Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/728515985D6F11F08885EE9CDAE4EC9C.roa
File: 728515985D6F11F08885EE9CDAE4EC9C.roa (raw, json)
Hash identifier: nh1lYHJlECvYrzrN5mhf/ttI5czMDWI7bfCUuL1gMW4=
Subject key identifier: 69:BA:17:9C:B2:2E:43:CA:9F:B7:0F:66:1F:17:84:59:A5:D2:27:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/728515985D6F11F08885EE9CDAE4EC9C.roa
Signing time: Thu 10 Jul 2025 09:22:50 +0000
ROA not before: Thu 10 Jul 2025 09:22:45 +0000
ROA not after: Sat 16 Aug 2025 09:22:45 +0000
asID: 22773
IP address blocks: 154.85.106.0/24 maxlen: 24
154.85.107.0/24 maxlen: 24
154.85.108.0/24 maxlen: 24
154.85.109.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.111.0/24 maxlen: 24
154.85.112.0/24 maxlen: 24
154.85.113.0/24 maxlen: 24
154.85.114.0/24 maxlen: 24
154.85.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101677 (0x18d2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 09:22:45 2025 GMT
Not After : Aug 16 09:22:45 2025 GMT
Subject: CN=686f866a-ab09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7b:eb:cb:be:5e:f3:f9:70:13:e9:5b:c1:8c:
36:56:a6:bd:23:a3:b0:12:07:71:6a:d9:bd:be:0d:
42:56:2c:d8:4e:77:e8:1d:2f:23:9d:49:cb:8e:0a:
79:e7:16:d4:bb:23:3c:81:b5:cc:7d:2a:00:45:1b:
75:5c:37:92:5a:33:fb:f2:96:a6:ae:da:fb:ab:a7:
c6:08:28:8a:15:34:8e:9c:5c:32:e8:5c:27:5a:77:
e9:58:21:97:fe:16:be:70:f2:02:ac:78:32:12:33:
b2:b9:3f:5c:7b:92:e4:0d:07:2d:f2:1e:d8:74:12:
c3:4e:9f:9b:7a:48:97:d2:39:70:a0:7f:b3:54:ae:
19:46:f5:12:26:b5:94:98:ba:12:77:06:fd:26:c4:
a0:cb:6e:7e:b5:e6:92:c6:9f:dc:92:77:77:13:59:
50:3a:0d:36:24:7a:53:e3:d7:a3:6e:8f:9a:44:d5:
f9:92:4f:84:f3:71:f1:e6:1b:3b:4d:a3:8d:45:2d:
a2:4a:a4:d5:9f:c6:9f:a4:ef:a1:f2:8f:f8:08:0f:
b2:89:d2:80:ab:24:47:97:c3:4b:d8:be:9a:3c:58:
e2:20:cc:6e:f4:7e:4a:fb:64:b0:85:57:f2:2f:a5:
8a:d4:8e:84:68:01:b2:01:08:8d:9c:6a:6b:39:51:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BA:17:9C:B2:2E:43:CA:9F:B7:0F:66:1F:17:84:59:A5:D2:27:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/728515985D6F11F08885EE9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.106.0-154.85.115.255
Signature Algorithm: sha256WithRSAEncryption
2b:3f:f6:5e:6e:38:83:91:8e:c7:a5:c4:1f:f7:35:1d:4c:a5:
d0:f1:72:bc:b7:5c:83:73:4a:d8:43:e7:c9:70:fb:42:95:fe:
c4:83:ca:00:1f:0f:5f:6c:54:af:aa:62:51:1b:ca:9f:79:3b:
a1:fc:f3:f8:3f:c5:de:e6:10:47:a9:00:0f:78:2b:fc:82:39:
13:84:d8:55:d1:e1:79:2d:da:e8:22:ee:1f:a2:d1:c5:9f:c8:
a5:e3:4f:0c:90:15:e1:05:af:03:b9:9c:b1:6d:63:1c:25:ca:
ea:fa:82:89:0d:b2:b5:64:5f:fc:fe:62:d8:76:83:61:1c:05:
cc:2b:c5:03:4f:0a:7c:dd:de:fe:4b:37:24:47:51:5f:c6:d6:
28:46:c2:54:bd:b4:0a:65:40:d6:ff:28:ba:60:14:8a:6d:1e:
f5:8d:4a:94:10:42:ba:6d:86:f3:ef:d7:18:44:f6:61:73:45:
60:a4:e8:69:85:31:24:a7:5c:32:5a:f3:31:5b:f3:de:16:73:
ec:52:01:ba:ea:4a:77:6b:92:b2:30:2a:43:b6:be:aa:f2:1a:
ce:b4:2a:81:0a:57:e0:a4:4d:39:d9:6c:df:22:4c:b9:be:ae:
1b:cb:2a:7f:8e:6a:5d:73:85:06:87:83:fd:86:90:dd:03:63:
78:38:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:51 2025 by rpki-client