Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266462A4617011F0A0063D78DAE4EC9C.roa
File: 266462A4617011F0A0063D78DAE4EC9C.roa (raw, json)
Hash identifier: RF7VOvYxVbjjs6p5XfxEji8CFb0Hlnmdm3tzocJvRgY=
Subject key identifier: 64:BD:CD:E6:B1:08:F9:6E:91:0A:73:C6:65:43:D8:BE:28:82:11:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266462A4617011F0A0063D78DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 11:37:56 +0000
ROA not before: Tue 15 Jul 2025 11:37:51 +0000
ROA not after: Mon 04 Aug 2025 11:37:51 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101834 (0x18dca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 11:37:51 2025 GMT
Not After : Aug 4 11:37:51 2025 GMT
Subject: CN=68763d94-9d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:2f:52:10:9b:71:69:8b:39:49:7f:62:bd:
a1:53:3c:a7:60:cd:15:bc:c2:a3:42:b3:61:fa:f9:
da:76:49:62:02:94:d5:e8:61:8b:69:ec:bf:c9:05:
41:9b:f2:94:3b:35:3f:56:35:e3:57:fa:17:65:49:
ec:6b:0c:77:62:65:d7:0a:dd:c7:50:e3:02:c9:38:
81:84:41:31:92:4e:2f:26:64:62:46:5b:fd:3a:7d:
09:9a:00:6d:c6:7c:d0:e7:a2:6a:8d:2a:a8:cd:68:
cf:bd:c7:57:e6:e0:6c:14:55:93:b1:bb:df:53:06:
71:a2:dd:04:a0:05:dc:4e:33:fa:1f:92:2b:a4:9d:
3b:a2:b7:e9:32:12:90:3c:cc:6c:fd:c7:77:22:44:
34:b0:a9:b6:ed:93:72:84:ad:33:80:c2:3a:e1:21:
86:53:bb:9b:1c:ec:6a:6e:c8:f9:af:05:34:b9:ec:
da:e2:9d:4c:88:e4:dc:51:13:eb:8b:d5:03:da:31:
46:b8:36:d7:de:13:a3:91:8a:7e:95:e3:b9:cf:f2:
48:68:7f:cb:fc:64:ce:cb:90:9d:af:ac:e3:e6:c1:
9d:14:b0:58:32:f5:70:47:f1:aa:4a:c2:3b:8f:0a:
6d:af:0d:48:ad:07:98:db:1d:9e:b5:63:a0:5c:0d:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:CD:E6:B1:08:F9:6E:91:0A:73:C6:65:43:D8:BE:28:82:11:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266462A4617011F0A0063D78DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
154.209.160.0/19
154.214.64.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
53:d8:45:8e:7e:da:b8:58:48:0a:41:1e:18:bc:71:d9:91:6d:
af:04:dc:08:87:ec:98:b7:0b:8d:ac:2f:66:2a:26:96:4f:35:
ac:40:7e:45:83:84:a1:57:6d:23:bd:20:47:86:a6:08:53:39:
21:6b:88:a2:a4:3d:cc:e7:3f:ab:df:0c:82:60:ce:fb:e7:01:
89:71:de:4d:10:6f:f5:5e:03:21:d0:ae:5f:0f:aa:ab:95:21:
58:7e:7d:ba:c2:8f:78:8e:08:1e:d9:4b:9c:55:34:22:b3:9e:
fc:3b:c8:a5:75:0f:23:7a:f4:69:f5:6a:df:a2:52:82:05:49:
ba:37:e8:2f:d1:07:05:d3:dc:f2:51:29:73:17:51:d9:9f:36:
da:61:f4:34:75:e3:f5:0b:39:f0:f1:ab:ef:a9:31:f9:8b:ab:
c8:22:53:d5:b9:9e:8f:c8:02:6e:25:1e:29:44:9a:d2:a7:fd:
f2:13:ec:ce:00:2c:60:ec:c5:29:c4:bc:97:38:c5:cf:73:44:
1b:07:4c:00:20:09:d5:39:70:5b:f2:be:8f:d8:d1:18:b8:29:
2a:e3:2b:c7:ae:3d:83:71:7c:0f:9c:b4:33:c5:82:ed:26:6b:
50:69:fe:1a:43:b3:0b:d0:90:46:40:b7:b9:e4:d9:ed:2a:fe:
96:a9:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:13 2025 by rpki-client