Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A7CE5EC5D6E11F0B9203298DAE4EC9C.roa
File: 7A7CE5EC5D6E11F0B9203298DAE4EC9C.roa (raw, json)
Hash identifier: iSoCT0y6acMC5I9N2W6U+gX/StiR28kuzPaQ4+8zdak=
Subject key identifier: EE:5A:A6:58:01:95:8A:76:AF:86:D5:86:C2:9E:46:C6:4A:CA:E8:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A7CE5EC5D6E11F0B9203298DAE4EC9C.roa
Signing time: Thu 10 Jul 2025 09:15:54 +0000
ROA not before: Thu 10 Jul 2025 09:15:49 +0000
ROA not after: Sat 16 Aug 2025 09:15:49 +0000
asID: 22773
IP address blocks: 154.85.116.0/24 maxlen: 24
154.85.117.0/24 maxlen: 24
154.85.118.0/24 maxlen: 24
154.85.119.0/24 maxlen: 24
154.90.2.0/24 maxlen: 24
154.90.3.0/24 maxlen: 24
154.90.4.0/24 maxlen: 24
154.90.5.0/24 maxlen: 24
154.90.6.0/24 maxlen: 24
154.90.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101675 (0x18d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 09:15:49 2025 GMT
Not After : Aug 16 09:15:49 2025 GMT
Subject: CN=686f84c9-9180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:fd:e8:a4:a9:cb:62:65:dd:ec:b9:6f:2e:
19:31:51:a6:42:b0:81:5c:f1:0e:e3:90:04:7e:5a:
40:b6:25:f0:87:02:02:06:42:5c:31:ca:7d:aa:83:
06:10:43:64:5d:eb:4f:bb:df:35:73:17:7d:06:36:
ae:e0:1f:ea:46:88:7b:9c:51:2d:d4:03:8e:ba:cd:
a1:86:1c:bc:7b:36:55:ff:13:a5:8c:ae:e0:10:02:
16:9b:06:d2:d9:11:e2:6e:d2:22:34:e0:5a:c0:ad:
66:eb:58:95:b1:81:d0:fb:3b:c6:12:13:3d:1d:18:
a2:48:e9:f7:23:14:65:b4:b8:47:92:d4:ce:f9:8e:
38:7a:14:a2:f5:dc:2c:f1:c6:19:9f:40:c7:67:86:
65:73:93:fb:0f:32:fd:62:0e:2c:21:69:9b:53:a1:
e7:24:68:b6:78:fb:1d:08:41:2d:ea:7a:9a:a9:79:
62:90:95:cd:f1:fd:44:8b:ce:9c:bf:b4:ed:c5:e8:
db:c9:a6:dd:2f:de:51:fb:c7:a4:30:77:d4:53:04:
17:03:ac:8f:e4:c5:d1:fe:03:b2:8a:89:90:ff:76:
7f:a5:a2:8d:45:6a:b9:c8:f4:a1:29:26:87:dd:9d:
6a:3d:e5:c6:64:aa:32:45:99:f6:4c:02:2f:c5:17:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5A:A6:58:01:95:8A:76:AF:86:D5:86:C2:9E:46:C6:4A:CA:E8:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A7CE5EC5D6E11F0B9203298DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.116.0/22
154.90.2.0-154.90.7.255
Signature Algorithm: sha256WithRSAEncryption
9c:b5:63:fa:0c:4f:35:91:71:c5:99:ea:fa:37:53:db:4c:94:
f2:4b:ad:d0:1d:28:6b:ab:8f:ac:d8:3a:f7:6a:81:1e:c2:9c:
11:21:d1:72:01:b2:dc:b6:c5:58:3f:fb:cc:96:c0:d0:5d:64:
5e:87:0f:65:68:27:36:06:1c:1b:74:7d:dd:c7:57:a3:d3:f0:
a7:d0:c7:93:66:56:aa:f7:71:b6:1a:7b:96:d6:d6:3d:9b:71:
82:20:a2:50:c3:6a:42:6d:8a:ac:0e:17:d3:09:f5:a6:00:81:
c1:71:4c:29:dc:38:9d:40:84:94:33:02:4e:8b:6a:d9:22:48:
00:d5:6b:59:b4:c2:89:22:e6:e5:5e:5e:53:9e:64:17:0c:11:
bb:b9:3a:56:16:ee:f2:46:b2:aa:45:26:8a:8a:bf:ff:be:db:
f3:49:6a:83:11:78:fb:01:05:d4:73:06:9d:6e:e4:22:88:60:
31:23:0c:54:89:cd:09:c3:89:9e:67:d4:d8:12:29:e3:b4:2a:
6d:a5:04:e0:87:8a:44:f3:58:08:a8:5f:31:07:a3:63:68:c7:
bd:68:09:be:d5:1e:43:46:25:51:62:6b:d8:c9:04:8c:7e:49:
54:52:ba:87:08:cf:eb:ea:b7:64:a7:82:88:07:39:41:1f:00:
92:a0:4a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:42:49 2025 by rpki-client