Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9328DE63BC011F0BE5520DFDAE4EC9C.roa
File: D9328DE63BC011F0BE5520DFDAE4EC9C.roa (raw, json)
Hash identifier: 4emJCdI10guzF8TI3V0vyfDbfEmc58Drpt7dlw4PVA4=
Subject key identifier: 5F:F5:15:5F:5C:19:41:37:99:CE:41:C9:3D:1B:8D:81:AD:79:3F:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018368
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9328DE63BC011F0BE5520DFDAE4EC9C.roa
Signing time: Wed 28 May 2025 12:39:52 +0000
ROA not before: Wed 28 May 2025 12:39:47 +0000
ROA not after: Sun 06 Jul 2025 12:39:47 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
154.219.195.0/24 maxlen: 24
154.219.206.0/24 maxlen: 24
154.219.208.0/24 maxlen: 24
154.219.209.0/24 maxlen: 24
154.219.210.0/24 maxlen: 24
154.219.212.0/24 maxlen: 24
154.219.213.0/24 maxlen: 24
154.219.214.0/24 maxlen: 24
154.219.215.0/24 maxlen: 24
154.219.216.0/24 maxlen: 24
154.219.217.0/24 maxlen: 24
154.219.218.0/24 maxlen: 24
154.219.219.0/24 maxlen: 24
154.219.220.0/24 maxlen: 24
154.219.221.0/24 maxlen: 24
154.219.223.0/24 maxlen: 24
154.219.249.0/24 maxlen: 24
154.221.52.0/24 maxlen: 24
154.222.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99176 (0x18368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 12:39:47 2025 GMT
Not After : Jul 6 12:39:47 2025 GMT
Subject: CN=68370417-fcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:1c:14:9e:ce:2c:44:8a:cb:e4:ba:df:8b:
74:9e:4d:57:ec:f0:5f:4c:47:e4:66:d4:ee:f4:1c:
f7:19:24:48:ed:19:82:a9:57:9c:ad:51:52:2e:49:
77:ec:82:e1:f9:4e:be:04:17:11:2c:18:00:60:3b:
f8:90:47:23:13:93:36:6e:64:ca:d1:bf:0f:b9:c5:
20:ed:5e:32:b7:78:bf:45:a9:3a:57:25:3e:4d:23:
4c:d5:63:84:fb:d3:d5:42:90:fc:f1:d4:4c:bf:26:
a9:c0:50:0b:64:dd:78:3d:d3:73:87:85:06:30:fd:
93:0d:ad:3f:1c:d6:15:a1:55:4f:1b:d7:16:3f:fd:
c5:00:5f:6a:27:76:15:74:cc:9e:f5:c6:db:c1:d7:
16:ec:3b:a3:79:7a:6d:c5:a8:25:d2:d6:d8:66:dd:
c0:59:99:1f:2e:78:61:f9:bc:bc:20:aa:d5:20:f9:
dc:1b:dc:5e:5f:be:da:5c:47:cd:7c:9e:eb:f7:d0:
2f:e1:b8:5d:a3:18:e6:30:a1:c8:4d:b7:1e:bb:cd:
ac:92:e4:08:74:48:6d:9a:e9:34:d3:7c:bb:e1:15:
f3:5e:4e:f5:8c:ca:5d:ff:03:2c:fc:27:ea:a7:bc:
16:b9:50:62:41:07:3a:76:9d:40:fc:2b:e1:ea:0a:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F5:15:5F:5C:19:41:37:99:CE:41:C9:3D:1B:8D:81:AD:79:3F:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9328DE63BC011F0BE5520DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
154.219.195.0/24
154.219.206.0/24
154.219.208.0-154.219.210.255
154.219.212.0-154.219.221.255
154.219.223.0/24
154.219.249.0/24
154.221.52.0/24
154.222.197.0/24
Signature Algorithm: sha256WithRSAEncryption
85:48:40:34:39:9d:64:45:27:35:f4:81:ba:45:de:3d:91:46:
aa:e9:77:a5:55:00:bd:f2:a7:1c:c4:90:1f:54:eb:a2:cf:ce:
e4:b1:82:3c:93:1f:64:41:b6:51:01:3d:66:39:07:8f:b2:a5:
06:69:0d:2e:e7:bc:e4:4c:d0:3d:ae:0f:a1:78:76:f1:b2:c7:
55:f8:a6:0d:9b:c5:4f:ff:5b:b4:b0:87:d8:33:bd:cb:db:7a:
79:58:64:0b:7e:7b:ad:1e:86:47:c5:38:44:d2:17:b3:5d:e5:
ef:20:71:36:45:43:eb:bb:8e:ef:70:4d:56:11:41:92:81:e8:
9c:c5:f4:b3:ae:41:b8:51:9b:fa:93:c0:24:08:cc:60:2c:0d:
4f:c1:8b:ea:23:52:79:79:ce:f3:c2:9e:fd:38:59:f5:b9:a5:
62:32:71:3d:4f:e1:51:15:48:41:8b:24:33:ac:70:46:5f:59:
74:be:70:41:47:f4:fe:72:0f:86:19:98:17:b7:9b:85:6e:db:
0c:63:96:d9:22:60:11:32:f3:d3:53:8e:72:c8:d6:91:4f:48:
e9:e7:c1:9a:6a:c4:54:c0:61:16:0d:9f:f9:ea:66:1e:23:89:
53:7a:fa:1f:43:ec:46:6b:31:39:d7:de:33:74:40:ff:24:6f:
f6:0d:8e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:59:28 2025 by rpki-client