Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E59AF4A859AA11F096B77D8DDAE4EC9C.roa
File: E59AF4A859AA11F096B77D8DDAE4EC9C.roa (raw, json)
Hash identifier: jtrN84W3s8jRVmrbfrHwP1iYe+3J/A360LWjCyuGspk=
Subject key identifier: FD:88:3F:95:5D:FB:DF:31:3C:88:73:93:64:E2:19:1F:AB:B8:30:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E59AF4A859AA11F096B77D8DDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 14:18:18 +0000
ROA not before: Sat 05 Jul 2025 14:18:13 +0000
ROA not after: Fri 17 Jul 2026 14:18:13 +0000
asID: 55020
IP address blocks: 154.193.192.0/18 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101124 (0x18b04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 14:18:13 2025 GMT
Not After : Jul 17 14:18:13 2026 GMT
Subject: CN=6869342a-47f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:ea:91:01:02:96:84:69:cc:dd:c4:84:22:
5e:48:f5:94:9c:a1:fa:9f:28:d2:52:8e:3e:24:62:
70:03:fc:8e:5b:35:be:62:84:fd:54:fe:c3:e4:58:
18:34:63:b6:7e:a0:d9:44:c0:70:22:57:75:7f:43:
2b:53:9c:ef:cc:26:36:91:ef:5e:34:21:d4:dd:e7:
e0:5c:22:fc:ae:76:d8:de:39:c3:3c:b7:ff:91:9f:
81:cd:55:f2:5f:a5:b8:f3:03:b9:2c:1a:00:dd:0c:
49:74:15:c8:ac:1b:9a:d6:ee:9e:1f:3a:1b:fc:e3:
10:3b:e4:00:de:74:78:9a:7b:a9:69:c5:d0:cb:90:
5f:6e:8a:45:04:fa:92:06:01:cb:e3:8b:88:08:c5:
c6:15:33:02:84:67:6b:d9:f7:a4:a6:f9:67:9a:d3:
ca:7e:66:0f:1a:27:24:cc:6c:82:20:bf:a5:42:44:
9f:9f:3a:4d:d9:ba:70:b6:7b:06:49:29:6f:09:bc:
11:25:70:d0:91:ac:59:4b:b8:d1:70:59:1a:13:73:
b5:3d:dc:fe:1e:55:f2:c3:d1:17:f8:f7:2b:b3:c8:
fb:4b:64:9f:d9:f2:55:d4:fb:d9:39:ac:0a:be:56:
a1:c8:4f:e5:0b:c9:df:e6:30:41:cc:93:09:3e:3a:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:88:3F:95:5D:FB:DF:31:3C:88:73:93:64:E2:19:1F:AB:B8:30:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E59AF4A859AA11F096B77D8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.202.117.0/24
154.202.120.0/21
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
4a:b4:8b:bd:9e:d8:cb:f4:72:f5:6d:d2:21:9a:b9:c3:2d:81:
7a:dd:a5:55:3c:1e:23:83:9a:52:77:71:f5:cf:04:21:66:f3:
5a:ec:62:56:a0:d1:50:ab:ae:8d:45:6b:a4:2c:1a:38:64:78:
05:28:c5:0a:3d:7a:bf:2f:db:77:60:a3:b8:3f:55:1d:f5:95:
6c:d0:40:51:5e:5b:3f:17:ac:55:bf:fc:a6:e9:5a:a8:df:b0:
cb:03:ce:2b:30:f5:07:a9:f0:a8:36:f2:bf:8f:1b:76:f0:e3:
d0:af:e6:34:46:73:b2:66:f0:87:d4:0e:4d:14:47:e1:85:a8:
47:10:46:14:e9:ab:a3:e8:ab:ab:2d:56:0d:da:5d:90:f9:87:
17:5b:f6:55:02:1c:1d:19:d2:a6:14:5a:af:d7:60:1a:98:b9:
b9:15:3b:33:a7:e0:71:b3:9e:3c:4a:08:c8:99:93:82:11:a2:
4a:7b:16:87:29:86:fd:7b:4c:e0:ca:5b:f5:54:1e:59:97:f9:
68:1e:06:65:aa:a1:ca:40:74:8e:e2:e6:8a:1d:09:64:d8:16:
58:8e:58:96:b7:72:6f:cc:20:67:f5:5a:3c:bd:90:3e:c0:5b:
da:70:52:19:3c:76:dc:c4:1e:6c:40:90:46:33:5f:0f:c2:28:
4e:cb:73:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:46 2025 by rpki-client