Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A41DBA859BD11F08FD34A86DAE4EC9C.roa
File: 9A41DBA859BD11F08FD34A86DAE4EC9C.roa (raw, json)
Hash identifier: MddxxhKt37SlzgXa+FMC0DlRspC4d5C+rsfVsQ07/L0=
Subject key identifier: 91:32:10:13:E9:98:E6:ED:F7:08:46:6C:A9:3C:70:4E:27:06:48:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A41DBA859BD11F08FD34A86DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 16:32:12 +0000
ROA not before: Sat 05 Jul 2025 16:32:07 +0000
ROA not after: Wed 03 Sep 2025 16:32:07 +0000
asID: 18229
IP address blocks: 154.210.128.0/24 maxlen: 24
154.210.129.0/24 maxlen: 24
154.210.150.0/24 maxlen: 24
154.210.151.0/24 maxlen: 24
154.210.152.0/24 maxlen: 24
154.210.153.0/24 maxlen: 24
154.210.154.0/24 maxlen: 24
154.210.155.0/24 maxlen: 24
154.210.156.0/24 maxlen: 24
154.210.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101152 (0x18b20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 16:32:07 2025 GMT
Not After : Sep 3 16:32:07 2025 GMT
Subject: CN=6869538c-df1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:ff:47:8a:d0:cc:97:10:dd:97:be:2c:1a:
d0:b2:99:04:f1:6a:e7:e4:14:93:db:11:9a:41:9b:
a1:15:69:04:b2:08:a0:b8:e6:96:fd:1c:9c:8c:89:
97:47:6e:76:a0:70:4b:73:d3:51:4a:70:78:d9:20:
5f:11:d7:c0:c6:7a:73:ef:02:59:20:90:db:0c:08:
77:bb:7f:bc:2e:72:b9:56:91:ef:d5:b4:29:63:b6:
75:16:4a:11:b0:8d:bf:cd:07:a6:7d:51:d6:3b:4d:
1d:b9:0f:8e:c6:7f:26:b0:21:35:e4:3e:04:ff:24:
ef:74:5a:a0:d4:79:29:53:9a:75:ed:08:0d:93:a5:
c8:30:88:c1:cd:e6:71:fe:ee:ea:63:f6:78:1f:41:
96:02:97:e9:7e:ec:b1:f1:39:28:92:03:67:a4:3c:
c4:c0:da:01:87:c2:9b:c5:6d:f8:a3:4e:8f:bd:23:
c6:2b:24:d6:88:a3:8d:ff:b5:00:90:c2:81:33:f4:
78:5a:e4:fb:8b:8f:04:68:4b:9d:6e:90:a0:a4:c3:
b1:0c:9d:63:44:82:f2:c7:05:68:91:5c:52:1b:37:
54:fb:09:d3:13:23:f0:e7:58:cd:32:93:68:a0:5e:
82:7a:e7:90:ae:f7:ef:b7:1e:7c:f8:b1:dc:ca:3d:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:32:10:13:E9:98:E6:ED:F7:08:46:6C:A9:3C:70:4E:27:06:48:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A41DBA859BD11F08FD34A86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.128.0/23
154.210.150.0-154.210.156.255
154.210.216.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:89:81:77:6e:ab:fb:ce:41:6e:70:07:ff:51:87:31:55:57:
9d:e2:bb:2d:51:bf:5a:a5:95:0d:68:f6:8b:57:1b:20:c9:7b:
68:bd:0c:48:98:6d:31:18:41:eb:58:dc:a3:76:58:92:85:cc:
e6:41:54:0c:82:66:30:c9:63:55:ea:20:9a:20:37:67:97:09:
c1:13:db:b4:35:6c:92:2f:0c:53:b6:93:59:54:4d:a6:20:9f:
b5:16:61:f6:2c:79:51:78:90:18:45:8d:eb:2e:78:ae:58:95:
27:a8:cb:3e:ec:8c:3c:c0:77:f7:10:12:b1:40:02:5b:18:ec:
27:97:b4:77:18:20:46:a0:52:c6:09:07:cc:ec:99:56:29:57:
aa:53:ed:64:8f:32:68:bd:15:e9:0b:7c:09:1a:18:a9:40:c6:
a9:2c:3c:e8:5d:34:80:dc:59:71:76:ee:36:6e:a2:0d:f1:e8:
e9:a2:a9:44:66:8f:f4:ec:cc:d7:8c:09:88:e0:93:1a:78:8e:
d7:55:50:19:ea:22:c8:06:ca:3f:06:90:27:b8:7d:b9:fd:83:
02:50:d2:46:41:e7:ed:4d:9b:74:d8:06:07:59:42:8c:b4:6f:
53:67:ed:2f:4e:98:49:c1:d3:be:ab:df:3d:b9:ed:1d:65:ac:
e4:5f:58:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:02 2025 by rpki-client