Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FD75CC3ADC11F0A80BA897DAE4EC9C.roa
File: D9FD75CC3ADC11F0A80BA897DAE4EC9C.roa (raw, json)
Hash identifier: 28AstliPlamN3Z0bfDzYAjHnB18fy4TnMdbnWd2MsEw=
Subject key identifier: 26:FD:92:2B:CE:B7:B6:B3:74:C6:FC:7A:91:68:C1:4C:48:4F:A7:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0182FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FD75CC3ADC11F0A80BA897DAE4EC9C.roa
Signing time: Tue 27 May 2025 09:27:48 +0000
ROA not before: Tue 27 May 2025 09:27:43 +0000
ROA not after: Fri 26 Jun 2026 09:27:43 +0000
asID: 984
IP address blocks: 154.200.51.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.149.0/24 maxlen: 24
154.200.150.0/24 maxlen: 24
154.200.153.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99071 (0x182ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 09:27:43 2025 GMT
Not After : Jun 26 09:27:43 2026 GMT
Subject: CN=68358594-44ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:83:d5:8a:c0:c7:8f:fa:35:04:7b:88:43:
e3:20:eb:f7:55:a9:5f:c1:c4:62:84:de:20:db:c4:
ab:63:cd:cd:91:f2:a6:f2:02:d2:d4:1e:62:03:4c:
22:0b:93:b3:a4:45:fb:e4:2a:bc:14:3d:ac:a9:8c:
72:d4:3a:4e:93:85:8a:4f:e4:fd:7f:e9:dc:ca:44:
c2:72:eb:87:8a:28:01:ab:86:41:ff:fc:91:63:4d:
67:55:2d:6b:e1:b2:40:bd:8e:7d:e5:76:6e:98:66:
b6:c2:36:12:2a:f0:59:05:07:d1:92:ab:fd:4f:6a:
57:7d:7c:bd:4f:6b:4d:a9:8d:4a:3b:d8:97:e4:89:
d0:2f:69:98:d5:66:ff:37:e7:f9:aa:14:c0:bc:88:
69:c7:5f:43:da:38:8b:6a:46:a3:63:ce:26:78:3f:
fd:5c:8e:0b:64:24:70:a9:62:ea:06:12:bc:ac:a1:
0b:35:37:f5:57:cc:61:44:31:6d:ae:c3:cc:31:28:
48:56:61:69:c3:e7:f6:f7:72:f0:5e:36:7c:3c:2d:
97:aa:cc:aa:c7:35:c8:0f:e9:31:25:7b:a5:d3:d6:
46:88:bc:de:04:14:9d:4f:97:6a:23:a9:08:c6:81:
6c:62:b1:37:73:47:a3:1d:9a:24:87:4a:52:c4:9d:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FD:92:2B:CE:B7:B6:B3:74:C6:FC:7A:91:68:C1:4C:48:4F:A7:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FD75CC3ADC11F0A80BA897DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.51.0/24
154.200.131.0/24
154.200.149.0-154.200.150.255
154.200.153.0/24
154.200.160.0/24
154.200.189.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ca:eb:fe:d0:39:8a:ce:06:33:97:f0:8e:a6:68:58:c8:29:
61:12:93:34:c9:e2:f5:3e:f3:87:36:43:47:d4:8e:cc:bf:40:
00:56:77:66:39:75:c7:15:43:ba:16:c6:73:c7:ab:07:81:80:
71:56:91:54:7a:b1:b9:0e:45:96:b5:06:14:e7:29:3a:d7:7c:
58:85:32:fc:66:e9:80:9f:9a:33:cf:d8:24:ba:d9:de:5b:22:
21:a4:74:c6:21:20:36:c2:07:f7:2e:50:18:a7:a4:10:48:55:
6d:a7:f3:85:83:8e:af:2e:ae:df:3a:fd:a1:2e:1e:a7:96:cf:
ed:87:5f:7a:10:51:88:cb:9a:b8:c2:e9:52:cc:a0:8d:9b:c5:
3b:af:84:47:6a:4f:aa:8f:35:39:5a:bc:8d:1e:ce:7f:f6:cd:
03:bb:dc:81:da:74:93:a1:41:02:92:f2:6a:46:f9:5b:7b:e4:
6f:cf:1a:6e:9f:26:1a:83:af:2e:87:37:ac:4c:25:ca:69:75:
8c:e0:e3:1b:40:c2:e1:0d:37:ec:df:da:cb:15:02:39:33:41:
32:80:9f:f9:f3:c0:53:af:f3:61:a3:78:de:bc:3e:18:5a:46:
c5:bf:bf:64:f9:91:68:ba:f7:62:49:29:7c:c4:4d:75:f6:3d:
b7:a2:47:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:59 2025 by rpki-client