Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48EBE5BC5E4C11F0ACC34D83DAE4EC9C.roa
File: 48EBE5BC5E4C11F0ACC34D83DAE4EC9C.roa (raw, json)
Hash identifier: 3IMAQsq9+xHgulsmFe1AtBpmTf6lPA5d7HX0XwVqhnQ=
Subject key identifier: 25:1C:69:1A:A9:4D:3C:3B:6B:8F:A8:B1:B8:08:13:8E:4D:E1:04:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48EBE5BC5E4C11F0ACC34D83DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 11:43:39 +0000
ROA not before: Fri 11 Jul 2025 11:43:34 +0000
ROA not after: Sat 16 Aug 2025 11:43:34 +0000
asID: 22773
IP address blocks: 154.85.116.0/24 maxlen: 24
154.85.117.0/24 maxlen: 24
154.85.118.0/24 maxlen: 24
154.85.119.0/24 maxlen: 24
154.90.2.0/24 maxlen: 24
154.90.3.0/24 maxlen: 24
154.90.4.0/24 maxlen: 24
154.90.5.0/24 maxlen: 24
154.90.6.0/24 maxlen: 24
154.90.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101736 (0x18d68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 11:43:34 2025 GMT
Not After : Aug 16 11:43:34 2025 GMT
Subject: CN=6870f8ea-cdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:15:ff:f5:8b:47:49:08:2a:2f:5b:83:61:
e6:4b:cf:bd:f5:6e:50:09:2a:30:85:cf:66:c7:17:
05:50:cd:23:22:11:5c:4b:fc:04:70:ef:fa:f1:6a:
49:1e:7d:c9:e0:bb:6c:e4:8e:7d:40:ad:c0:27:ec:
87:0b:87:1d:05:30:a4:a3:3d:d3:77:7a:dc:45:48:
f9:ea:f8:77:51:38:e5:19:21:d2:90:8f:78:80:0f:
3c:d6:c9:b4:9a:3b:15:ae:5e:11:4c:84:aa:73:79:
e5:cc:97:e8:f3:c0:83:d7:24:0e:d0:fc:f8:43:7a:
a6:60:4e:b9:94:f9:c2:d3:8a:1b:95:a5:e2:44:e9:
65:55:04:30:d1:92:66:04:1b:cd:f2:2b:24:10:e9:
e2:cc:a8:e3:90:7f:ee:b0:6e:20:e4:27:96:4b:3a:
fc:ce:a6:36:54:78:03:a0:7f:97:48:fc:9f:5e:fb:
fe:dd:31:36:30:7f:66:66:6b:a0:69:9c:dc:df:3e:
e9:b2:61:ea:92:e0:05:15:85:90:2a:24:83:22:72:
e0:5b:9b:76:04:db:c0:dc:41:75:fe:df:15:09:b5:
45:b6:87:d5:ca:5d:cd:1c:d0:87:65:dc:32:3f:9e:
bd:58:e7:d4:94:bd:eb:51:18:4d:67:b4:56:e8:e2:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1C:69:1A:A9:4D:3C:3B:6B:8F:A8:B1:B8:08:13:8E:4D:E1:04:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48EBE5BC5E4C11F0ACC34D83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.116.0/22
154.90.2.0-154.90.7.255
Signature Algorithm: sha256WithRSAEncryption
0a:cd:18:52:2a:9a:17:6e:f3:90:74:0d:28:3b:c8:dd:51:0e:
1a:ba:d8:39:22:f3:2a:bb:e2:f5:4b:39:e9:e1:64:6d:c5:29:
41:28:52:cb:82:8b:f4:bf:7f:5b:8c:bb:96:dd:af:ee:dc:67:
3c:3a:d4:46:b7:4c:01:e3:d2:0c:f1:e6:ad:ac:d3:f7:e6:3b:
49:e1:b3:c1:01:ef:71:58:5b:b7:67:dc:c2:38:a0:21:d4:f7:
c7:64:87:3d:1b:93:3a:cf:c1:c9:38:1a:50:9d:52:1f:50:a8:
c2:cb:2e:75:5d:c6:55:58:af:e4:25:2f:97:c0:9b:a3:57:48:
ac:b0:34:bd:69:8b:ca:b0:a8:33:a1:10:df:58:ac:a4:02:11:
47:4c:6f:64:7e:06:c3:0d:13:32:46:fe:55:ee:01:ea:53:bf:
51:25:7f:e3:0d:aa:de:e7:ef:55:95:6f:ac:58:39:89:e2:ee:
eb:64:ec:06:f6:0f:ce:1e:3c:89:a3:8c:3b:ae:5d:21:7e:8c:
62:17:3b:88:af:c7:69:b5:69:63:01:28:c6:3c:3d:ea:61:a6:
8c:70:c4:b6:87:6e:dc:9f:94:e3:63:f8:65:d8:20:d6:b9:44:
ef:0e:ae:8b:33:32:6f:b4:64:44:42:bc:c2:1c:50:30:90:61:
21:8f:f9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:01 2025 by rpki-client