Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45D7A26A608311F0B127ACF4DAE4EC9C.roa
File: 45D7A26A608311F0B127ACF4DAE4EC9C.roa (raw, json)
Hash identifier: 63TeVcmqo6I1jG2tkFxNog3PkHDrlEJZscJUJEus55A=
Subject key identifier: 67:D0:50:5A:35:88:0F:A6:F4:34:C9:61:EE:CB:27:51:B2:32:65:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45D7A26A608311F0B127ACF4DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 07:22:18 +0000
ROA not before: Mon 14 Jul 2025 07:22:13 +0000
ROA not after: Sun 17 Aug 2025 07:22:13 +0000
asID: 54801
IP address blocks: 154.81.61.0/24 maxlen: 24
154.81.140.0/24 maxlen: 24
154.81.161.0/24 maxlen: 24
154.81.164.0/24 maxlen: 24
154.81.178.0/24 maxlen: 24
154.83.128.0/24 maxlen: 24
154.83.135.0/24 maxlen: 24
154.83.137.0/24 maxlen: 24
154.83.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101781 (0x18d95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:22:13 2025 GMT
Not After : Aug 17 07:22:13 2025 GMT
Subject: CN=6874b02a-86ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:55:2c:10:53:75:02:8c:29:6c:99:f8:3a:
67:ed:de:8b:10:8e:43:11:5b:70:63:0f:66:b3:92:
4f:34:30:a2:07:dc:0f:80:43:6e:63:12:6d:21:24:
50:f7:ff:ed:cb:96:e4:61:3e:d3:5d:b2:e5:58:48:
b7:e7:e1:cf:ef:cf:21:78:b2:18:ea:fa:58:c2:42:
34:99:40:21:27:ae:93:6c:73:27:a5:61:45:6b:7c:
ab:f3:c6:0a:80:c2:71:d3:4b:3e:3b:13:06:76:45:
c3:44:7e:0f:68:c4:93:60:83:a8:b1:6a:c2:79:0b:
72:9a:df:86:44:e3:6a:78:1e:35:51:04:02:c7:be:
b7:6b:c5:43:aa:f3:ff:62:24:ff:19:d7:02:73:04:
b2:b2:cc:12:d8:e0:d1:a4:12:72:c3:bb:1f:d0:90:
d3:26:89:0e:ac:12:ed:67:2d:97:62:9d:cd:10:e9:
fe:fe:5b:02:e1:9b:7d:5d:c0:37:f6:5e:b6:c7:ca:
45:82:3b:95:a9:18:71:8e:eb:b4:76:34:71:d6:26:
1a:85:a7:24:79:98:ac:c3:3b:d3:41:a5:bb:93:e9:
5c:15:dc:2f:56:4c:cf:72:8f:8a:ab:08:3b:80:2e:
23:a6:28:81:74:ea:54:b4:8a:66:a2:6e:00:62:ec:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D0:50:5A:35:88:0F:A6:F4:34:C9:61:EE:CB:27:51:B2:32:65:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45D7A26A608311F0B127ACF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.61.0/24
154.81.140.0/24
154.81.161.0/24
154.81.164.0/24
154.81.178.0/24
154.83.128.0/24
154.83.135.0/24
154.83.137.0/24
154.83.141.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a8:0d:bd:79:9b:7a:4d:4b:74:b6:cd:5a:6b:de:4d:18:f2:
ef:8e:31:30:f2:02:45:1c:af:6b:8c:0a:53:45:82:c1:4f:59:
c7:eb:7b:dc:1a:55:b8:dc:21:7b:31:ff:13:1e:f4:32:a1:7c:
a6:39:50:07:b5:a4:5a:6a:1c:51:ae:16:02:fb:86:06:68:bb:
1c:3a:df:ec:5d:b3:61:4b:83:94:86:29:72:04:4a:f7:94:10:
d6:21:b9:a8:c3:2b:f4:d4:2c:13:a7:2f:3a:82:7b:49:40:1f:
21:77:14:1e:30:33:73:b4:70:6f:79:ed:1b:b3:b9:3b:af:b4:
76:bd:92:70:0c:d8:3a:4e:0d:ce:24:55:b4:e4:d0:4c:aa:ce:
6b:50:52:d8:56:37:35:1c:1f:6d:45:34:af:94:51:fc:4b:de:
de:26:d6:c3:8e:30:09:5a:c0:13:4c:c4:31:26:1e:b2:64:3f:
09:62:bd:d3:81:2d:d0:69:73:f4:3d:08:b3:10:aa:0b:d2:4a:
69:14:62:f7:cb:ba:e6:52:6e:71:42:4e:e4:9b:8d:51:ab:b1:
8f:48:5e:e8:1f:fb:2e:53:11:b1:ae:6c:7a:a0:77:9b:64:f3:
1e:f0:f2:8c:7e:cd:14:60:f3:30:87:3a:f1:87:24:ab:89:c1:
40:d3:c3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:46:38 2025 by rpki-client