Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85EAD66259BF11F086052C91DAE4EC9C.roa
File: 85EAD66259BF11F086052C91DAE4EC9C.roa (raw, json)
Hash identifier: OQdhfHo+P7EmyhCbNKZIEdVkc9yuJY2bOI/lFcI8K84=
Subject key identifier: 89:B3:42:15:A4:80:FB:DB:FA:69:99:6D:1E:95:F2:4E:5D:7E:23:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85EAD66259BF11F086052C91DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 16:45:57 +0000
ROA not before: Sat 05 Jul 2025 16:45:51 +0000
ROA not after: Wed 03 Sep 2025 16:45:51 +0000
asID: 18229
IP address blocks: 154.210.130.0/24 maxlen: 24
154.210.131.0/24 maxlen: 24
154.210.132.0/24 maxlen: 24
154.210.133.0/24 maxlen: 24
154.210.134.0/24 maxlen: 24
154.210.135.0/24 maxlen: 24
154.210.136.0/24 maxlen: 24
154.210.137.0/24 maxlen: 24
154.210.138.0/24 maxlen: 24
154.210.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101156 (0x18b24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 16:45:51 2025 GMT
Not After : Sep 3 16:45:51 2025 GMT
Subject: CN=686956c5-5729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:8d:04:7e:40:e8:a5:70:df:1b:61:7c:38:
d2:f3:b9:1e:3e:e2:ec:cb:67:ec:34:ba:1f:e5:d5:
e5:24:fe:4d:7e:39:f7:96:a5:85:ad:33:76:4c:e8:
23:b0:eb:08:8d:90:cb:af:6a:c6:0d:55:25:df:83:
3a:44:d6:a3:24:05:65:ba:e0:96:8a:85:54:a9:56:
49:4a:18:91:28:2d:aa:b9:3d:1c:a0:57:f9:d1:13:
ca:14:16:ff:81:ca:67:3e:04:20:15:69:23:72:08:
41:5c:2b:d3:25:7f:bc:40:d6:2f:77:99:9e:a9:f7:
53:72:f3:01:81:5b:28:08:c0:f3:fb:a1:12:5a:a6:
28:09:22:29:21:ba:56:64:b2:81:39:18:53:47:da:
98:df:ad:49:8d:42:63:d3:d3:4a:b0:c7:9b:0c:89:
57:fa:19:89:77:a2:70:c5:86:bc:61:37:3d:44:f3:
2c:4e:4e:54:93:ba:5f:a9:10:db:39:b6:f7:68:9d:
f2:46:fd:a6:95:be:cc:a8:08:2a:ea:e9:5c:5f:c4:
bb:0d:59:3e:6e:f0:2d:ee:8f:b4:47:ca:ec:c4:7d:
f5:53:c5:fb:79:55:67:aa:73:a6:7f:7d:82:e3:4b:
b8:5a:ab:27:ca:7e:73:22:92:ff:76:1d:0f:a0:79:
73:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B3:42:15:A4:80:FB:DB:FA:69:99:6D:1E:95:F2:4E:5D:7E:23:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85EAD66259BF11F086052C91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.130.0-154.210.138.255
154.210.223.0/24
Signature Algorithm: sha256WithRSAEncryption
18:fb:54:e8:21:83:2e:1d:fe:fb:70:73:89:2f:06:2d:58:34:
be:34:03:12:f7:d5:bf:5e:dd:55:df:dd:95:b2:51:2c:3f:75:
14:6a:b1:a2:3b:bd:ac:16:bf:c7:c1:7f:54:eb:02:09:02:e5:
0c:91:48:35:8b:82:91:99:42:1c:6f:75:f7:28:c2:0b:30:f3:
41:e1:a4:a4:cf:7b:f3:a5:05:57:bd:1c:04:b5:84:81:12:6d:
1f:59:9b:76:58:fc:64:b3:25:b3:fa:c8:69:fa:e2:cd:6e:1b:
8f:5a:d4:3c:1c:a4:f2:a1:3c:85:e6:07:73:e9:71:e6:3d:f1:
76:f1:f1:c2:32:23:13:c9:b6:23:fd:89:67:32:c5:7a:59:e9:
fb:7f:23:d7:ed:2a:30:dc:a7:f6:03:a9:91:5c:ff:ed:c1:a4:
37:de:94:07:4c:72:40:95:4d:b5:46:c4:f2:f9:40:aa:1b:a1:
f2:f0:5a:7c:65:35:db:0c:74:d6:38:b2:58:88:d9:a2:be:f7:
39:7c:d7:84:ab:88:d3:48:e2:b9:51:c7:d0:b9:05:73:cb:90:
55:33:ba:c1:cd:5b:88:54:4f:f1:9e:9c:69:f6:2f:f9:a0:50:
3d:3a:43:54:96:e4:be:51:b9:d8:12:cc:87:c8:da:cb:6c:1e:
cc:fb:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:22 2025 by rpki-client