Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D980729658D911F08701D7BADAE4EC9C.roa
File: D980729658D911F08701D7BADAE4EC9C.roa (raw, json)
Hash identifier: FNUJVipoivX3WzRPloTSqPKB1lBncL9e2UivniUPwgA=
Subject key identifier: BF:D3:54:6D:31:AB:B2:CA:5C:D2:09:58:87:39:D5:D8:F7:29:1E:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D980729658D911F08701D7BADAE4EC9C.roa
Signing time: Fri 04 Jul 2025 13:21:53 +0000
ROA not before: Fri 04 Jul 2025 13:21:48 +0000
ROA not after: Thu 14 Aug 2025 13:21:48 +0000
asID: 203020
IP address blocks: 154.201.37.0/24 maxlen: 24
154.201.38.0/24 maxlen: 24
154.202.91.0/24 maxlen: 24
154.202.101.0/24 maxlen: 24
154.202.103.0/24 maxlen: 24
154.202.104.0/24 maxlen: 24
154.202.106.0/24 maxlen: 24
154.203.32.0/21 maxlen: 24
154.203.40.0/22 maxlen: 24
154.207.32.0/20 maxlen: 24
154.207.48.0/22 maxlen: 24
154.207.52.0/23 maxlen: 24
154.207.54.0/24 maxlen: 24
154.207.56.0/23 maxlen: 24
154.207.59.0/24 maxlen: 24
154.207.60.0/22 maxlen: 24
154.209.224.0/20 maxlen: 24
154.209.240.0/21 maxlen: 24
154.209.248.0/23 maxlen: 24
154.209.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100958 (0x18a5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 13:21:48 2025 GMT
Not After : Aug 14 13:21:48 2025 GMT
Subject: CN=6867d571-ab19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:38:dc:2b:10:44:c7:19:e6:1b:2f:42:4e:
84:da:4d:af:00:7d:62:21:8b:0f:dd:66:03:d3:b0:
ad:e0:32:3e:49:b8:e0:5e:8b:d6:16:bc:bb:76:00:
6f:2b:56:0d:62:41:30:a7:4c:74:71:26:15:18:e4:
2d:34:43:d5:f9:ca:44:fc:e1:82:60:90:3e:d9:3a:
1f:80:cd:ec:aa:ad:5a:ca:ec:09:a4:c3:09:4d:f2:
05:36:b5:ad:52:d1:7b:c2:9b:25:73:22:fb:b0:06:
ee:8b:3e:d3:6b:b7:05:40:7c:ac:47:3a:d4:20:3b:
6f:40:44:d1:ab:b3:1e:22:32:25:6f:82:7b:7b:10:
4c:1d:89:5a:da:f0:87:8f:e9:34:85:d1:c3:b7:6c:
af:45:64:e3:84:ba:f7:33:23:06:bc:55:7b:c1:81:
b1:38:e7:68:9a:0c:45:23:6a:e5:bc:b8:7e:36:03:
45:61:95:e1:09:08:6b:ad:fe:5f:f3:ce:2c:22:b4:
7d:45:5d:6f:68:78:d2:ef:22:55:17:7b:23:68:8e:
b1:0f:44:95:1d:6b:89:10:77:df:56:af:4a:2a:e1:
80:30:4a:92:4b:7c:51:23:29:86:0a:0d:7a:8d:33:
bd:1e:b7:30:f7:d4:a2:29:16:66:a7:c5:af:ea:ee:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D3:54:6D:31:AB:B2:CA:5C:D2:09:58:87:39:D5:D8:F7:29:1E:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D980729658D911F08701D7BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.37.0-154.201.38.255
154.202.91.0/24
154.202.101.0/24
154.202.103.0-154.202.104.255
154.202.106.0/24
154.203.32.0-154.203.43.255
154.207.32.0-154.207.54.255
154.207.56.0/23
154.207.59.0-154.207.63.255
154.209.224.0-154.209.250.255
Signature Algorithm: sha256WithRSAEncryption
b7:3b:e0:39:cf:de:5e:c3:0f:96:ab:65:67:a3:6d:49:b9:0c:
0f:38:41:46:39:d2:d4:a6:01:12:59:32:84:ce:aa:24:1a:b0:
da:8d:8e:8f:ab:80:2e:12:7b:ac:3f:f1:7e:8f:5b:f4:49:e6:
46:35:86:ac:4d:01:8e:62:5d:f1:b8:a7:e9:df:b0:f0:72:13:
ce:88:16:da:77:a4:04:bc:45:cf:ca:2d:28:e5:b7:3f:94:1d:
04:11:dd:e8:24:f8:45:72:2a:74:ce:58:eb:b6:5c:2c:88:ca:
ed:c4:9a:1d:9c:78:f1:6c:4a:29:e2:57:3c:cf:30:8d:5d:28:
64:2b:ae:11:5f:58:7f:d6:46:41:53:a5:65:93:00:b7:42:5a:
4e:8e:36:d8:6b:80:bd:98:d1:bc:11:27:aa:9f:b7:6a:d1:c1:
ca:06:99:9f:85:3e:b3:42:f3:b9:a3:87:84:6b:ca:90:b1:f8:
fc:6a:f5:d5:fc:48:24:75:2e:a3:d1:25:fe:f8:55:12:a3:26:
bd:c7:73:5a:6e:75:14:0e:87:b6:d6:cd:c5:3e:20:10:58:7f:
93:5e:60:4e:ca:f0:ef:bd:8f:32:60:69:fa:0b:4c:11:12:00:
a6:d7:df:a1:7e:be:0d:b2:fb:c0:f6:64:0e:0b:bc:fc:46:2e:
12:9a:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:02 2025 by rpki-client