Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B52067885A6B11F0B66DD7EFDAE4EC9C.roa
File: B52067885A6B11F0B66DD7EFDAE4EC9C.roa (raw, json)
Hash identifier: qx9TzDCCKSBLM2HZEsQT6iykGLHkrtBGqO5oi55SdCw=
Subject key identifier: 0C:CE:85:63:66:14:18:7F:99:BB:AE:4F:D1:39:05:FF:6F:71:5B:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B52067885A6B11F0B66DD7EFDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 13:18:30 +0000
ROA not before: Sun 06 Jul 2025 13:18:24 +0000
ROA not after: Thu 07 Aug 2025 13:18:24 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101234 (0x18b72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 13:18:24 2025 GMT
Not After : Aug 7 13:18:24 2025 GMT
Subject: CN=686a77a6-bed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:24:15:46:41:b4:cf:81:39:6f:07:97:e4:d3:
62:44:c6:d2:5d:80:5a:64:08:24:6d:eb:a2:bc:c5:
87:77:30:c8:2a:86:0b:a1:29:67:20:1a:7a:05:32:
40:40:1f:b3:80:36:c1:a1:27:e2:f9:fb:e6:e1:4a:
48:5f:63:70:5d:5d:f9:4b:5b:df:ae:af:aa:60:4b:
32:8e:64:0c:ea:2f:ef:4d:61:d4:85:2c:e9:b4:57:
aa:1a:e2:f8:f5:0c:a0:fd:16:fd:de:2e:f2:60:07:
0c:59:3c:ad:ca:73:db:c8:9d:41:9a:8b:f9:db:70:
a3:76:9f:16:4e:18:c7:62:1f:99:3f:f7:c2:8c:e9:
35:17:a3:05:09:75:2e:4a:cd:d8:2f:05:b7:f1:69:
ca:3f:7d:0e:1c:a3:05:18:3c:e6:ec:97:dd:d6:03:
b2:9b:23:8c:75:7e:52:32:de:2b:57:81:3a:08:9c:
01:d8:13:d1:cf:c7:4e:bd:26:a6:ba:aa:eb:fd:1a:
41:f1:d5:6e:48:d3:76:dd:81:62:71:c4:4f:52:ec:
c0:89:21:fc:64:19:ed:dd:ee:2a:62:0e:8b:0b:c1:
ae:03:80:b9:c5:a0:87:2b:c2:13:09:39:bc:ec:58:
6b:0b:78:54:15:b4:75:72:93:b3:07:ff:02:91:9b:
a9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CE:85:63:66:14:18:7F:99:BB:AE:4F:D1:39:05:FF:6F:71:5B:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B52067885A6B11F0B66DD7EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
38:d9:67:b9:96:e8:91:e1:36:31:81:ce:2f:87:ef:30:c1:a2:
cb:6f:ee:23:72:99:c5:4d:99:56:93:f9:28:64:04:16:fe:62:
0b:fc:25:63:34:88:aa:2e:60:96:1d:f8:b2:61:d5:d4:f3:9e:
f0:a7:1e:6c:46:2c:a0:b4:27:bf:4a:59:e7:70:4b:ce:49:09:
4f:cc:6c:88:4e:b0:5f:4c:e5:91:30:2c:94:5a:49:05:44:74:
9a:db:1e:2d:cd:a2:47:d7:b7:48:f1:0d:aa:23:5e:5b:9f:66:
78:d4:e7:5e:d5:99:77:aa:00:39:4e:9a:b7:eb:ac:ba:0c:41:
40:34:0f:9d:2e:63:de:67:f2:00:bd:39:89:04:b9:4a:c5:b8:
29:eb:31:7c:8b:1f:ec:1d:24:82:57:e4:01:cf:f6:76:fd:60:
03:f9:70:86:2e:e0:16:c8:f3:ae:8f:10:8c:47:86:c2:33:b3:
58:3a:1a:83:83:9a:d1:b0:31:e0:fc:92:1c:d6:25:e0:51:7c:
6d:16:e1:8e:f8:c3:d5:c9:5d:c6:6a:54:9e:82:9e:76:87:ed:
f9:ab:30:13:ca:7f:58:a8:11:1a:f0:a2:e4:1e:64:96:b9:cc:
8d:86:40:63:46:e9:7f:71:ea:c3:96:3d:94:02:ac:ab:bf:1d:
ba:5e:2a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:17 2025 by rpki-client