Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41A77E0E608D11F0A8C8B3B7DAE4EC9C.roa
File: 41A77E0E608D11F0A8C8B3B7DAE4EC9C.roa (raw, json)
Hash identifier: 8tHUIVYLjuw9IEiwE35Rllhsp0m8oZeHx8U+pjKKCCQ=
Subject key identifier: 7D:BC:49:62:0E:65:F6:92:01:F5:CD:98:7B:22:B3:59:74:F5:24:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41A77E0E608D11F0A8C8B3B7DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 08:33:46 +0000
ROA not before: Mon 14 Jul 2025 08:33:41 +0000
ROA not after: Tue 19 Aug 2025 08:33:41 +0000
asID: 136501
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.199.0/24 maxlen: 24
154.92.206.0/24 maxlen: 24
154.92.208.0/24 maxlen: 24
154.92.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101795 (0x18da3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 08:33:41 2025 GMT
Not After : Aug 19 08:33:41 2025 GMT
Subject: CN=6874c0ea-7216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:46:7e:f1:b6:9e:26:7f:2e:44:8a:49:2d:
82:fb:27:3f:68:0d:e7:e3:cc:b3:7c:9d:0c:bb:53:
4c:44:99:0f:bc:d1:b4:b9:6d:8a:69:fd:ba:a6:29:
bc:9c:f6:2d:de:1e:86:9e:84:e6:5b:93:e7:b7:ef:
e0:be:66:c2:c0:26:50:ed:d3:cf:78:9b:06:23:75:
6d:6f:b7:3b:c7:d4:c4:0f:d7:52:41:08:f2:52:80:
9d:8f:b8:c9:c6:e3:be:a1:4d:4a:03:4c:81:d1:40:
00:18:e8:cb:4f:9b:47:9d:90:2c:82:ac:14:73:b7:
4f:dd:61:97:97:2c:a7:a8:b0:d7:05:f0:d3:23:d1:
35:e9:67:f1:e3:2d:58:45:88:c0:5d:bf:99:4d:3a:
1d:98:12:f3:d1:f3:5e:54:f7:97:f0:8e:cf:98:84:
04:fc:a9:48:67:e2:3e:50:a0:8c:b3:a0:84:1c:91:
08:35:d3:81:29:72:c0:07:96:c9:b6:87:f4:ae:cb:
ac:25:2d:8b:b6:a5:54:37:cf:1f:db:b8:5f:3a:68:
54:59:65:e4:56:b3:23:cb:61:d0:0d:04:46:ca:1a:
bb:5e:81:da:6b:f4:88:2a:6b:fc:01:a7:b0:d0:79:
2c:16:d2:0e:ea:71:97:6b:83:08:94:e1:a7:0c:bc:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:49:62:0E:65:F6:92:01:F5:CD:98:7B:22:B3:59:74:F5:24:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41A77E0E608D11F0A8C8B3B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0/21
154.92.206.0/24
154.92.208.0/24
154.92.215.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c2:6a:04:c7:83:ae:91:26:bd:07:1b:41:39:6a:08:2d:58:
43:fb:d6:67:ff:f1:7d:51:4b:9b:f1:a7:60:b2:81:58:d8:63:
c8:57:8c:cb:a0:d3:fa:cc:5f:b2:41:0d:87:4a:0f:12:b8:94:
3a:0c:7b:a4:53:14:68:8b:90:b2:f6:b4:b7:76:21:bd:da:da:
ed:f9:e3:75:1c:3d:4f:4a:23:7e:71:3a:1d:80:06:7a:16:93:
ef:ca:da:19:ef:a8:e8:b6:de:01:23:97:02:8b:38:34:6b:be:
d2:4c:73:27:60:76:80:d2:c6:82:ac:e6:18:ce:a5:6a:42:aa:
ba:32:fc:89:5e:dc:34:46:dc:cc:72:d2:50:54:1a:57:d0:b9:
12:35:4f:c4:54:4a:e3:61:5b:80:e5:5e:a3:51:ac:28:43:9d:
4e:68:42:c2:a4:c8:f1:67:a8:d0:a3:22:91:ec:d8:fd:81:e9:
a4:c3:2e:ca:7c:6a:4d:2c:45:22:4e:86:30:f9:57:8b:c7:eb:
3a:4f:ca:9a:74:41:3e:4f:37:17:fc:5f:e8:49:93:35:a6:ff:
20:2e:4b:f0:07:cc:e6:83:d5:12:2f:6b:c5:81:79:53:bb:b8:
12:49:39:78:5d:4a:27:fb:2e:96:4b:28:63:4c:9c:8d:0b:98:
7c:2e:21:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:35:25 2025 by rpki-client