Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6BCF660632611F0A9186EABDAE4EC9C.roa
File: B6BCF660632611F0A9186EABDAE4EC9C.roa (raw, json)
Hash identifier: 1DWjzmA3IIlZ3HLBaQjfm+4bBTp33QH6hz02Toj9oOI=
Subject key identifier: 76:FB:47:4A:47:46:8D:6D:4D:13:CB:E5:EE:96:5B:CB:8E:DF:26:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6BCF660632611F0A9186EABDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 15:57:18 +0000
ROA not before: Thu 17 Jul 2025 15:57:12 +0000
ROA not after: Sun 31 Aug 2025 15:57:12 +0000
asID: 44559
IP address blocks: 154.203.216.0/24 maxlen: 24
154.203.218.0/24 maxlen: 24
154.203.219.0/24 maxlen: 24
154.203.220.0/24 maxlen: 24
154.203.221.0/24 maxlen: 24
154.203.222.0/24 maxlen: 24
154.203.223.0/24 maxlen: 24
154.203.224.0/24 maxlen: 24
154.203.225.0/24 maxlen: 24
154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.205.224.0/24 maxlen: 24
154.205.225.0/24 maxlen: 24
154.205.226.0/24 maxlen: 24
154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101968 (0x18e50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 15:57:12 2025 GMT
Not After : Aug 31 15:57:12 2025 GMT
Subject: CN=68791d5e-8756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:0e:26:08:e0:ff:37:87:3e:9b:33:97:d4:
eb:1c:c6:4e:6d:ab:30:d1:a7:f6:f6:03:68:6f:98:
8a:74:62:ea:88:d6:14:98:ac:8c:67:9b:75:12:09:
90:d7:6e:f7:bf:b2:38:38:cd:a8:ac:e3:f7:7d:ef:
d9:15:89:ba:44:31:cf:c6:ba:a6:fc:c9:3d:47:72:
28:c1:f3:ac:52:0d:00:8f:8e:a3:88:ef:d4:d2:2e:
95:a5:9c:23:50:dc:fa:15:34:15:df:a8:ab:51:46:
7a:f7:3a:4d:e8:f3:1e:0e:99:5d:1a:2b:2d:2a:34:
dd:8f:32:0c:6e:77:ef:d6:0c:79:31:67:b0:09:a4:
04:c5:c3:3b:8c:0c:cf:76:1b:95:12:56:a8:da:37:
f2:24:cd:4d:06:8d:0d:df:25:a7:da:4e:ff:af:38:
a2:5f:21:ea:f0:1d:58:79:4b:14:c3:0e:56:50:0f:
86:6d:66:08:d4:e0:46:ee:10:6a:8b:79:00:32:2e:
8c:e2:b4:07:2e:d2:5e:b8:51:00:26:2a:07:e7:00:
3f:9c:e4:14:42:a7:3d:a8:2d:43:0f:04:8e:d0:97:
c9:67:51:8d:d3:97:cc:75:71:1d:66:c2:bc:da:0f:
06:4e:da:c7:69:91:6f:e7:40:55:45:43:ab:dc:38:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FB:47:4A:47:46:8D:6D:4D:13:CB:E5:EE:96:5B:CB:8E:DF:26:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6BCF660632611F0A9186EABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.216.0/24
154.203.218.0-154.203.225.255
154.203.230.0/23
154.205.224.0-154.205.232.255
Signature Algorithm: sha256WithRSAEncryption
49:15:de:c3:cb:c4:26:50:6d:54:37:f7:ef:10:80:01:16:36:
bc:b5:60:e4:33:cd:d9:2d:25:87:a8:ff:e1:5a:70:3a:65:0a:
1a:c4:2e:01:e4:12:21:98:74:e4:54:b8:0f:f7:94:26:0c:8f:
d8:34:73:20:c3:61:20:1f:29:5b:99:a2:6a:dd:a1:63:b7:05:
ce:49:53:84:b1:bc:57:8c:b8:aa:7c:fd:15:5c:fc:c9:33:1c:
b0:d5:58:92:c3:7d:eb:0e:d1:b1:df:ba:d2:8c:73:9a:c9:8d:
e7:ec:5c:1d:2e:48:e8:46:98:a3:f6:69:8c:8e:d8:bb:85:63:
a5:af:26:ca:6d:b1:10:5f:60:4f:bb:fd:ac:77:d1:4d:6b:6b:
49:d7:39:d2:6c:6c:cd:09:cf:b3:2b:2e:c5:f7:8a:7b:09:93:
02:a6:47:e7:d4:c4:1b:65:52:1e:8f:63:2a:23:f1:19:4f:77:
f3:4e:a3:7a:77:7b:a9:16:a3:2d:61:ea:91:74:66:2f:7f:f8:
0e:1a:74:70:ab:fa:98:50:6a:35:02:41:6a:b8:a7:70:3b:aa:
df:c5:bd:0c:52:a1:34:54:ea:cb:8b:57:37:26:80:f8:3a:0f:
6c:c5:bc:92:e7:89:f7:21:eb:97:68:2d:28:c7:28:ea:b6:cd:
a6:26:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:03 2025 by rpki-client