Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26684DFC631811F080A60ECDDAE4EC9C.roa
File: 26684DFC631811F080A60ECDDAE4EC9C.roa (raw, json)
Hash identifier: 6+YHwii2ZLGNWsr3T4NftdDsSQUHk5//hSYPBzzEiJw=
Subject key identifier: 4C:73:E2:26:88:6D:78:7C:B0:72:3C:A3:DD:B1:0B:4F:F9:AB:DF:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26684DFC631811F080A60ECDDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 14:13:03 +0000
ROA not before: Thu 17 Jul 2025 14:12:58 +0000
ROA not after: Sun 31 Aug 2025 14:12:58 +0000
asID: 62240
IP address blocks: 154.196.81.0/24 maxlen: 24
154.196.87.0/24 maxlen: 24
154.223.208.0/24 maxlen: 24
154.223.209.0/24 maxlen: 24
154.223.210.0/24 maxlen: 24
154.223.211.0/24 maxlen: 24
154.223.212.0/24 maxlen: 24
154.223.213.0/24 maxlen: 24
154.223.214.0/24 maxlen: 24
154.223.215.0/24 maxlen: 24
154.223.216.0/24 maxlen: 24
154.223.217.0/24 maxlen: 24
154.223.218.0/24 maxlen: 24
154.223.219.0/24 maxlen: 24
154.223.220.0/24 maxlen: 24
154.223.221.0/24 maxlen: 24
154.223.222.0/24 maxlen: 24
154.223.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101958 (0x18e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 14:12:58 2025 GMT
Not After : Aug 31 14:12:58 2025 GMT
Subject: CN=687904ef-8277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:7e:1c:cc:42:4e:5a:9f:d5:ca:fb:6b:79:
f5:72:8d:38:19:ad:09:73:d5:50:3f:c9:e7:1b:52:
75:d0:fc:ab:1b:23:42:08:86:78:3b:a5:61:97:3b:
48:2e:25:b8:b2:22:db:d9:57:2f:b2:9f:b7:88:e7:
f6:1c:38:72:e1:29:21:8f:66:a1:0d:01:f3:c3:5c:
58:b6:6e:d5:96:9d:77:05:44:db:4c:84:bb:22:5c:
4c:70:b9:1e:cc:ce:87:4b:f7:bf:96:a0:a5:76:07:
32:d0:78:56:68:f6:db:ee:83:00:79:ce:47:a3:8b:
3b:cd:41:36:47:37:81:be:47:3a:2c:d6:92:13:44:
e1:11:57:62:97:1c:df:ef:0d:e5:19:84:ca:a7:b5:
7e:d0:0c:bf:1b:6b:ec:cf:4f:78:9d:d3:ef:e0:78:
31:2f:f2:7d:6f:65:db:69:b0:2b:ae:e2:b8:87:ca:
10:00:96:a1:ac:0f:d6:61:6e:f8:fe:22:c5:07:c8:
86:2c:d0:a4:a8:40:92:df:cb:8e:09:3b:46:65:27:
a5:ed:dd:ff:5a:62:ce:c5:b4:f8:4e:17:0e:6f:d7:
fa:ca:e2:9b:b8:0b:ef:1c:19:0c:cf:b1:e1:b9:58:
aa:37:fe:b0:c5:a3:9a:a0:3d:b5:45:47:75:fb:25:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:E2:26:88:6D:78:7C:B0:72:3C:A3:DD:B1:0B:4F:F9:AB:DF:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26684DFC631811F080A60ECDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.81.0/24
154.196.87.0/24
154.223.208.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:46:ae:90:72:e4:a1:d2:4a:01:cd:7a:69:61:01:38:d6:69:
15:50:0c:8a:80:1c:b0:85:4a:44:62:79:e1:9c:b3:bc:1e:00:
c1:3c:bd:f7:71:d0:01:64:d8:44:c8:5a:47:43:1e:13:84:d2:
b2:f0:14:5e:9d:d3:52:84:67:76:16:b2:8f:f4:b6:3a:2c:78:
6e:63:d4:f9:e0:e1:07:53:b5:81:49:ab:dd:70:f6:22:f8:53:
67:1c:71:71:71:81:b2:93:67:7a:71:13:e5:db:88:90:d8:e4:
60:8f:43:d0:c5:06:0a:3d:89:b9:3d:23:8a:d9:ba:fd:e6:27:
eb:2f:bc:70:17:25:e4:b8:58:77:78:1e:0a:ea:24:62:b5:c9:
34:93:2f:ce:93:36:75:f7:e3:d2:d2:7b:31:bd:d9:8b:95:c5:
b8:2c:83:61:24:02:d7:66:5e:04:ba:8f:f3:e4:2a:a8:33:2c:
74:d4:42:46:6a:3a:91:83:f4:2a:50:05:f8:a7:85:e9:29:13:
67:a1:2f:88:c3:77:f8:a1:0c:7e:20:c1:68:e4:4a:16:13:3c:
ba:1e:d2:62:6c:2f:26:74:20:51:84:d2:75:ae:41:db:60:98:
41:25:1a:dc:f2:6f:50:01:ef:c6:34:52:e9:16:5b:31:83:6a:
dc:d0:9f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:10 2025 by rpki-client