Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8399865258FB11F0B1F96092DAE4EC9C.roa
File: 8399865258FB11F0B1F96092DAE4EC9C.roa (raw, json)
Hash identifier: bWLcCVqIEKRqF0bY/iuoJyK/QwtZxINf40PkbwNalpY=
Subject key identifier: A9:D9:52:00:C7:F8:51:DA:43:A1:8B:8E:32:7D:CF:41:FC:A0:FB:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8399865258FB11F0B1F96092DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 17:22:52 +0000
ROA not before: Fri 04 Jul 2025 17:22:46 +0000
ROA not after: Wed 03 Sep 2025 17:22:46 +0000
asID: 18229
IP address blocks: 154.210.130.0/24 maxlen: 24
154.210.131.0/24 maxlen: 24
154.210.132.0/24 maxlen: 24
154.210.133.0/24 maxlen: 24
154.210.134.0/24 maxlen: 24
154.210.135.0/24 maxlen: 24
154.210.136.0/24 maxlen: 24
154.210.137.0/24 maxlen: 24
154.210.138.0/24 maxlen: 24
154.210.139.0/24 maxlen: 24
154.210.140.0/24 maxlen: 24
154.210.157.0/24 maxlen: 24
154.210.158.0/24 maxlen: 24
154.210.160.0/24 maxlen: 24
154.210.161.0/24 maxlen: 24
154.210.162.0/24 maxlen: 24
154.210.163.0/24 maxlen: 24
154.210.164.0/24 maxlen: 24
154.210.165.0/24 maxlen: 24
154.210.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101000 (0x18a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 17:22:46 2025 GMT
Not After : Sep 3 17:22:46 2025 GMT
Subject: CN=68680dec-0ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:23:0d:c2:3c:e5:9a:63:8e:fc:5b:a0:1d:d8:
fe:f8:5e:ca:6f:17:5c:86:c8:84:f9:18:94:4c:55:
9a:1c:79:63:cd:de:b5:19:df:4d:0d:4f:db:cb:01:
8b:6c:fa:ef:d5:9c:39:26:24:ba:2d:c4:d2:b2:49:
5b:be:d2:a7:7e:8d:62:b8:4d:75:7a:92:4b:66:f9:
45:85:07:fb:c4:53:31:dc:37:50:42:61:ec:ab:dd:
7f:95:e0:d8:09:2f:fb:c9:5f:d6:fb:b2:2e:c7:4b:
69:73:92:ab:ba:44:ac:c6:dc:88:c8:70:05:f9:cc:
78:14:0b:a5:6b:ec:28:37:2b:07:10:2c:3d:b6:e2:
b3:48:de:72:be:35:35:23:0a:ec:cf:54:10:01:a4:
80:20:8e:f9:ff:0c:49:df:10:ef:82:55:5b:68:9e:
0d:b4:ba:53:fc:2b:4d:73:d0:62:4d:66:1f:42:45:
bb:9d:8e:8e:25:d7:2d:0f:c2:4f:ee:9c:c0:91:e8:
a8:18:e1:07:6b:5b:84:42:82:2e:0f:e0:f4:99:0d:
a3:a2:47:dc:cf:3b:88:d2:f3:a4:ae:71:3a:25:9b:
26:9e:e1:1b:b5:42:b1:8d:ad:1f:02:52:88:de:6b:
c7:99:88:85:df:7f:46:d8:9f:b9:1a:26:d3:32:00:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D9:52:00:C7:F8:51:DA:43:A1:8B:8E:32:7D:CF:41:FC:A0:FB:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8399865258FB11F0B1F96092DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.130.0-154.210.140.255
154.210.157.0-154.210.158.255
154.210.160.0-154.210.165.255
154.210.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:8a:61:17:ca:56:17:23:57:b0:3d:e7:0f:4d:26:9a:80:ed:
02:26:2a:72:a4:3a:51:c6:cb:f4:9f:f2:22:b9:83:05:90:ac:
0f:cd:05:2e:fa:87:35:de:98:39:19:a2:47:75:b7:2b:4c:8c:
fb:86:3d:c0:16:c8:94:a2:3f:3c:43:ba:76:26:5e:ec:35:e5:
53:10:3d:4c:d1:2a:42:a1:c0:b3:26:88:c5:06:f0:0f:8b:39:
32:a6:e5:b8:89:64:c4:93:e9:e0:f4:c6:f3:69:0f:81:c8:e4:
21:44:ee:e9:84:90:11:66:99:cb:e9:01:3c:e7:b7:af:26:a9:
26:77:24:47:75:2b:94:b6:2b:15:ba:31:4b:5a:14:2f:35:a5:
f3:e0:0d:12:f0:9f:86:2a:d6:21:18:4d:8d:ce:8d:b5:18:cb:
52:58:60:a7:a6:c7:a3:99:5f:12:7e:5e:67:ad:b0:c5:4d:b8:
58:c7:45:d3:ee:6f:6b:e8:08:af:b0:33:dc:52:f0:00:a0:bd:
66:4b:4d:f2:dd:cf:54:58:c9:21:1a:7a:30:2c:8e:96:62:32:
93:c4:04:ff:eb:8e:ff:fb:78:eb:b8:5d:32:1a:28:b6:cf:f5:
57:19:01:a7:0f:2a:bc:8d:e0:01:90:f0:ce:11:fb:ee:86:3e:
4f:82:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:08:01 2025 by rpki-client