Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42A344145E4411F0BD03B4C6DAE4EC9C.roa
File: 42A344145E4411F0BD03B4C6DAE4EC9C.roa (raw, json)
Hash identifier: ldTyoPnqQxOpdNjABEGHTae5PRJk1qafUZYpwSwgx0U=
Subject key identifier: 90:AC:38:D1:CB:8B:B7:3E:3E:94:09:33:64:F4:FC:73:7D:DD:02:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42A344145E4411F0BD03B4C6DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 10:46:12 +0000
ROA not before: Fri 11 Jul 2025 10:46:07 +0000
ROA not after: Sat 16 Aug 2025 10:46:07 +0000
asID: 22773
IP address blocks: 154.202.23.0/24 maxlen: 24
154.202.24.0/24 maxlen: 24
154.202.25.0/24 maxlen: 24
154.202.26.0/24 maxlen: 24
154.202.27.0/24 maxlen: 24
154.202.28.0/24 maxlen: 24
154.202.29.0/24 maxlen: 24
154.213.207.0/24 maxlen: 24
154.213.208.0/24 maxlen: 24
154.213.209.0/24 maxlen: 24
154.213.210.0/24 maxlen: 24
154.213.213.0/24 maxlen: 24
154.213.214.0/24 maxlen: 24
154.213.215.0/24 maxlen: 24
154.213.216.0/24 maxlen: 24
154.213.217.0/24 maxlen: 24
154.213.218.0/24 maxlen: 24
154.213.219.0/24 maxlen: 24
154.213.221.0/24 maxlen: 24
154.213.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Jul 2025 08:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101720 (0x18d58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 10:46:07 2025 GMT
Not After : Aug 16 10:46:07 2025 GMT
Subject: CN=6870eb74-689c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:9b:f5:c9:a3:d5:63:3c:8f:76:1d:3d:73:
9d:e8:d4:ef:df:bc:2d:03:06:61:c7:02:a5:62:eb:
8d:89:db:65:98:ae:c3:c6:a1:91:1a:7c:2a:6c:10:
d5:72:9d:a3:5c:1a:73:9e:90:86:86:70:f3:26:f7:
f1:bd:3f:46:81:50:3d:ee:66:d5:e9:3d:e7:b7:ff:
b5:8e:cb:12:b2:64:26:b9:3a:ee:fe:b1:81:fa:f1:
1e:45:ac:39:5e:19:fe:01:4e:cf:26:c0:6b:d1:9e:
e5:e1:49:e3:f0:8a:d9:00:60:d6:a7:11:5f:7e:d3:
83:b4:ae:9d:d9:b0:20:c2:09:0a:c8:74:42:b2:cc:
80:a2:cd:80:ac:3e:68:c0:e9:3e:c2:83:8f:c7:3f:
5c:e1:48:cb:dc:13:76:82:49:33:10:52:e8:7a:fc:
19:3f:0c:5c:17:b5:82:09:0f:6e:3a:7f:dd:ec:55:
7b:35:f4:c3:8b:b9:f6:44:bd:8b:44:d1:94:a9:93:
01:22:73:97:fc:92:c1:1d:26:eb:db:4c:33:5d:f0:
9f:d6:b0:7c:f2:59:77:be:e3:be:1f:bb:07:a4:80:
42:a0:74:41:d2:2d:ce:10:76:45:98:02:a0:a7:a9:
66:8c:b5:51:84:21:db:1c:35:af:ab:8b:b4:e2:81:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AC:38:D1:CB:8B:B7:3E:3E:94:09:33:64:F4:FC:73:7D:DD:02:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42A344145E4411F0BD03B4C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.23.0-154.202.29.255
154.213.207.0-154.213.210.255
154.213.213.0-154.213.219.255
154.213.221.0-154.213.222.255
Signature Algorithm: sha256WithRSAEncryption
6f:96:10:0a:87:92:72:7f:52:1f:33:b6:a8:e5:05:d1:54:f5:
6e:e7:7e:46:fc:aa:eb:fe:ae:71:4d:5f:69:5e:84:74:30:46:
03:9c:cb:ad:07:1a:2d:8f:ac:27:13:73:c0:c1:ca:d3:b3:e0:
e2:e4:ce:95:83:bb:9f:0b:75:b3:37:6a:2b:dc:d8:aa:b5:d2:
73:87:02:50:37:eb:97:cf:b4:3b:7e:60:18:ec:2c:27:1d:7e:
18:d2:b6:fc:28:ae:69:f2:ec:6f:ae:6b:eb:f9:93:19:da:aa:
5e:02:52:0d:09:f7:6e:81:fb:c7:3e:a9:c5:82:a7:46:db:4c:
d3:0a:13:15:7d:ef:cb:96:d8:83:b8:e4:92:00:a3:ea:06:d4:
aa:c6:07:c9:18:e5:25:70:04:d9:6c:15:09:0f:8a:b7:17:ed:
20:43:cf:41:e6:e7:c3:eb:19:b0:f4:10:70:91:cf:0f:c3:f7:
38:2b:97:e4:5d:79:5f:04:e9:5e:df:e1:bf:11:e2:fb:fb:4e:
52:49:e6:49:cb:db:04:59:64:33:d5:9d:89:be:18:d3:e2:4e:
e7:ee:59:a6:75:a8:04:29:8f:df:67:a5:13:41:02:2e:8a:d8:
eb:bc:7d:5c:bd:c5:fd:30:fb:34:5c:04:03:1f:a0:c2:b7:87:
a3:85:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:06:35 2025 by rpki-client