Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3A3FBF85E4111F0A20B28B9DAE4EC9C.roa
File: F3A3FBF85E4111F0A20B28B9DAE4EC9C.roa (raw, json)
Hash identifier: 8cvTg8a1c3TEDjN8X1WvwHqxjyuJGQINKiKtCvhJS30=
Subject key identifier: 62:C5:B6:69:A3:3C:D8:2D:EE:4B:B2:9B:4D:C0:C8:57:1C:A1:E3:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3A3FBF85E4111F0A20B28B9DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 10:29:41 +0000
ROA not before: Fri 11 Jul 2025 10:29:36 +0000
ROA not after: Sat 16 Aug 2025 10:29:36 +0000
asID: 22773
IP address blocks: 154.202.78.0/24 maxlen: 24
154.202.79.0/24 maxlen: 24
154.202.80.0/24 maxlen: 24
154.202.81.0/24 maxlen: 24
154.202.82.0/24 maxlen: 24
154.202.83.0/24 maxlen: 24
154.202.84.0/24 maxlen: 24
154.202.85.0/24 maxlen: 24
154.202.88.0/24 maxlen: 24
154.202.90.0/24 maxlen: 24
154.202.92.0/24 maxlen: 24
154.202.93.0/24 maxlen: 24
154.202.94.0/24 maxlen: 24
154.202.95.0/24 maxlen: 24
154.202.96.0/24 maxlen: 24
154.202.97.0/24 maxlen: 24
154.202.98.0/24 maxlen: 24
154.202.102.0/24 maxlen: 24
154.202.107.0/24 maxlen: 24
154.202.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 01:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101711 (0x18d4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 10:29:36 2025 GMT
Not After : Aug 16 10:29:36 2025 GMT
Subject: CN=6870e794-73ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:6f:70:b2:12:5d:b7:9c:49:97:04:b9:8b:
1c:af:e1:ab:a6:2a:b3:12:fa:58:0e:d6:6e:9d:bb:
5b:f4:2c:93:07:ed:60:5d:a4:62:d9:92:eb:8b:6e:
70:0f:81:45:57:f3:5c:10:ce:80:0a:7d:23:18:9b:
49:f3:03:6b:85:b5:52:88:bb:16:ea:b2:32:6f:67:
ad:d7:62:e0:a9:08:e8:51:0a:69:43:6c:1f:de:0e:
b6:22:b9:c4:5d:fb:7d:4e:92:83:9d:80:11:6c:e3:
81:36:f7:54:06:64:55:b7:84:c9:37:35:f8:fe:f9:
5a:6c:ec:95:66:99:5f:8e:55:70:e4:09:66:79:ee:
dc:e3:ad:b5:35:61:40:63:79:2d:fd:1a:be:fe:4c:
8b:a9:54:4f:ee:d7:a1:35:16:cd:b2:2d:d0:b4:c7:
8f:e8:80:6c:07:a4:dd:37:0b:39:a0:c4:ce:2d:d3:
01:70:8d:53:fc:76:85:a4:e1:12:75:fc:49:b9:28:
dd:06:b7:2e:08:86:0b:55:ab:60:81:24:90:8f:46:
12:a7:3b:cb:32:91:b2:e4:a3:8f:1b:e8:f8:ae:3b:
af:38:4e:83:e3:42:52:3a:81:a7:30:b7:c6:60:cc:
7d:9d:b8:04:f6:3c:de:5f:89:2c:50:b9:b1:45:9a:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C5:B6:69:A3:3C:D8:2D:EE:4B:B2:9B:4D:C0:C8:57:1C:A1:E3:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3A3FBF85E4111F0A20B28B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.78.0-154.202.85.255
154.202.88.0/24
154.202.90.0/24
154.202.92.0-154.202.98.255
154.202.102.0/24
154.202.107.0-154.202.108.255
Signature Algorithm: sha256WithRSAEncryption
39:32:84:11:7f:28:6a:fa:43:49:44:9c:00:81:10:a6:b5:22:
47:64:3d:23:94:ed:82:2c:f7:63:e9:d4:f1:32:29:4b:c8:a6:
d0:55:4f:44:64:74:1b:51:52:f5:8c:c5:ec:5a:3e:50:35:17:
40:e3:b7:c2:c3:49:35:ed:86:38:51:67:e2:34:e1:6b:b1:94:
a8:64:16:e4:af:71:d9:6d:5b:23:96:25:7c:07:8a:21:fe:b9:
8d:ba:42:81:2c:f3:c2:53:72:7c:57:7b:a5:4d:f3:03:d5:7c:
d3:1e:02:ef:cd:9c:4a:1c:a5:36:42:94:47:71:6e:37:d9:e2:
96:72:b2:70:99:27:2d:10:a1:7e:61:21:e9:52:0b:f0:4e:f8:
61:d1:5b:2d:20:4a:31:55:47:ab:1a:03:d9:d3:15:88:f6:fb:
f4:e3:73:86:d6:17:2f:25:50:70:0e:73:78:f7:26:b7:28:8e:
75:45:eb:1c:c7:96:66:8d:67:82:82:01:a5:69:94:77:78:d7:
60:d0:8b:75:34:1f:b9:a4:27:d9:17:63:44:51:ab:c3:bb:b7:
20:b7:e4:34:c7:ac:1e:8f:94:66:f4:d1:b0:76:b2:a6:30:fe:
a6:06:90:c8:ed:11:26:97:73:c9:6c:49:df:d4:c9:09:32:58:
53:eb:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:37:45 2025 by rpki-client