Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9951C9B688E711F0B2B7DDD0DAE4EC9C.roa
File: 9951C9B688E711F0B2B7DDD0DAE4EC9C.roa (raw, json)
Hash identifier: lI2DYYE21Zcjx7wxNIy3LN2EYlyF7cHDqwuoZBe6K1E=
Subject key identifier: 5E:08:88:88:A0:88:59:F1:16:75:61:CF:02:6B:6C:68:8C:19:02:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9951C9B688E711F0B2B7DDD0DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 17:01:14 +0000
ROA not before: Wed 03 Sep 2025 17:01:06 +0000
ROA not after: Wed 10 Sep 2025 17:01:06 +0000
asID: 150008
IP address blocks: 154.206.17.0/24 maxlen: 24
154.206.18.0/24 maxlen: 24
154.206.21.0/24 maxlen: 24
154.206.24.0/24 maxlen: 24
154.206.25.0/24 maxlen: 24
154.206.26.0/24 maxlen: 24
154.206.27.0/24 maxlen: 24
154.206.28.0/24 maxlen: 24
154.206.29.0/24 maxlen: 24
154.206.30.0/24 maxlen: 24
154.206.31.0/24 maxlen: 24
154.209.252.0/24 maxlen: 24
154.209.253.0/24 maxlen: 24
154.209.254.0/24 maxlen: 24
154.209.255.0/24 maxlen: 24
154.210.213.0/24 maxlen: 24
154.210.224.0/24 maxlen: 24
154.210.225.0/24 maxlen: 24
154.210.226.0/24 maxlen: 24
154.210.227.0/24 maxlen: 24
154.210.228.0/24 maxlen: 24
154.210.229.0/24 maxlen: 24
154.210.230.0/24 maxlen: 24
154.210.231.0/24 maxlen: 24
154.210.232.0/24 maxlen: 24
154.210.233.0/24 maxlen: 24
154.210.234.0/24 maxlen: 24
154.210.235.0/24 maxlen: 24
154.210.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Sep 2025 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105786 (0x19d3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 17:01:06 2025 GMT
Not After : Sep 10 17:01:06 2025 GMT
Subject: CN=68b8745a-587a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:11:17:ea:63:ee:ac:e5:d7:2d:c0:57:6d:
56:cf:a3:1d:78:36:16:21:79:9e:03:c8:e1:52:9f:
a0:4f:3e:a5:b5:98:f5:57:9e:cf:95:11:2d:10:d3:
d0:6a:54:c4:96:e1:b6:0f:bd:6d:74:c9:8b:88:04:
26:7c:0c:81:7f:db:1a:7f:01:cd:dd:e9:e4:22:c9:
fd:67:8b:a8:93:4b:1c:eb:3e:27:97:65:06:66:29:
40:4e:53:26:3e:52:bb:47:2b:60:f3:f6:d1:9e:79:
6c:37:63:cf:3f:a3:69:e0:7f:6f:f2:95:cd:3d:c6:
0f:56:de:c5:d9:b9:c0:d6:c0:d8:de:17:9c:79:cc:
ac:5f:03:82:32:26:8e:65:a4:9a:cf:bb:df:1c:bb:
33:a2:a1:dc:0e:26:03:dc:9c:a7:2f:66:e2:9a:ff:
b3:8b:93:aa:84:87:99:af:b7:ae:bc:0a:1f:0e:96:
12:50:2e:70:b5:70:3c:54:4e:47:62:0c:eb:94:e9:
37:86:d5:24:77:93:05:a7:44:73:78:f7:c6:c2:bc:
60:b9:dc:0b:4c:f2:d8:dd:e1:bb:a7:3a:7e:b3:2b:
71:cd:7f:10:48:05:a8:44:ea:71:a8:c7:1e:89:fc:
af:90:c8:ec:1e:8c:a1:9b:88:bd:6a:f5:9f:14:9c:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:08:88:88:A0:88:59:F1:16:75:61:CF:02:6B:6C:68:8C:19:02:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9951C9B688E711F0B2B7DDD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.17.0-154.206.18.255
154.206.21.0/24
154.206.24.0/21
154.209.252.0/22
154.210.213.0/24
154.210.224.0-154.210.236.255
Signature Algorithm: sha256WithRSAEncryption
30:57:e3:ac:8d:e8:5f:a3:bc:e4:c7:7d:e4:bb:4e:a5:00:2a:
e1:21:04:73:14:01:eb:91:d1:62:58:bd:24:94:65:70:70:97:
fb:68:9c:53:e2:90:f3:f1:a8:fb:08:eb:1e:36:1c:12:f1:9a:
7b:c3:92:ec:d1:a0:d7:27:c1:36:33:6c:dc:9a:8c:2b:2d:ad:
ec:70:a3:dd:a8:3e:0c:e4:37:3b:bb:b9:8c:e6:b5:d9:94:db:
90:46:b0:df:85:2c:00:a5:dd:0f:06:5d:d4:d8:56:e9:a7:b8:
6f:a5:3a:44:e5:ee:aa:2e:e3:7c:1e:0b:a2:b4:f1:f2:5d:97:
59:a2:31:16:10:b1:f2:15:dc:a7:b4:75:76:1c:16:a2:d0:ba:
9e:23:19:47:88:2d:9d:9b:2d:9f:24:9e:b6:43:09:db:8b:e9:
5b:eb:44:40:90:66:e3:1a:ed:3e:a5:af:81:c8:a5:19:7f:90:
8d:00:ce:ef:da:41:a1:36:55:33:55:6f:e7:32:0c:93:13:5c:
b1:94:4a:ab:f4:45:a8:b6:ec:d4:46:61:fe:22:90:5c:d3:d0:
96:5e:a1:96:e3:97:db:2d:ec:ac:fd:c9:74:29:9e:bf:63:bd:
5e:ee:cb:af:ec:e7:ec:4a:5c:05:9e:94:42:d0:30:47:67:e7:
68:16:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 03:17:01 2025 by rpki-client