Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE4C81688B611F08647ED94DAE4EC9C.roa
File: 7EE4C81688B611F08647ED94DAE4EC9C.roa (raw, json)
Hash identifier: X5qwdIS8Kq9ucWmzdpcY0mVVFC9JTP02OdSJwsZwhps=
Subject key identifier: 87:6F:AC:19:3F:B7:50:91:36:1A:45:43:2D:E0:95:38:26:EB:74:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE4C81688B611F08647ED94DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 11:09:45 +0000
ROA not before: Wed 03 Sep 2025 11:09:40 +0000
ROA not after: Fri 10 Oct 2025 11:09:40 +0000
asID: 203020
IP address blocks: 154.217.42.0/24 maxlen: 24
154.217.43.0/24 maxlen: 24
154.217.44.0/24 maxlen: 24
154.217.45.0/24 maxlen: 24
154.217.46.0/24 maxlen: 24
154.217.47.0/24 maxlen: 24
154.217.48.0/24 maxlen: 24
154.217.49.0/24 maxlen: 24
154.217.50.0/24 maxlen: 24
154.217.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105716 (0x19cf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 11:09:40 2025 GMT
Not After : Oct 10 11:09:40 2025 GMT
Subject: CN=68b821f9-6c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:33:b3:99:50:0e:5a:55:b6:07:7b:7f:ff:
9e:7f:88:33:16:d3:41:5d:ab:9a:9d:45:67:be:8d:
49:d9:f2:b6:ad:a7:66:8b:ca:77:72:4b:ae:c9:7a:
db:9f:9a:a9:bd:d6:50:e2:48:22:2b:4b:65:29:9d:
73:3e:fb:79:e4:78:a6:1b:35:0a:61:61:2b:c2:6f:
69:85:a2:a5:45:af:3b:38:78:28:bb:53:de:79:5c:
54:01:ef:86:37:f9:be:18:e0:56:52:f1:67:4e:6b:
19:5d:2c:15:9e:a5:86:08:40:2a:df:cd:c2:b9:d2:
4e:e6:fb:2b:ed:25:bb:84:31:4b:0d:21:05:3e:f0:
18:49:4c:02:5b:3f:79:ac:12:01:4f:94:bf:8c:7b:
e6:d3:2e:18:f6:f1:7a:54:9c:21:fa:2d:26:5b:09:
4d:50:c5:1f:81:de:90:bb:b0:2f:01:0b:80:9d:d8:
66:04:fd:7d:e0:29:86:aa:1f:0f:91:da:70:40:18:
a7:03:bf:7d:7d:be:97:fc:e6:be:24:fe:f9:06:75:
3e:19:1b:d1:76:0e:57:bb:64:fc:03:b9:70:c9:c5:
df:31:27:62:48:37:57:24:8e:1c:e0:eb:d3:00:ab:
97:46:43:6f:8a:75:62:e7:79:4f:db:22:9a:08:94:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6F:AC:19:3F:B7:50:91:36:1A:45:43:2D:E0:95:38:26:EB:74:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE4C81688B611F08647ED94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.42.0-154.217.51.255
Signature Algorithm: sha256WithRSAEncryption
cf:d9:7a:d9:8f:33:73:6d:54:d6:0b:df:cc:84:68:e7:c8:96:
7f:5a:3b:71:f4:45:5d:cc:44:cf:ff:88:c4:34:54:46:c9:51:
c4:6a:39:8e:b9:5c:e1:93:51:70:a5:6a:68:88:de:98:90:0e:
98:14:19:dc:81:81:21:4a:78:31:ff:46:61:36:7d:62:40:1c:
5e:0e:ec:3e:c0:42:69:47:37:f7:dd:45:30:5a:49:38:82:5d:
6c:45:ac:67:b2:a7:aa:ad:27:f7:7e:99:91:e0:72:41:97:ba:
27:26:12:64:9a:40:ef:d8:68:24:08:91:03:df:2d:87:fb:cd:
bc:a5:df:5f:68:02:5e:ec:5c:bf:d8:88:27:1b:d6:ff:d9:3c:
9c:36:5f:ef:ad:11:69:24:16:b6:77:a6:59:38:84:16:8c:46:
41:dc:60:94:01:3d:bf:31:b0:ac:14:29:7c:95:24:e7:63:ae:
97:70:d4:af:80:61:32:16:47:8c:51:a8:83:92:13:d2:51:84:
e3:86:33:f9:92:64:0d:a6:b8:0f:71:5b:b1:67:99:0a:5a:08:
3c:cd:56:85:8e:09:64:30:e2:c0:be:cf:be:c5:b3:8e:f9:51:
f1:3c:41:3e:c0:fc:1e:9a:7e:e2:da:eb:13:7a:5c:cf:9e:c6:
26:b4:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:03 2025 by rpki-client