Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32D92290689111F0B27A69F5DAE4EC9C.roa
File: 32D92290689111F0B27A69F5DAE4EC9C.roa (raw, json)
Hash identifier: Yq44Thg4ArvYxDo0bxT3oGKTi312R+8n9v/G8tRZ0Bw=
Subject key identifier: E3:7B:8F:8C:56:98:B9:BE:0C:92:A9:03:A4:3C:66:7E:DD:54:CA:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32D92290689111F0B27A69F5DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 13:22:08 +0000
ROA not before: Thu 24 Jul 2025 13:22:04 +0000
ROA not after: Fri 05 Sep 2025 13:22:04 +0000
asID: 49505
IP address blocks: 154.209.208.0/24 maxlen: 24
154.209.209.0/24 maxlen: 24
154.209.210.0/24 maxlen: 24
154.209.211.0/24 maxlen: 24
154.209.212.0/24 maxlen: 24
154.209.213.0/24 maxlen: 24
154.209.214.0/24 maxlen: 24
154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.209.223.0/24 maxlen: 24
154.211.9.0/24 maxlen: 24
154.211.10.0/24 maxlen: 24
154.211.11.0/24 maxlen: 24
154.211.16.0/24 maxlen: 24
154.211.17.0/24 maxlen: 24
154.211.18.0/24 maxlen: 24
154.211.19.0/24 maxlen: 24
154.212.28.0/24 maxlen: 24
154.212.29.0/24 maxlen: 24
154.212.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102272 (0x18f80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 13:22:04 2025 GMT
Not After : Sep 5 13:22:04 2025 GMT
Subject: CN=68823380-af3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:7b:f8:16:1c:76:70:01:98:6c:d9:a7:4f:
34:a0:2a:0f:3d:ef:13:4e:79:3b:e9:51:c5:7d:03:
22:03:73:2b:6d:2f:69:7e:31:7e:b5:4e:43:17:01:
a3:1a:f0:75:37:11:38:4f:35:ea:ab:b8:3a:14:4e:
6c:9c:6d:37:de:4a:37:3f:f6:ea:53:de:ea:a2:df:
54:e8:d5:38:13:1b:5b:6f:c7:f7:81:60:9f:70:e2:
48:bd:81:4e:ef:38:33:8e:0d:06:34:83:a6:f8:4a:
86:72:43:90:c4:3a:30:27:f1:8b:02:e2:62:80:2b:
45:cb:d9:b3:68:ad:1b:34:2f:51:bc:ec:63:7d:c6:
7a:5f:5b:f6:59:70:90:06:ec:7d:4d:f4:2e:65:7c:
90:56:00:0b:66:7c:c3:32:a2:c1:44:94:cd:b8:71:
f0:32:a9:34:66:a1:82:5c:fe:52:7c:7d:14:49:b9:
7d:46:34:39:7d:35:e2:79:59:38:9f:a4:35:ea:e5:
03:0e:c4:8f:84:c5:55:92:50:65:24:4b:07:02:b0:
fc:5c:e0:c6:42:0f:3c:fb:21:a9:5f:60:0c:f0:c3:
cd:61:a2:aa:16:03:bd:21:4b:63:c9:b7:c3:38:65:
c9:ac:01:49:1e:2b:80:a4:af:2c:4f:fc:74:d7:fa:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7B:8F:8C:56:98:B9:BE:0C:92:A9:03:A4:3C:66:7E:DD:54:CA:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32D92290689111F0B27A69F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.208.0-154.209.214.255
154.209.221.0-154.209.223.255
154.211.9.0-154.211.11.255
154.211.16.0/22
154.212.28.0/23
154.212.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:15:dc:a3:6e:63:91:b1:23:12:9c:87:9d:2b:73:6e:a6:7d:
6e:d7:91:af:b9:4d:b4:dc:47:76:8c:d1:f1:d9:79:d7:e7:e7:
b4:d4:9d:84:96:52:aa:b8:4d:14:43:62:44:6d:da:4f:64:43:
8d:6d:58:b6:4f:69:2b:f2:b0:8e:2d:02:e5:31:96:e7:b3:34:
10:55:26:93:f6:b7:8a:c9:3f:6a:c0:6c:41:e2:7d:83:44:37:
61:0a:81:f3:08:17:81:da:d5:75:fb:15:87:1d:54:40:15:74:
ab:9f:28:5e:13:c4:fc:78:3f:66:fd:cb:df:1b:77:df:d3:2a:
5e:cd:9a:04:e8:19:89:9f:80:83:23:bd:12:fd:87:b9:5c:d2:
7c:f8:6c:e5:3d:7b:c4:a8:14:5b:37:84:0a:2a:a5:5a:50:bc:
1f:f5:7b:64:c6:07:58:b2:c7:d6:89:3b:28:97:2e:91:02:6d:
50:77:63:d2:71:cf:2e:cd:95:12:5c:c1:7a:6d:cc:5f:9d:aa:
cb:ca:90:b2:11:e3:95:80:3c:3a:78:b8:a1:55:e0:e1:a0:e8:
aa:de:7d:de:32:85:ea:43:63:7e:ad:b1:c0:b9:91:09:aa:46:
e6:4d:d8:2c:2c:09:0c:b8:aa:aa:f1:6e:f0:f5:fa:b4:8b:13:
b0:0b:75:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:32:50 2025 by rpki-client