Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B57C6A6512F11F0BD2518D7DAE4EC9C.roa
File: 9B57C6A6512F11F0BD2518D7DAE4EC9C.roa (raw, json)
Hash identifier: ScGre5VdQYwTwxq2TQtGn4IZ6/xLxVj1UDNZ5yfJBTM=
Subject key identifier: A3:AB:5F:80:A6:5B:7F:39:37:85:91:A9:3B:9D:F5:A1:CB:45:26:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01889E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B57C6A6512F11F0BD2518D7DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 19:15:36 +0000
ROA not before: Tue 24 Jun 2025 19:15:32 +0000
ROA not after: Fri 15 Aug 2025 19:15:32 +0000
asID: 63139
IP address blocks: 154.203.161.0/24 maxlen: 24
154.203.171.0/24 maxlen: 24
154.203.184.0/24 maxlen: 24
154.203.185.0/24 maxlen: 24
154.203.186.0/24 maxlen: 24
154.203.187.0/24 maxlen: 24
154.203.188.0/24 maxlen: 24
154.203.189.0/24 maxlen: 24
154.203.190.0/24 maxlen: 24
154.203.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100510 (0x1889e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 19:15:32 2025 GMT
Not After : Aug 15 19:15:32 2025 GMT
Subject: CN=685af958-49e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1f:bd:95:ab:3e:2e:42:d1:3e:63:e0:8c:28:
2e:aa:e0:56:da:37:18:fd:6e:95:59:74:78:29:61:
6b:da:57:78:23:8d:ee:cd:ec:ee:47:35:5b:fd:e5:
dd:eb:d2:10:74:ae:1b:71:da:b4:eb:e9:37:c9:3f:
9c:5c:0f:fe:83:8a:00:33:99:5a:73:b9:c3:94:88:
a3:8f:18:3a:74:1c:47:51:61:90:56:1c:a8:6e:3a:
a6:95:d2:48:02:3c:37:b1:ab:7a:b5:2e:ea:35:9d:
4e:16:83:18:68:f7:d2:4b:f5:1b:c7:b0:4b:9d:61:
15:95:76:5a:ab:85:19:fb:be:23:c2:cd:25:88:a1:
d1:88:3c:39:30:7a:e7:fe:35:ee:bd:e7:00:f3:80:
2e:f9:06:6b:ff:a5:e7:77:34:26:1c:be:bd:60:ce:
98:22:03:56:0f:db:63:ea:07:47:83:99:90:d6:cf:
a8:5d:a2:af:8f:1f:39:30:30:50:8b:db:42:a0:88:
57:0e:fa:15:c0:b6:04:90:c1:67:2e:66:17:05:0a:
b8:4c:f7:86:76:f2:90:d8:bc:52:df:6f:41:0b:4a:
4d:13:fe:87:49:24:cf:e1:d2:db:27:90:d0:c9:45:
c4:af:b5:59:6a:f5:67:28:5f:59:9d:69:14:16:66:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AB:5F:80:A6:5B:7F:39:37:85:91:A9:3B:9D:F5:A1:CB:45:26:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B57C6A6512F11F0BD2518D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.161.0/24
154.203.171.0/24
154.203.184.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:b6:ce:87:e4:9a:02:04:ea:fa:49:df:2b:ea:ec:11:71:3d:
8d:04:63:98:c4:21:72:7b:f9:b9:ec:f7:ec:fc:20:69:85:29:
e1:48:43:20:b4:23:21:50:a4:f8:6c:37:df:37:c9:68:02:79:
26:2e:e2:9b:2f:73:87:0f:ef:8d:3b:f8:5e:96:8b:63:a4:86:
2c:d8:ca:03:0f:5f:c6:a5:34:d1:48:aa:d9:df:7a:ea:07:23:
ac:5b:45:e7:11:43:f4:82:b2:59:09:07:c8:4c:e8:36:6c:21:
a0:a3:ac:e2:de:36:af:bd:b8:6c:0a:1b:2a:5e:99:04:15:37:
96:9d:af:81:ad:3f:ab:f6:5b:9c:46:94:70:e9:49:2a:a2:61:
b4:9f:92:be:eb:5b:a9:0b:70:dd:a7:fa:a9:f0:81:15:89:65:
d7:1f:c7:b9:79:99:51:1c:e0:dd:2b:02:74:45:f5:79:2c:e6:
e2:93:e2:52:e5:9b:af:ec:fb:25:77:2e:83:3c:dd:01:8c:6c:
1c:05:1e:ae:4a:26:45:89:b7:d4:74:5d:70:74:a3:3d:30:c2:
bf:74:6f:02:97:32:74:39:06:2b:4a:28:bc:80:f3:0d:93:ac:
a6:79:cc:7c:08:7f:ce:6b:b0:7f:74:bc:9e:37:34:e0:9b:f2:
7c:7a:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:42:46 2025 by rpki-client