Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79056222F65611EFBCD002B0762E951A.roa
File: 79056222F65611EFBCD002B0762E951A.roa (raw, json)
Hash identifier: EifYHqWFNBKHQsZfbJ0RwaSxKLpROuenU9hIum8zVZk=
Subject key identifier: 02:D4:79:E2:C4:72:B1:FC:0B:66:C7:4E:2C:D5:B9:D6:18:C2:84:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79056222F65611EFBCD002B0762E951A.roa
Signing time: Sat 01 Mar 2025 04:34:33 +0000
ROA not before: Sat 01 Mar 2025 04:34:29 +0000
ROA not after: Fri 20 Feb 2026 04:34:29 +0000
asID: 984
IP address blocks: 154.223.106.0/24 maxlen: 24
154.223.107.0/24 maxlen: 24
154.223.108.0/24 maxlen: 24
154.223.109.0/24 maxlen: 24
154.223.110.0/24 maxlen: 24
154.223.111.0/24 maxlen: 24
154.223.112.0/24 maxlen: 24
154.223.113.0/24 maxlen: 24
154.223.114.0/24 maxlen: 24
154.223.115.0/24 maxlen: 24
154.223.116.0/24 maxlen: 24
154.223.117.0/24 maxlen: 24
154.223.118.0/24 maxlen: 24
154.223.119.0/24 maxlen: 24
154.223.120.0/24 maxlen: 24
154.223.121.0/24 maxlen: 24
154.223.122.0/24 maxlen: 24
154.223.123.0/24 maxlen: 24
154.223.124.0/24 maxlen: 24
154.223.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93452 (0x16d0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 04:34:29 2025 GMT
Not After : Feb 20 04:34:29 2026 GMT
Subject: CN=67c28e59-36ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:b6:6b:fc:e0:38:a1:11:de:a3:e4:3d:bc:
18:a6:73:c0:68:a1:7c:8e:f7:0e:6f:24:96:dc:cf:
21:22:c0:ad:d0:c9:76:2a:fa:25:e9:35:8f:fd:c0:
17:39:b1:39:73:c6:54:69:60:12:41:8b:4d:15:ed:
b1:a9:d7:e9:12:7e:39:6d:af:d6:45:81:77:ec:f0:
52:21:0a:97:b0:dd:26:ba:60:47:3f:80:66:70:e2:
8f:90:af:1f:0d:ce:20:c7:0d:00:54:90:35:c1:af:
97:96:85:9f:d1:b5:b1:f5:23:f5:de:6c:45:dd:82:
3d:e4:76:93:c0:b0:b0:99:9e:00:17:0b:b9:33:9c:
5a:9b:f4:85:62:ea:cf:ab:a2:3d:70:b7:c1:34:94:
b6:4f:1a:1c:83:62:f1:84:92:9b:5e:a5:20:ee:2b:
f0:b3:3b:ed:97:14:85:51:83:33:cd:eb:1c:84:71:
d2:3d:71:03:fa:be:da:be:3b:c5:45:14:0f:43:41:
2d:da:29:07:0d:bf:52:bc:2e:31:75:3e:c0:f7:e2:
9f:37:63:0e:6c:1d:ee:40:16:8a:6d:02:79:96:9e:
89:ce:f7:c4:81:21:ac:f0:7c:f8:ed:29:ab:5c:d6:
29:14:a7:91:c6:88:8a:9b:13:81:6e:79:bc:35:8e:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D4:79:E2:C4:72:B1:FC:0B:66:C7:4E:2C:D5:B9:D6:18:C2:84:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79056222F65611EFBCD002B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.106.0-154.223.125.255
Signature Algorithm: sha256WithRSAEncryption
04:ab:5a:07:5a:6c:29:47:78:8d:57:4b:1e:d1:5c:c4:f8:e2:
01:a5:da:e6:72:97:ac:bf:55:f6:66:61:d0:83:3f:7a:bd:d5:
31:11:fd:11:84:66:eb:b0:43:46:68:66:ea:fc:9a:77:f2:79:
c5:57:dc:15:a9:0b:1c:2d:05:f3:4e:81:ae:a1:b1:a6:8f:19:
5b:8f:13:b7:74:a5:a0:4e:43:da:b0:12:10:41:5c:e0:07:21:
4b:6b:36:0a:05:59:24:56:a4:89:1f:5f:bf:32:2b:27:84:56:
62:9e:a8:d1:53:6c:38:a9:b1:96:aa:e0:f8:c6:a5:ed:74:db:
0a:01:bd:79:df:1f:07:b8:9b:6d:d2:24:39:31:28:a5:00:f3:
aa:69:8f:ee:4f:37:79:d7:83:1a:3b:35:9a:aa:a0:c9:fe:82:
66:2a:52:5c:8e:3e:2c:09:0a:5e:5a:a6:60:bd:84:99:45:05:
24:2d:5c:21:2f:ab:40:34:69:33:d7:9d:53:b7:57:38:94:4a:
20:99:83:af:29:98:08:63:00:40:82:26:b8:9f:61:f3:17:74:
f3:9e:67:d2:9f:35:69:ca:f5:c9:e8:d9:a0:e5:06:20:13:5c:
ea:8f:52:de:14:17:97:31:04:2b:1a:9e:4f:b4:eb:57:20:53:
cd:de:50:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:39 2025 by rpki-client