Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C01EFC859C311F085623CA9DAE4EC9C.roa
File: 3C01EFC859C311F085623CA9DAE4EC9C.roa (raw, json)
Hash identifier: cDblFCtDgSyOSAxNBHgnURoKFhNa5JsSU/IyKxcnlb8=
Subject key identifier: 56:AF:18:4C:72:5B:30:9C:21:82:9F:25:1B:D0:53:2F:EE:C3:C4:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C01EFC859C311F085623CA9DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 17:12:31 +0000
ROA not before: Sat 05 Jul 2025 17:12:26 +0000
ROA not after: Wed 03 Sep 2025 17:12:26 +0000
asID: 150008
IP address blocks: 154.206.17.0/24 maxlen: 24
154.206.18.0/24 maxlen: 24
154.210.213.0/24 maxlen: 24
154.210.224.0/24 maxlen: 24
154.210.225.0/24 maxlen: 24
154.210.226.0/24 maxlen: 24
154.210.227.0/24 maxlen: 24
154.210.228.0/24 maxlen: 24
154.210.229.0/24 maxlen: 24
154.210.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101164 (0x18b2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 17:12:26 2025 GMT
Not After : Sep 3 17:12:26 2025 GMT
Subject: CN=68695cff-9032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:12:d6:d9:ce:5a:67:fd:f2:c4:4e:05:ec:
2d:c2:5e:3f:d6:3e:cc:d6:c0:2f:92:3c:63:41:3e:
ff:a4:4d:07:ab:2e:e2:82:42:26:17:6a:42:36:06:
fb:4e:36:96:6f:90:e1:2f:1b:a7:20:c8:7b:70:62:
43:76:cb:3f:18:fe:44:d1:1a:a0:e4:72:c7:af:51:
12:13:09:0e:47:66:83:09:d6:b4:e6:b9:b4:5f:3d:
a3:72:b7:8a:dc:15:fb:9c:15:ff:c0:3a:2d:d3:26:
5c:ce:55:cf:6a:7f:90:11:c7:69:8e:9a:a7:1a:2c:
a0:46:98:43:55:fd:e5:d0:5f:50:f6:a5:b0:ac:5d:
e1:3f:bb:16:b9:d6:d3:37:11:7c:90:85:17:93:a9:
7b:33:6c:c1:80:81:0b:68:6c:53:e6:26:99:04:ef:
04:74:38:e0:b2:c4:8e:ff:5e:e3:42:17:f6:f0:62:
f9:84:ac:5f:f6:63:f8:c4:ba:44:f3:6e:69:ed:ee:
ec:0d:04:c4:11:06:a1:e5:b0:66:22:42:80:56:73:
a8:25:6c:92:7e:01:ef:b3:ba:48:b8:2f:11:59:a0:
d3:00:90:27:08:97:b5:5f:02:57:83:99:bc:3a:33:
6e:9b:79:49:aa:9d:5b:ea:05:41:7e:84:b2:2d:04:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AF:18:4C:72:5B:30:9C:21:82:9F:25:1B:D0:53:2F:EE:C3:C4:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C01EFC859C311F085623CA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.17.0-154.206.18.255
154.210.213.0/24
154.210.224.0-154.210.230.255
Signature Algorithm: sha256WithRSAEncryption
3d:12:21:5a:f2:2a:8b:cc:54:21:6c:e8:68:79:f8:78:1b:f5:
15:99:94:fa:36:a6:cc:ed:8a:e1:c1:47:7d:74:3b:3e:80:38:
b6:9a:5a:56:bc:c1:db:0f:55:3c:c8:81:a3:4f:fd:a8:c4:a9:
58:a0:70:94:17:53:75:a0:0a:b6:ba:e7:3c:96:44:f8:39:81:
72:cb:6b:6d:b3:d5:15:f5:01:7c:00:34:00:5a:dc:b6:f4:d1:
39:69:1d:98:af:0b:27:c1:c7:90:88:47:02:0e:1f:fd:07:22:
f8:30:c2:d2:63:75:45:ae:fa:e6:98:b9:0e:1d:50:55:6b:73:
63:b9:69:05:d0:eb:be:3b:d7:b4:27:8f:f2:e6:33:98:4d:1f:
43:fb:1e:bb:12:58:cf:b2:b7:26:00:3c:4e:8a:a6:c3:8f:97:
87:45:1c:86:6e:26:ce:bc:b1:bf:00:f7:ee:f2:13:28:80:56:
01:38:ab:41:03:fb:a9:97:61:2d:f1:44:2b:53:f4:9a:86:b1:
a1:c7:98:76:db:ed:5f:5c:54:a1:0a:b8:ff:6b:f2:19:b0:6e:
ca:42:b5:78:f4:21:ea:6e:d8:35:b7:c7:0e:47:f2:f3:3c:be:
62:a3:b3:32:d1:2e:bd:27:f6:3e:51:17:da:a5:fe:db:c0:6d:
72:8f:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:15 2025 by rpki-client