Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FA7ADEC58FC11F0A7A32A97DAE4EC9C.roa
File: 8FA7ADEC58FC11F0A7A32A97DAE4EC9C.roa (raw, json)
Hash identifier: bqAukpTXBRut4HJsNmM2vo11qSuzwoaAbUs69rsVtzQ=
Subject key identifier: BB:80:C9:36:26:A9:DE:E3:E8:0B:14:5E:1E:13:1F:21:24:A4:A6:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FA7ADEC58FC11F0A7A32A97DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 17:30:22 +0000
ROA not before: Fri 04 Jul 2025 17:30:17 +0000
ROA not after: Wed 03 Sep 2025 17:30:17 +0000
asID: 18229
IP address blocks: 154.210.141.0/24 maxlen: 24
154.210.142.0/24 maxlen: 24
154.210.143.0/24 maxlen: 24
154.210.144.0/24 maxlen: 24
154.210.145.0/24 maxlen: 24
154.210.146.0/24 maxlen: 24
154.210.147.0/24 maxlen: 24
154.210.148.0/24 maxlen: 24
154.210.149.0/24 maxlen: 24
154.210.166.0/24 maxlen: 24
154.210.167.0/24 maxlen: 24
154.210.168.0/24 maxlen: 24
154.210.169.0/24 maxlen: 24
154.210.170.0/24 maxlen: 24
154.210.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101002 (0x18a8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 17:30:17 2025 GMT
Not After : Sep 3 17:30:17 2025 GMT
Subject: CN=68680fae-b566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:c2:96:59:ac:cf:29:ba:ab:fc:8c:e3:53:
1c:08:ea:b4:5e:f5:5b:3b:9e:d8:1f:b9:6b:06:43:
dd:3d:fe:a0:a5:10:12:92:f2:45:57:d2:59:60:6a:
3a:4f:cf:3c:60:7f:67:d8:44:0b:a4:4a:88:8e:03:
a9:e0:a3:77:d0:64:47:56:8b:fe:25:ef:da:82:c8:
9e:74:7d:41:3b:a6:79:07:ca:13:c7:86:ed:f7:98:
ca:4c:57:1e:79:57:c4:ac:e8:dc:5c:bd:12:00:56:
6e:15:bf:4f:50:fa:73:73:16:99:2f:12:75:9f:e8:
d4:27:6e:b3:38:69:d7:88:17:95:88:44:34:40:f8:
f6:b7:6f:f5:53:fc:f1:67:ca:10:b4:c5:c2:97:24:
9c:8f:f1:a5:d7:e3:5d:49:10:d7:33:63:e1:bf:91:
49:e0:d7:41:c1:f7:61:aa:92:ac:44:eb:13:f1:6e:
a3:e6:15:d1:e5:6f:43:5e:ad:9d:bc:cb:bc:af:a8:
1a:f5:cb:76:04:38:21:e4:ee:df:de:6f:fc:27:97:
d7:53:6a:1c:15:f0:b5:48:66:78:08:8e:36:f1:7f:
11:da:aa:c4:4c:df:ae:a2:8b:4a:17:0a:e1:67:87:
9a:f8:68:33:91:d8:12:c5:1d:e9:73:1f:e8:88:96:
d7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:C9:36:26:A9:DE:E3:E8:0B:14:5E:1E:13:1F:21:24:A4:A6:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FA7ADEC58FC11F0A7A32A97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.141.0-154.210.149.255
154.210.166.0-154.210.171.255
Signature Algorithm: sha256WithRSAEncryption
d8:6a:35:8f:8d:ea:03:6c:2b:90:0c:98:2a:4b:44:7e:27:cc:
95:80:81:44:5a:47:00:f4:68:be:3a:1c:c6:96:fb:05:b6:6b:
cf:fe:9f:06:7c:1f:33:8e:05:66:bd:db:75:d1:d1:ac:3d:30:
f9:9b:34:e1:bd:76:0b:46:57:43:65:fd:a0:ea:ad:f0:b7:5d:
26:f6:d4:e3:6a:86:cf:54:e3:51:02:77:eb:8f:af:5e:4c:01:
0c:97:5e:6a:97:53:c5:8b:ee:84:a1:ca:9c:43:46:a8:a1:73:
a6:fe:e9:16:c8:9b:2f:e8:94:9a:94:c2:b1:1c:19:8d:14:28:
73:15:ab:49:98:b9:cf:0e:18:e5:78:89:75:25:13:fe:18:e9:
7a:ac:35:de:8b:2b:e3:56:6c:d2:d1:ba:7d:66:97:34:6d:f4:
51:ea:fc:b0:2c:cb:10:08:5d:30:a2:c3:97:71:4f:da:aa:5d:
0f:06:9c:6e:c4:fa:2d:be:b9:d8:10:14:5f:e5:82:42:aa:58:
90:65:c8:44:9d:5f:7e:25:26:72:f1:b8:64:14:f3:d6:b7:bd:
4a:57:3e:2f:5c:46:be:8f:7a:f9:5b:45:57:16:31:a5:d7:ce:
48:7c:98:39:45:6a:d6:9b:9d:20:a0:06:69:6f:99:8b:1e:38:
19:96:4d:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:47 2025 by rpki-client