Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F05DB63E5AA211F0A31208D4DAE4EC9C.roa
File: F05DB63E5AA211F0A31208D4DAE4EC9C.roa (raw, json)
Hash identifier: jIeFvAzKhjREnb3VaQRSQ7piayolFV0pKK137FSn0BY=
Subject key identifier: 0A:03:5B:8B:53:38:85:08:1D:2E:F5:E7:DD:4E:E7:10:ED:5F:20:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F05DB63E5AA211F0A31208D4DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 19:53:52 +0000
ROA not before: Sun 06 Jul 2025 19:53:47 +0000
ROA not after: Fri 17 Jul 2026 19:53:47 +0000
asID: 8796
IP address blocks: 154.193.192.0/18 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101294 (0x18bae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 19:53:47 2025 GMT
Not After : Jul 17 19:53:47 2026 GMT
Subject: CN=686ad44f-cdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:35:31:1c:9d:bf:a1:84:ee:57:14:47:03:
75:69:dc:18:80:db:99:32:94:76:da:4f:bf:1c:ce:
65:01:ee:aa:61:62:6b:d0:25:22:88:f9:48:68:26:
99:55:83:1e:59:7f:13:b1:84:19:3d:20:66:09:09:
10:d2:cf:2c:a6:37:21:60:50:27:64:d7:ca:02:34:
f1:27:4a:7f:76:9e:62:cd:9f:e3:11:4c:8b:e1:6a:
6e:0b:5b:49:84:0f:e4:e1:9d:1b:56:8b:96:e4:52:
c1:68:9e:a0:c6:48:b1:b5:23:1b:e3:ac:6a:63:bf:
ba:e0:2f:14:28:ec:20:80:26:0a:51:ab:36:d9:a8:
3a:cd:02:b1:1f:2e:e8:89:af:10:22:33:d1:c7:c1:
7b:12:06:fb:42:92:96:a2:99:31:07:d1:a2:d7:0e:
ad:b5:fa:a4:02:ef:bc:4a:b9:5c:f2:c0:81:ad:ce:
4b:5f:bc:8a:48:de:53:f9:1e:45:49:15:47:dd:69:
ab:dd:be:9d:31:8d:e1:20:49:31:fa:8d:a0:2b:8f:
66:b4:e0:22:67:65:52:e0:85:4c:0c:60:73:5e:17:
00:7f:ed:80:03:9c:3c:78:3f:a1:9c:57:ef:c4:f0:
f6:68:17:69:cc:50:0c:a6:a8:4b:f1:d1:11:cd:00:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:03:5B:8B:53:38:85:08:1D:2E:F5:E7:DD:4E:E7:10:ED:5F:20:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F05DB63E5AA211F0A31208D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
35:6e:9b:b5:56:72:34:e7:d4:38:d4:dc:6b:14:d9:be:ef:7f:
76:fb:4d:5b:74:4f:da:39:fd:4e:05:ea:25:a9:ec:a4:4e:5f:
34:f8:cc:0e:7e:f1:d3:d2:86:72:97:89:ac:04:cf:68:d0:01:
af:59:4e:59:fe:c5:dc:bd:c9:15:8a:8f:5b:00:16:f0:ac:db:
7e:7d:5e:53:27:69:a5:7d:86:c2:2c:99:3e:0f:5d:c7:3a:31:
b1:e3:a5:23:bc:ed:ef:6e:7b:9c:4b:6e:e6:79:7a:25:b5:ef:
c2:70:ce:55:f1:3f:03:02:93:c0:f5:1c:69:35:21:45:b4:6e:
c1:03:56:9e:c7:f5:17:68:76:1f:a1:aa:d0:46:22:72:da:6b:
5d:de:c7:47:0c:5b:05:fc:0b:6a:41:ad:9f:2a:d5:81:c2:0b:
18:a8:f1:47:64:a8:9e:45:a5:4b:df:b3:81:28:7e:f0:cf:7b:
08:4e:8b:42:b6:ef:fa:9c:e5:25:8e:dd:ba:ac:b6:50:55:17:
69:60:f3:f8:91:6e:cd:89:ca:96:08:14:a3:4f:d2:7d:4c:ac:
55:83:5d:7b:9c:a6:c4:68:dd:38:30:24:95:5f:61:09:27:36:
c6:a2:0c:a6:73:0b:f6:59:68:be:90:49:28:da:2f:8e:a9:a5:
ad:5e:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:48 2025 by rpki-client