24
154.203.154.0/23 maxlen: 24
154.203.156.0/24 maxlen: 24
154.203.157.0/24 maxlen: 24
154.203.158.0/24 maxlen: 24
154.203.159.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
154.223.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100492 (0x1888c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 18:14:33 2025 GMT
Not After : Aug 15 18:14:33 2025 GMT
Subject: CN=685aeb0e-705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:42:63:78:c2:30:81:7b:17:11:fa:c0:d6:
c6:c9:d7:ff:23:a6:7f:d4:00:b1:e7:60:c9:75:91:
39:2a:5e:03:53:33:b0:b4:10:7a:8b:54:ae:d0:7f:
c5:c1:8a:ea:98:64:a8:ae:66:1a:2e:4e:d0:a5:d6:
f4:71:6d:a0:8c:02:8a:dd:7e:04:06:ea:c6:e9:33:
bf:7e:c7:ed:6e:60:e3:18:36:3c:36:72:8d:20:3f:
b3:03:1a:b1:e7:e9:91:34:c3:68:f3:58:4e:21:3d:
0a:a7:b7:d9:be:31:b9:cb:6d:9c:4b:86:eb:4d:70:
ef:a2:e0:7d:11:9b:29:5e:07:9e:f8:7a:80:c0:26:
6b:17:72:b6:fc:0e:68:38:e3:1f:61:97:8a:75:31:
98:8d:9b:af:d1:c2:a9:8a:37:fe:f2:0e:da:65:e4:
5f:cf:d7:34:17:5e:97:5d:3f:ae:8c:2c:3d:cb:f5:
c0:f5:ba:12:56:76:8f:9b:ef:e1:4b:99:38:97:1b:
57:bb:a0:ce:ee:80:dd:40:8b:67:1b:f4:8f:cd:5d:
1f:b7:c3:1d:5c:9e:b8:95:d8:b5:52:c1:75:b9:60:
56:4a:d6:f8:f3:ca:9d:c2:74:7d:87:ca:7b:32:bf:
49:f0:ef:56:81:d0:46:74:93:1b:a5:9c:e0:e3:f3:
b5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:65:39:00:E4:1E:06:1F:15:7F:19:47:1F:EC:EA:7B:2B:6F:D8:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/169943CA512711F0A69F73A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0/24
154.203.153.0-154.203.159.255
154.203.164.0/24
154.203.169.0/24
154.223.16.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:82:dc:8b:32:7b:ab:a5:0b:d0:ca:af:95:d4:72:3a:22:af:
dc:47:38:ef:4c:1e:63:ef:d8:ff:ed:61:ef:8f:8b:c1:df:e2:
59:b4:d2:48:73:f7:cf:bf:4c:a5:12:9f:7b:1b:98:60:18:e6:
b2:c7:c2:70:00:a6:01:f1:7c:a8:e6:f8:99:ef:e8:b8:48:7d:
46:54:ab:89:4f:e0:55:53:1f:af:e1:ab:89:ec:da:ae:d8:4f:
03:60:9c:46:51:c1:30:a9:39:24:c8:6d:2d:f0:85:52:73:f9:
b3:a8:09:18:75:c7:d8:17:40:71:bb:7f:02:d9:17:fd:bf:ec:
37:02:82:a3:7a:44:7e:c2:29:54:74:08:7a:48:f9:56:0f:17:
c4:73:cf:d3:ad:68:23:07:66:db:f5:20:c8:5b:5b:8b:57:07:
5b:a9:22:57:71:df:4f:c7:e6:cb:f2:10:0a:b5:fb:70:58:47:
bb:96:43:52:60:83:c8:48:1c:62:46:84:e1:0d:c0:28:89:55:
10:c8:bc:b6:db:4b:83:48:c0:45:3a:d6:42:67:84:43:88:70:
33:80:f7:47:8e:ab:72:06:2b:5c:e3:0b:ba:bb:03:28:7b:16:
a2:a4:92:d0:06:c4:14:45:f2:fc:57:42:3b:db:bd:1e:63:01:
03:b8:39:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:22:40 2025 by rpki-client