Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/976208AA5B5B11F0BD1DED8ADAE4EC9C.roa
File: 976208AA5B5B11F0BD1DED8ADAE4EC9C.roa (raw, json)
Hash identifier: zoRvWOt50dwR9HIC30KYIKTwHDaQWhwnome3vE4hJBU=
Subject key identifier: 78:95:8F:92:E0:8B:6F:44:5E:59:67:3D:63:DF:2A:6D:67:25:0B:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/976208AA5B5B11F0BD1DED8ADAE4EC9C.roa
Signing time: Mon 07 Jul 2025 17:55:39 +0000
ROA not before: Mon 07 Jul 2025 17:55:34 +0000
ROA not after: Fri 17 Jul 2026 17:55:34 +0000
asID: 18013
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101438 (0x18c3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 17:55:34 2025 GMT
Not After : Jul 17 17:55:34 2026 GMT
Subject: CN=686c0a1b-2e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:65:c7:e5:14:2e:ef:5d:10:5e:37:e9:c5:
6c:66:a3:25:11:fb:4e:72:9f:8e:b7:04:5d:ea:c7:
2a:d3:38:ac:92:bf:26:bd:6a:4f:c5:2a:bc:a0:b2:
27:f3:36:2a:78:8b:e1:ce:fd:ec:22:d2:b2:80:ba:
80:ec:1f:6f:8e:57:f7:bf:25:7b:00:5c:41:59:af:
f8:9b:66:d2:09:83:c5:5d:10:ff:4e:1d:69:d2:42:
63:83:9c:29:67:d3:7b:91:97:43:9e:f7:86:ef:5b:
8b:03:d7:c8:3b:be:69:dd:fc:18:c1:ee:78:b7:7b:
a2:a5:fa:d1:78:99:35:50:da:e6:6a:83:ad:36:57:
b5:b6:5f:b6:0a:57:bd:33:ba:d3:29:9a:19:b7:ef:
71:0d:0e:6d:de:fb:83:0e:26:ed:4e:19:01:0f:c6:
ff:35:ec:2e:38:08:8e:04:62:d3:e0:af:e4:94:7a:
c7:5b:81:e0:d9:e3:4b:4d:7a:25:2f:85:03:7f:88:
1f:ea:6b:6d:f1:6b:40:67:81:cc:9c:3a:b6:0e:b1:
ad:b7:fa:e7:a7:8e:fb:ac:2e:d2:01:d7:03:27:8c:
d2:50:36:46:5d:82:48:1c:44:c9:f7:b1:25:ce:fd:
8d:fd:6a:78:f7:9a:17:1a:53:00:8c:38:18:77:7c:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:95:8F:92:E0:8B:6F:44:5E:59:67:3D:63:DF:2A:6D:67:25:0B:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/976208AA5B5B11F0BD1DED8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
77:d1:4d:db:ad:7f:b1:fe:fa:a6:4d:52:c6:52:69:54:7b:32:
5b:b1:0a:22:f3:be:23:33:56:d1:dd:73:23:c8:18:20:de:f8:
ac:c6:a6:ea:13:69:84:7d:3f:c2:54:7a:fb:a9:d5:5b:5f:ff:
33:27:4f:c8:c4:3f:a5:95:9c:b3:05:09:5d:d8:0f:9c:a0:7a:
38:00:a8:f5:c0:6f:d7:0c:1a:47:cb:11:ad:e2:a5:09:1d:55:
df:c3:3d:8c:78:49:77:e4:1e:c4:0d:4c:68:95:1f:03:e2:dd:
8d:b2:0c:e7:3d:ef:48:7f:29:4c:1e:27:a6:30:32:b1:98:56:
46:aa:4e:31:e9:42:9d:1d:10:28:8a:61:60:80:eb:bd:3d:c0:
5a:6b:38:64:4e:14:69:6d:d1:2e:5c:fb:a3:2f:57:e0:d6:c0:
d1:f8:07:d6:ec:d0:f1:0a:4a:c2:42:98:b2:19:24:b5:98:7c:
97:bd:4c:a1:0e:67:2f:90:22:d4:57:04:84:56:eb:c8:f5:10:
d2:dc:fc:ef:88:7c:ec:25:b5:3d:b2:02:c3:43:76:07:c4:f3:
aa:8a:0e:0e:96:83:da:46:f7:6d:9a:f1:39:4e:e6:a0:a0:e9:
63:72:86:cb:54:ce:61:28:57:2d:9d:64:9d:9e:00:41:25:11:
0f:78:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:31:57 2025 by rpki-client