Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBCD33545D0E11F0AE52E39ADAE4EC9C.roa
File: BBCD33545D0E11F0AE52E39ADAE4EC9C.roa (raw, json)
Hash identifier: 3ZHY8Rqs1nj5rOm6cimJRxCL+SRZLDNHxRbgoAbBN4w=
Subject key identifier: 94:C8:16:4C:9C:17:FC:64:69:9F:1F:90:8C:82:5A:EC:3B:56:A2:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBCD33545D0E11F0AE52E39ADAE4EC9C.roa
Signing time: Wed 09 Jul 2025 21:50:31 +0000
ROA not before: Wed 09 Jul 2025 21:50:26 +0000
ROA not after: Fri 17 Jul 2026 21:50:26 +0000
asID: 400619
IP address blocks: 154.193.192.0/18 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.118.0/23 maxlen: 24
154.202.120.0/21 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101668 (0x18d24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 21:50:26 2025 GMT
Not After : Jul 17 21:50:26 2026 GMT
Subject: CN=686ee427-d26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:b9:fd:13:a6:34:15:fc:55:6b:93:0e:3e:
7c:27:ee:12:d5:b7:d7:2b:41:aa:36:1d:3c:b3:0b:
39:c9:fb:f5:3a:71:32:b2:72:bf:d6:e7:e0:b7:c0:
a1:90:ed:64:ed:9d:b6:51:24:5a:69:fc:26:ce:c4:
44:15:de:95:45:43:95:fa:af:fe:73:19:97:2f:10:
88:e8:da:64:7b:3c:f5:d1:84:84:91:14:35:fe:14:
01:5b:67:ad:81:43:e9:e8:d1:75:24:74:96:ad:75:
fd:4f:63:19:57:c0:5d:55:ea:f3:76:d9:26:04:c2:
dc:ff:ac:fb:8c:24:17:e8:0f:d0:c7:da:6e:6a:a3:
9c:22:1e:13:75:0f:94:0d:0b:8e:0f:5a:44:90:94:
09:29:43:db:37:b8:d0:f1:8c:3f:12:2f:b3:f0:74:
b5:0f:d4:f7:ce:51:ad:d9:69:69:ba:07:d7:a4:a8:
33:d1:1f:c8:10:b3:54:67:32:96:08:cd:74:df:af:
dc:16:94:2a:22:93:ca:07:b9:10:c9:d7:07:98:29:
75:d0:4e:18:ad:63:00:ea:f0:ec:7b:ee:27:18:19:
34:04:a1:e1:69:bf:44:12:49:d1:d7:37:6e:fe:5d:
dc:2f:cc:7a:ef:cd:7f:70:3b:27:7f:26:93:ca:e0:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C8:16:4C:9C:17:FC:64:69:9F:1F:90:8C:82:5A:EC:3B:56:A2:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBCD33545D0E11F0AE52E39ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.202.117.0-154.202.127.255
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
10:bb:92:f1:37:8d:30:54:81:7e:10:e1:30:71:96:e9:0f:9d:
af:0e:62:3c:f7:5d:ae:37:c7:60:cb:87:8e:bb:82:7f:45:fe:
d2:7e:bd:70:68:79:3e:d9:24:d9:ad:f4:26:63:43:13:c8:06:
13:db:a5:ff:bd:6d:b8:3e:c4:c6:9c:bf:22:99:46:96:6b:a9:
62:ae:94:75:38:bd:e3:8b:71:9d:e0:c7:52:b1:86:b0:8e:4a:
21:2e:f4:e2:80:c6:15:95:59:a2:6f:d2:2f:78:76:ce:06:a4:
ed:dc:79:6a:f8:77:2a:36:59:6b:c6:57:f7:51:cd:04:d1:0e:
ed:db:26:58:00:a7:87:80:f9:ef:49:a5:4e:6d:93:bc:e7:b7:
61:57:f6:ea:32:e3:a5:74:41:b9:90:01:93:aa:41:58:6c:64:
87:4f:e6:3c:fe:22:bb:78:9f:f1:c3:fd:40:70:70:d7:2f:3c:
a4:25:41:e7:be:f8:d1:ad:2c:0e:28:91:a4:43:7b:39:fc:49:
98:a3:12:55:e3:89:9c:77:8b:9b:1b:4d:3e:60:74:5f:dd:23:
4f:62:dd:b1:57:91:56:55:24:95:1d:32:41:aa:49:b5:82:63:
2f:9d:28:c2:bb:79:d2:b9:cd:9d:e8:c7:ae:9f:df:ec:77:1e:
02:f2:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:49 2025 by rpki-client