Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B374DFB25AB711F0958F6BD6DAE4EC9C.roa
File: B374DFB25AB711F0958F6BD6DAE4EC9C.roa (raw, json)
Hash identifier: LQs4RCauOWHQKNX50Hal4tBLitdomF2u1zsGMarh+Es=
Subject key identifier: 64:1D:57:B5:60:85:D2:D1:1D:0A:CF:F7:53:F1:C1:2E:E1:58:74:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B374DFB25AB711F0958F6BD6DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 22:22:29 +0000
ROA not before: Sun 06 Jul 2025 22:22:24 +0000
ROA not after: Wed 03 Sep 2025 22:22:24 +0000
asID: 18229
IP address blocks: 154.210.141.0/24 maxlen: 24
154.210.142.0/24 maxlen: 24
154.210.143.0/24 maxlen: 24
154.210.144.0/24 maxlen: 24
154.210.145.0/24 maxlen: 24
154.210.146.0/24 maxlen: 24
154.210.147.0/24 maxlen: 24
154.210.148.0/24 maxlen: 24
154.210.149.0/24 maxlen: 24
154.210.166.0/24 maxlen: 24
154.210.167.0/24 maxlen: 24
154.210.168.0/24 maxlen: 24
154.210.169.0/24 maxlen: 24
154.210.170.0/24 maxlen: 24
154.210.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101326 (0x18bce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 22:22:24 2025 GMT
Not After : Sep 3 22:22:24 2025 GMT
Subject: CN=686af725-f1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:99:03:4b:fd:be:a1:f0:59:4d:6b:34:b5:
62:ac:38:69:a5:c0:b7:ee:d0:5c:30:ea:d2:14:98:
d6:f2:bd:1e:5b:b0:2d:b4:30:8e:b4:90:76:00:dc:
7e:92:c9:21:12:c8:95:6e:19:80:f3:6a:fb:39:47:
f3:a3:ac:2c:9e:65:09:f3:c2:59:f6:38:ee:22:bb:
67:a8:3c:fc:b4:9c:95:88:a8:b0:e6:24:bc:09:70:
dc:c9:1a:c1:5b:3b:39:d5:eb:fa:7f:10:86:40:23:
f4:d6:57:79:d2:9a:19:d5:f7:a6:a5:20:07:fc:1e:
b9:2f:88:7b:0a:db:9f:2e:00:fe:02:6c:56:c7:fa:
18:4f:7c:cb:b5:18:93:14:4e:ff:70:db:c2:91:bd:
ba:65:61:e7:51:4c:2c:e8:d6:88:7a:a3:27:e3:fc:
f8:34:26:66:4f:15:8f:be:13:4c:e2:7e:4d:99:94:
43:4f:9d:2b:fa:44:9e:1c:ca:e8:4c:51:76:db:7c:
d3:62:09:7c:8c:33:5d:59:06:1b:5e:fa:fa:f5:89:
32:1d:3f:7a:e9:63:d9:bf:76:19:0e:b9:0b:5e:a2:
80:09:49:0d:24:81:fd:d4:2e:ee:6b:ad:89:5e:85:
bd:cd:1a:7a:38:c1:6d:4c:48:a7:39:7e:f3:b9:d1:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1D:57:B5:60:85:D2:D1:1D:0A:CF:F7:53:F1:C1:2E:E1:58:74:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B374DFB25AB711F0958F6BD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.141.0-154.210.149.255
154.210.166.0-154.210.171.255
Signature Algorithm: sha256WithRSAEncryption
74:4e:cc:71:62:a9:27:eb:c6:b1:db:8c:d8:06:dc:ee:9a:5a:
e7:6e:bc:b5:13:65:22:14:a1:fb:75:6b:b5:a2:9c:cc:d9:08:
2a:25:b4:73:c1:e9:c7:9f:c9:18:f6:e0:16:5a:db:b8:f6:fe:
7c:a3:8c:3b:67:8a:15:36:fd:f1:53:48:f6:08:b8:dd:25:0c:
50:e9:f4:55:4d:48:f0:27:e3:0b:91:25:9c:d4:7b:9e:68:be:
59:04:a1:58:36:0a:94:64:0b:f2:89:07:f3:73:c2:02:48:b2:
5a:81:c9:33:a0:50:ca:c4:8b:57:89:9d:0d:61:c9:11:96:ec:
4c:80:c0:c6:7a:40:8b:00:ba:4d:0b:9e:63:3c:28:5f:a7:af:
7a:d3:80:ac:2b:84:00:fb:88:71:24:d7:81:d1:1e:57:26:92:
68:5f:d2:a4:53:72:b1:d2:93:aa:ff:f3:ff:1a:7e:a2:30:e8:
22:0a:78:06:5e:20:c1:a9:d7:47:02:d9:51:db:02:b0:85:b4:
d8:c9:7e:f5:c3:45:c6:2d:6c:65:14:b6:96:dd:0c:e1:77:93:
3a:0d:90:21:e0:6c:fe:76:11:f6:f1:7d:bb:ae:d1:bd:f2:54:
a6:ab:c8:0e:5f:37:30:fd:02:29:b7:84:65:7e:63:a6:1b:18:
e9:1f:d2:c3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:52 2025 by rpki-client