Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D54680B25AB911F0B73186E3DAE4EC9C.roa
File: D54680B25AB911F0B73186E3DAE4EC9C.roa (raw, json)
Hash identifier: E503N6v79kPIPBzSVtVt0mGun3T20YQUWkCXyhClUlU=
Subject key identifier: 65:C6:78:94:B4:DB:4D:D1:D1:3F:91:E1:73:66:00:FB:09:6C:1B:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D54680B25AB911F0B73186E3DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 22:37:45 +0000
ROA not before: Sun 06 Jul 2025 22:37:39 +0000
ROA not after: Wed 03 Sep 2025 22:37:39 +0000
asID: 150008
IP address blocks: 154.206.21.0/24 maxlen: 24
154.206.24.0/24 maxlen: 24
154.206.25.0/24 maxlen: 24
154.206.26.0/24 maxlen: 24
154.206.27.0/24 maxlen: 24
154.206.28.0/24 maxlen: 24
154.206.29.0/24 maxlen: 24
154.206.30.0/24 maxlen: 24
154.206.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101330 (0x18bd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 22:37:39 2025 GMT
Not After : Sep 3 22:37:39 2025 GMT
Subject: CN=686afab9-bf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:98:fb:03:c0:a7:53:a2:86:a0:50:7a:dd:0c:
09:18:67:cc:1d:b0:f5:88:00:5f:93:12:ab:79:b2:
79:7c:66:ff:21:b5:98:b4:88:1a:a6:fb:fd:1e:0e:
54:06:df:ad:7b:3b:ed:41:b8:9e:07:bc:88:4c:15:
b9:12:a6:05:ec:67:96:6b:d3:4e:b7:aa:f7:32:9e:
d4:f0:5d:00:62:13:08:0e:e2:f1:0e:38:11:48:26:
ef:6d:df:b4:b3:a7:57:5c:0f:61:75:30:c4:65:d7:
20:b8:55:70:a2:fa:43:13:9e:bc:c1:6a:62:01:35:
2d:37:d3:5c:26:a5:a6:6b:4b:ec:b8:cd:1f:d0:88:
f5:bf:eb:8c:56:b4:75:1b:3f:70:84:15:24:ca:8a:
cc:6c:e4:98:79:22:a6:63:9b:82:1f:63:31:1f:6f:
4f:72:d8:ee:d2:6e:ed:56:de:b4:ec:f5:68:6d:a7:
a4:4e:61:bd:b5:42:1a:56:54:e4:7b:f0:e9:a3:53:
56:fd:49:1b:93:a8:ea:b6:2d:e7:20:e7:76:50:10:
ff:9d:9b:bc:72:74:54:e6:55:fe:63:61:b2:3c:25:
6f:01:55:ad:a1:de:a8:a8:97:65:62:64:b1:3d:1f:
c4:f4:69:35:f0:d8:1c:c7:01:90:b9:0f:14:a4:c2:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:78:94:B4:DB:4D:D1:D1:3F:91:E1:73:66:00:FB:09:6C:1B:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D54680B25AB911F0B73186E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.21.0/24
154.206.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:05:21:90:8a:13:7c:e8:25:b3:9b:41:fd:01:a1:00:5d:42:
58:c6:1d:37:75:8f:9b:09:97:10:0f:cc:d5:77:9b:36:0b:59:
5a:9c:f5:54:5e:78:ef:95:17:2c:a4:cf:15:64:33:91:8b:4b:
e7:bd:40:8d:16:c6:2e:78:29:ab:39:39:fc:f6:08:56:cb:43:
6b:e2:e3:ec:e3:4c:c8:54:86:1c:df:7d:56:ca:5a:8f:33:f5:
f2:2d:f4:c3:6e:3b:a5:ff:e3:76:ad:91:2b:2b:97:7e:7e:73:
6e:f1:a7:ba:3d:dc:78:cd:2a:59:f1:74:95:2d:d3:56:6f:be:
99:92:72:90:e9:28:50:81:3f:be:b8:f8:a3:7e:a6:54:00:97:
73:ed:5c:57:2f:65:e4:df:14:df:b7:9b:dd:7d:a1:9f:c8:2f:
08:a2:f7:f7:8f:04:32:fe:b9:25:36:52:89:e8:f9:ec:ee:da:
18:e4:92:c0:97:3b:fe:b8:17:be:21:bb:f2:a3:10:2a:52:91:
9f:89:75:4a:5a:ed:95:39:d2:49:16:06:ac:42:03:02:9e:e2:
7c:37:8d:6c:c7:82:8c:fc:bc:7f:31:21:5c:58:16:9f:23:af:
e8:a8:81:3c:30:1f:6b:a1:df:13:ac:90:f7:46:2a:5c:af:1c:
d6:20:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:07 2025 by rpki-client