Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A9B87259C011F0950DC297DAE4EC9C.roa
File: 79A9B87259C011F0950DC297DAE4EC9C.roa (raw, json)
Hash identifier: jj/P+evozSNfuJmz3GlF6B/9Se5cph7HVz3bqPMZPzQ=
Subject key identifier: AC:C4:9D:BE:6F:89:BB:86:F0:62:2D:6A:62:F2:10:1E:4D:1F:84:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A9B87259C011F0950DC297DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 16:52:46 +0000
ROA not before: Sat 05 Jul 2025 16:52:41 +0000
ROA not after: Wed 03 Sep 2025 16:52:41 +0000
asID: 18229
IP address blocks: 154.210.139.0/24 maxlen: 24
154.210.140.0/24 maxlen: 24
154.210.157.0/24 maxlen: 24
154.210.158.0/24 maxlen: 24
154.210.160.0/24 maxlen: 24
154.210.161.0/24 maxlen: 24
154.210.162.0/24 maxlen: 24
154.210.163.0/24 maxlen: 24
154.210.164.0/24 maxlen: 24
154.210.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101158 (0x18b26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 16:52:41 2025 GMT
Not After : Sep 3 16:52:41 2025 GMT
Subject: CN=6869585e-a7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:2a:5f:4f:db:48:79:bf:ba:ea:00:41:4f:
6f:88:9f:e2:d4:84:df:63:a9:6d:54:6d:29:bf:e8:
42:7c:f1:44:b4:77:54:04:99:f2:c0:36:15:1a:85:
24:36:38:ce:41:79:8a:fe:11:91:06:8a:8f:ff:c3:
53:e6:73:c8:4f:fb:6b:77:8f:a6:87:88:d2:dd:fc:
35:87:5c:51:01:05:42:a5:2b:60:bd:df:50:27:dd:
61:13:27:96:7f:02:81:ee:de:10:10:69:f9:9d:55:
c8:cf:22:5e:7f:b4:30:18:c0:8f:19:a8:8f:02:fa:
03:65:3e:e5:14:18:14:36:07:db:e9:21:6a:a4:67:
e4:d7:0c:4c:7e:5c:68:fe:cf:ae:56:ef:00:1a:49:
08:d9:1c:85:e8:0c:81:34:90:76:f8:20:3f:67:3d:
ae:49:ca:b5:3e:6b:40:0a:5d:cd:ff:4f:9e:ad:33:
59:b9:92:65:4c:6a:5e:1b:02:7a:ec:10:f0:2f:e7:
bb:8a:65:3e:62:22:80:cf:a6:89:8a:7f:ed:51:3d:
b4:23:51:a1:08:58:b2:c2:4a:33:96:03:2f:43:76:
2e:72:a5:af:07:f9:95:c1:26:c0:bc:47:07:7f:2d:
de:9c:ac:92:68:43:54:57:0e:fb:ae:c0:c9:c1:12:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C4:9D:BE:6F:89:BB:86:F0:62:2D:6A:62:F2:10:1E:4D:1F:84:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A9B87259C011F0950DC297DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.139.0-154.210.140.255
154.210.157.0-154.210.158.255
154.210.160.0-154.210.165.255
Signature Algorithm: sha256WithRSAEncryption
13:34:b1:3f:87:7f:91:4c:e8:c7:a2:43:d8:18:0f:e3:55:cd:
49:80:e6:06:83:c9:43:85:1c:9e:1c:69:a7:1f:fe:ef:a4:ae:
8b:47:9d:7e:4d:8a:78:ad:aa:af:3e:bf:0e:d4:cf:0a:fa:0e:
04:80:1f:f3:c7:20:36:cf:1e:2d:e4:0a:c8:85:e3:2e:a3:75:
a7:08:78:43:f3:b4:7f:6c:28:e2:06:c5:d5:35:c0:07:1e:2b:
2f:80:9b:18:60:b2:ad:7d:fc:77:0f:5f:e9:8d:10:d8:8f:f7:
c8:42:20:2a:31:16:62:46:8b:ba:d1:fa:cf:01:33:70:ab:dd:
8e:a3:f8:13:31:c4:e2:c3:23:1e:f7:f1:5c:af:11:f8:be:c5:
bb:70:e1:50:64:79:15:19:f4:1f:9a:b5:22:02:d9:f5:74:a2:
81:45:9a:3a:40:4a:e9:34:a6:1c:48:d4:3e:14:c7:9b:a5:4e:
6d:d4:2c:5c:02:a2:5b:63:e0:84:56:1c:5c:3c:04:a4:f8:a9:
be:2c:34:d4:7e:7f:48:8c:11:73:40:a5:1e:ac:58:98:be:6d:
0b:ff:41:b8:45:52:c7:ab:f0:ac:51:2b:93:cc:0c:56:21:4d:
fc:69:42:eb:9f:2c:2e:ee:92:d8:04:ec:e4:6f:7b:d9:aa:08:
86:d6:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:41:50 2025 by rpki-client