Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9841AF44407811F08A93BD8BDAE4EC9C.roa
File: 9841AF44407811F08A93BD8BDAE4EC9C.roa (raw, json)
Hash identifier: HPKzeDHjVNnTQOwpsRdlwDQxnrp8WfXnOnn1usy3kCo=
Subject key identifier: AA:5E:7D:B3:90:01:AD:BD:F9:57:28:E8:BB:AE:36:DA:CC:4A:9D:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01847D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9841AF44407811F08A93BD8BDAE4EC9C.roa
Signing time: Tue 03 Jun 2025 12:45:15 +0000
ROA not before: Tue 03 Jun 2025 12:45:10 +0000
ROA not after: Tue 15 Jul 2025 12:45:10 +0000
asID: 138915
IP address blocks: 154.203.133.0/24 maxlen: 24
154.203.134.0/24 maxlen: 24
154.203.135.0/24 maxlen: 24
154.203.138.0/24 maxlen: 24
154.203.139.0/24 maxlen: 24
154.203.140.0/24 maxlen: 24
154.203.141.0/24 maxlen: 24
154.203.146.0/24 maxlen: 24
154.203.147.0/24 maxlen: 24
154.203.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99453 (0x1847d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 12:45:10 2025 GMT
Not After : Jul 15 12:45:10 2025 GMT
Subject: CN=683eee5b-bcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:d3:5b:1e:e7:2b:cf:b4:64:d9:64:ca:b3:
3b:64:bb:4d:f3:cd:da:a8:d2:f5:14:98:2e:c2:60:
db:6a:47:72:c8:b1:92:ce:88:09:51:ce:e5:78:0b:
05:12:74:84:9f:5f:fc:41:ee:cd:e0:76:7c:21:d5:
8c:b5:8a:42:53:a2:7d:94:86:75:1b:05:40:d5:a8:
cb:c7:9a:53:f9:46:a1:bc:d7:6e:ec:81:99:cd:9b:
36:30:57:92:f6:b5:1c:0c:fa:29:0e:89:72:5a:15:
e9:10:73:34:45:13:df:42:bf:ef:1d:e0:81:84:01:
65:c6:10:8f:7a:e7:c4:ec:b8:ce:04:fc:2c:24:12:
f8:07:40:dc:1b:6e:33:73:dd:7d:ff:0d:09:01:5f:
a1:50:c0:49:81:40:d0:d4:5d:47:ab:3f:50:fe:2e:
07:b1:8e:0c:39:f1:e5:08:96:e4:dc:ca:ec:5b:25:
b8:e5:88:2a:06:2e:39:b2:f7:c0:14:86:87:03:d3:
ef:a3:29:e8:53:8f:19:c6:1d:de:d8:69:43:b4:ee:
5b:7c:00:a7:7d:6b:a1:0a:c7:85:01:2c:4e:66:b9:
77:74:31:c3:ff:0b:1f:86:2c:44:48:58:f0:c7:12:
72:26:80:54:a4:c7:ea:ef:14:25:92:72:d7:e3:1f:
ed:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5E:7D:B3:90:01:AD:BD:F9:57:28:E8:BB:AE:36:DA:CC:4A:9D:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9841AF44407811F08A93BD8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.133.0-154.203.135.255
154.203.138.0-154.203.141.255
154.203.146.0/23
154.203.152.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e4:1b:aa:f4:d5:15:8b:38:29:20:ea:49:ee:be:8b:4d:94:
78:aa:0f:22:dc:0b:67:3c:3d:a4:f3:ba:34:7e:48:4d:a4:41:
3c:03:dc:72:60:2e:01:ef:99:f3:c8:e5:08:bd:c3:c7:d7:4d:
14:2a:85:11:ec:3e:0a:41:5b:f0:e9:cc:59:17:8e:93:66:71:
5e:0f:f0:8d:19:ec:aa:a7:b5:3e:70:f6:69:5d:40:02:c9:42:
19:1b:d9:90:ef:93:a6:ff:8f:d9:52:08:23:82:e0:cd:86:fa:
45:33:94:57:ca:e8:e9:bd:41:f7:cd:50:3a:d0:07:ec:13:72:
62:c7:d8:95:5d:68:63:f6:b8:04:54:13:ad:8c:c7:52:53:07:
bc:bf:10:2c:73:2d:bf:99:51:f4:4c:28:61:a5:e4:fc:6b:b6:
56:13:8b:75:94:35:b2:a8:7c:eb:b2:46:7d:c5:b7:94:25:76:
04:b5:11:52:e8:52:e9:7c:25:5f:9b:9a:29:ab:0d:b9:68:3c:
ab:de:ee:b5:e8:ce:63:d7:ef:20:97:c5:cc:43:c1:12:2d:f1:
6d:26:f0:ab:54:6c:6b:c6:88:7c:04:83:8e:77:49:f7:60:67:
c1:e6:43:ff:22:2d:c7:fe:c6:7b:53:d8:1f:f2:f7:08:a2:de:
23:66:58:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:24 2025 by rpki-client