Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DC353E859DB11F0A26BC8C4DAE4EC9C.roa
File: 8DC353E859DB11F0A26BC8C4DAE4EC9C.roa (raw, json)
Hash identifier: gIN0iSr/PwGqPZmCru07rEJxFsS3KszSVXE2cQp04nc=
Subject key identifier: 90:AD:4B:E4:21:41:A6:F5:96:FA:DE:5A:11:86:71:B7:C6:D5:96:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DC353E859DB11F0A26BC8C4DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 20:06:36 +0000
ROA not before: Sat 05 Jul 2025 20:06:31 +0000
ROA not after: Fri 17 Jul 2026 20:06:31 +0000
asID: 214432
IP address blocks: 154.193.208.0/24 maxlen: 24
154.193.209.0/24 maxlen: 24
154.193.210.0/24 maxlen: 24
154.193.211.0/24 maxlen: 24
154.193.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101202 (0x18b52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 20:06:31 2025 GMT
Not After : Jul 17 20:06:31 2026 GMT
Subject: CN=686985cc-4682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:a1:60:0e:20:0a:15:76:a9:23:75:11:7e:
2b:f4:2a:0a:97:ce:dc:ab:37:39:39:85:01:05:5a:
0d:a6:0e:71:1e:47:12:bb:42:d2:2b:d4:97:11:bc:
00:ca:bb:d3:95:d6:19:e8:5e:dc:0c:e8:37:e9:3d:
ee:d9:4b:64:20:3d:a8:54:29:5b:c3:26:d6:65:18:
2c:a4:a5:13:b8:2d:9e:4e:11:74:e0:f6:6f:ce:6d:
4a:31:a0:64:84:86:64:ce:d1:dc:8f:e2:3f:9e:78:
4f:c8:bf:3d:28:da:d6:e9:85:8a:2c:6b:9a:08:4a:
62:95:21:8b:41:1b:11:b2:e0:6c:c5:d5:fd:98:e5:
12:91:6d:9e:a8:a2:db:fd:2a:3e:6f:fd:f8:37:59:
81:13:b7:b0:0c:17:c1:84:b8:48:be:10:c7:f8:7d:
f9:0d:a6:6a:a5:fc:23:0e:20:78:76:60:7d:08:4b:
fd:c4:8a:0d:30:19:c0:a6:cd:51:e6:d2:f6:12:15:
78:c1:2a:b6:5c:5f:e6:94:a5:bb:b3:4f:ac:5b:08:
c7:07:b5:e8:19:70:0e:1b:87:27:2a:63:89:2a:a4:
66:4b:27:ea:15:4f:3a:d5:eb:21:1b:c6:bc:6b:ab:
1d:1a:91:5c:2e:45:32:07:51:56:d8:af:22:61:c4:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AD:4B:E4:21:41:A6:F5:96:FA:DE:5A:11:86:71:B7:C6:D5:96:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DC353E859DB11F0A26BC8C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.208.0/22
154.193.247.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e5:cc:b2:ae:c3:16:92:fb:d4:f7:72:74:ff:5c:9a:42:d7:
f2:7e:6c:2d:ee:e0:7b:ee:1e:7d:c8:33:71:24:9e:f3:21:86:
87:06:69:8c:6b:b8:f1:8b:61:d8:55:98:a0:26:66:6c:09:aa:
e2:7b:a8:ee:17:96:a1:d2:c5:35:cc:62:b4:11:5d:f9:a6:84:
77:90:9a:5c:b0:1a:4b:7d:c9:ac:64:5e:13:a6:ae:aa:94:3c:
87:d5:29:4d:06:e5:0e:d5:aa:31:f9:94:e1:15:dd:9b:9a:51:
2c:3e:6a:40:ae:f3:e6:e9:61:a8:98:26:65:f4:72:3e:44:52:
fd:41:8a:ae:d5:43:ba:e6:42:18:d9:1d:f0:4c:5c:65:e3:85:
0e:3c:d1:86:be:e7:08:0a:1a:f8:fe:8f:f8:ba:26:97:bb:13:
e4:01:c6:47:c9:3e:ef:f9:46:43:5d:15:61:f8:c4:22:15:bd:
66:b0:7f:82:2c:ef:0a:a7:3b:60:53:16:65:c0:f3:cb:a7:06:
92:f8:d2:d0:47:ce:88:4e:23:2e:b3:14:c2:34:64:1f:8c:c7:
cb:95:c0:62:a0:c1:c4:75:64:38:49:fe:fa:7d:17:34:c1:e7:
b4:c5:92:02:3b:13:7d:5b:0f:2d:30:c3:41:8b:39:dc:bd:80:
81:f0:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:53 2025 by rpki-client