Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDFB4F025AAD11F0A525EE97DAE4EC9C.roa
File: BDFB4F025AAD11F0A525EE97DAE4EC9C.roa (raw, json)
Hash identifier: JLd+BvtU9BzWAHaLnii35l7Zbescsmc9VbHh4mpBmqI=
Subject key identifier: 33:84:91:E8:FC:4F:4D:B7:B2:E6:A8:C4:FF:CF:FA:3A:0E:B3:54:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDFB4F025AAD11F0A525EE97DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 21:11:11 +0000
ROA not before: Sun 06 Jul 2025 21:11:06 +0000
ROA not after: Fri 17 Jul 2026 21:11:06 +0000
asID: 400619
IP address blocks: 154.193.192.0/18 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.118.0/23 maxlen: 24
154.202.120.0/21 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101314 (0x18bc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 21:11:06 2025 GMT
Not After : Jul 17 21:11:06 2026 GMT
Subject: CN=686ae66f-0e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:93:cf:1d:23:59:d8:7c:d5:ff:16:e3:08:
2b:5c:47:ea:bd:b5:3a:7e:0d:9a:3c:51:b3:03:47:
6a:cd:6b:2c:32:47:22:bf:4b:d8:ef:bb:99:fa:33:
24:02:c4:ac:38:92:ec:19:11:3d:3d:0a:27:68:44:
93:01:2e:49:cb:be:82:7f:e4:12:40:d2:4d:d8:2b:
17:38:83:96:75:0f:8d:20:5f:cf:8b:26:45:17:81:
ff:cc:ee:16:68:ec:3c:d3:8e:c1:e7:1a:d8:65:12:
11:26:77:7c:a1:d5:e5:9a:24:df:45:82:d7:c3:8b:
e3:d4:de:e8:33:07:e4:bb:55:c2:bf:dc:c9:7e:b6:
1d:3d:7f:ab:63:e0:b5:17:f9:64:a7:aa:71:c9:7a:
06:c8:a1:3e:b2:2f:95:f4:a7:5b:71:c0:a7:f0:dd:
f9:59:48:87:d1:02:c2:07:d0:b1:20:f4:49:c8:9c:
c0:e5:85:e5:ce:d2:65:fa:30:47:96:5e:32:39:aa:
af:ed:16:a8:8c:05:3d:ba:f4:7a:97:f9:22:0f:ae:
36:ba:2b:fa:2c:be:79:62:c5:7f:8a:c5:81:3e:09:
98:5f:98:0b:4b:f1:66:84:2b:f4:43:7e:d6:4d:d6:
9a:e9:4b:df:57:5e:cd:7c:34:2e:46:6e:b3:d6:d5:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:84:91:E8:FC:4F:4D:B7:B2:E6:A8:C4:FF:CF:FA:3A:0E:B3:54:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDFB4F025AAD11F0A525EE97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.202.117.0-154.202.127.255
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
cc:75:c3:ff:01:9c:ad:63:96:05:a1:ea:4f:bb:48:db:e8:b8:
97:50:36:34:7b:6b:a1:01:ea:8c:18:eb:d6:01:46:62:0f:b7:
1a:48:d5:44:53:d5:e5:c4:19:57:cf:e4:fd:be:fc:cb:9b:9a:
a6:57:9f:b8:c8:0e:6f:86:06:55:0f:81:19:bf:42:a3:52:4d:
42:a7:08:99:61:5d:d6:c4:9d:30:28:64:45:cf:0e:a3:b1:0e:
c4:34:62:da:02:6c:0a:43:d6:16:ab:cc:10:2b:c6:fc:14:9b:
da:3a:95:c9:54:8f:a5:19:c2:18:4f:98:90:ee:3a:f6:db:d2:
8d:aa:f7:45:2a:eb:67:ff:57:ee:c3:b0:21:7c:9d:86:58:3a:
c1:80:dd:71:28:b0:ba:4e:81:c0:a7:ed:93:65:2d:82:51:37:
49:1c:aa:b4:8c:90:56:91:99:4c:3f:38:55:70:b5:e4:53:e6:
01:c1:86:57:80:1e:85:f0:59:fa:61:97:15:31:68:54:e8:12:
50:91:6d:7b:6a:ff:ad:1a:e3:97:5b:08:49:22:bf:97:36:c6:
e9:91:98:25:00:1b:de:a6:99:85:64:4c:3d:ad:e4:71:ac:77:
62:e1:c2:16:95:29:17:72:7d:9d:42:87:ec:86:d3:ba:03:93:
8c:34:3c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:44 2025 by rpki-client