Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7188D172599911F09953719DDAE4EC9C.roa
File: 7188D172599911F09953719DDAE4EC9C.roa (raw, json)
Hash identifier: 4K072mj1Nzui3M6+zmN3eOQRSM9ZJwIi10bGG5SP5oQ=
Subject key identifier: ED:D3:92:FD:59:7E:2B:01:6B:46:A0:CE:71:64:19:CB:31:79:A6:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7188D172599911F09953719DDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 12:13:22 +0000
ROA not before: Sat 05 Jul 2025 12:13:17 +0000
ROA not after: Thu 14 Aug 2025 12:13:17 +0000
asID: 203020
IP address blocks: 154.207.32.0/20 maxlen: 24
154.207.48.0/22 maxlen: 24
154.207.52.0/23 maxlen: 24
154.207.56.0/23 maxlen: 24
154.207.59.0/24 maxlen: 24
154.207.60.0/22 maxlen: 24
154.209.224.0/20 maxlen: 24
154.209.240.0/21 maxlen: 24
154.209.248.0/23 maxlen: 24
154.209.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101104 (0x18af0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 12:13:17 2025 GMT
Not After : Aug 14 12:13:17 2025 GMT
Subject: CN=686916e2-1f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:4e:35:e3:40:87:09:0a:de:6d:ac:ab:9a:
60:0b:2f:5c:c9:15:12:1c:80:6a:a2:ee:da:70:eb:
9e:cb:9e:33:0c:03:e3:a8:20:50:0d:e0:0b:34:a9:
ec:6f:a9:af:48:74:5e:c3:51:d4:fd:ca:4a:cf:b3:
b0:66:4a:9c:8e:32:ca:79:0b:78:ef:cc:96:d2:e2:
e8:63:ec:43:a9:29:10:91:cd:83:49:11:5e:2b:e9:
48:50:fc:d4:71:7a:29:93:62:52:c0:5d:d5:68:4f:
1f:23:43:63:ee:a8:c0:25:71:8e:cd:26:56:c6:40:
c0:c5:2b:be:c1:c1:15:32:33:16:82:a9:cb:4d:54:
82:03:53:29:2b:ae:fc:db:bf:bf:cc:de:4c:82:67:
e0:73:b3:b1:97:1b:a6:8d:82:d0:ae:fc:9f:93:53:
bb:bb:43:93:a8:77:17:57:70:27:b6:4e:7e:54:87:
aa:34:c1:29:65:90:91:6d:7b:62:6f:34:e4:e8:80:
a9:25:73:8a:dd:93:83:97:f9:a8:d3:a9:65:f6:af:
6a:cd:13:ce:cf:a8:e5:69:8f:13:c2:bc:af:8c:2c:
d0:06:b0:52:6f:87:31:9d:72:c9:82:97:0e:0b:b8:
99:96:28:42:b0:f6:ac:8f:83:73:31:2a:16:3c:52:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D3:92:FD:59:7E:2B:01:6B:46:A0:CE:71:64:19:CB:31:79:A6:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7188D172599911F09953719DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.32.0-154.207.53.255
154.207.56.0/23
154.207.59.0-154.207.63.255
154.209.224.0-154.209.250.255
Signature Algorithm: sha256WithRSAEncryption
d4:12:be:30:36:de:64:12:2b:74:b1:36:e2:bb:b0:c4:40:1e:
21:a6:0e:0d:5b:c0:8c:54:c3:72:31:a1:82:28:d9:e1:b0:6c:
11:6e:56:50:c8:59:0e:72:f7:93:d9:fd:ac:cd:12:6a:66:e6:
69:da:14:73:9d:a8:54:3f:f7:1f:22:37:8b:cf:c3:05:19:18:
23:4b:04:03:b2:76:dc:db:03:55:5a:06:c4:57:1c:60:f2:ed:
bb:75:32:55:a7:56:b6:0b:47:a4:c3:38:9f:f0:ba:64:a8:41:
bf:9a:bd:bc:f4:aa:e0:3e:74:ce:a2:a7:3b:c2:e1:1d:54:8a:
73:c3:a2:0e:cc:ea:e1:c5:93:0e:be:20:78:09:c2:41:8f:70:
b4:d6:76:d2:b3:03:56:5d:eb:8d:1b:de:f0:08:55:e1:88:c5:
fd:18:fe:5b:16:62:5c:a8:9e:51:1b:74:66:79:e3:23:da:51:
3a:de:e0:a0:23:4c:de:fc:2c:57:13:22:5c:f4:4b:95:7a:7a:
20:1f:b4:52:18:4e:78:3a:1f:80:b8:08:55:51:b7:9b:3f:33:
09:84:81:14:67:5b:a9:0e:80:bf:28:ed:64:af:d0:1e:8a:bb:
1e:16:26:3f:3b:e5:72:5b:73:43:9c:08:51:c6:74:15:52:c5:
b7:a0:3c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:36:24 2025 by rpki-client