Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F31D061037FA11F0B6861AC8DAE4EC9C.roa
File: F31D061037FA11F0B6861AC8DAE4EC9C.roa (raw, json)
Hash identifier: /btz4VSh16RpZMp4UFpBaEJKRTuM/ZJGeHoqbFOGRGg=
Subject key identifier: BC:5D:91:FD:47:39:F7:F2:CD:4B:9F:78:2A:A6:B4:27:9E:9A:F9:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01823F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F31D061037FA11F0B6861AC8DAE4EC9C.roa
Signing time: Fri 23 May 2025 17:25:41 +0000
ROA not before: Fri 23 May 2025 17:25:36 +0000
ROA not after: Tue 01 Jul 2025 17:25:36 +0000
asID: 44559
IP address blocks: 154.203.216.0/24 maxlen: 24
154.203.218.0/24 maxlen: 24
154.203.219.0/24 maxlen: 24
154.203.220.0/24 maxlen: 24
154.203.221.0/24 maxlen: 24
154.203.222.0/24 maxlen: 24
154.203.223.0/24 maxlen: 24
154.203.224.0/24 maxlen: 24
154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98879 (0x1823f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 17:25:36 2025 GMT
Not After : Jul 1 17:25:36 2025 GMT
Subject: CN=6830af95-3597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:62:8c:49:96:6d:49:d5:07:4e:c2:4b:bc:
43:d4:16:38:ee:29:2f:56:b7:0d:e0:f8:f7:76:e5:
cc:03:0f:17:ce:d7:26:63:4d:5d:fb:b3:92:bb:79:
57:e4:d1:03:98:f1:04:87:49:97:da:dc:f7:ed:3c:
b5:c3:6a:7f:6c:b9:55:f4:a3:8b:8f:79:2a:fc:1a:
7d:85:18:4b:4c:b2:da:b9:1e:ef:e4:0d:78:8c:df:
99:32:2d:32:83:83:f0:b4:aa:a1:d7:6a:8e:a1:28:
bb:69:e4:7e:99:8a:3a:35:9a:e1:1d:c3:fe:58:2b:
ba:2a:49:a9:e7:36:2e:60:76:0e:a7:ad:9c:ca:cd:
5b:c5:51:30:ac:8b:8a:2d:3b:b7:5a:c8:80:64:a2:
fc:60:39:e1:62:b2:aa:1e:70:c5:ac:51:85:34:25:
41:49:dc:b8:c7:15:d4:21:fd:ba:10:a1:65:d8:d7:
88:fe:20:b5:1f:c8:a5:03:62:39:81:65:e7:f5:ff:
80:10:d6:b4:d1:fd:24:28:a1:a5:af:37:ea:ac:04:
7a:d0:5a:3f:ef:79:0d:1f:d9:a9:9b:cd:7f:aa:b7:
58:ef:31:e1:78:26:3b:b3:3f:04:83:37:f8:30:bc:
52:bc:e3:d8:fa:95:56:d4:25:c4:b3:84:b4:25:22:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5D:91:FD:47:39:F7:F2:CD:4B:9F:78:2A:A6:B4:27:9E:9A:F9:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F31D061037FA11F0B6861AC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.216.0/24
154.203.218.0-154.203.224.255
154.203.230.0/23
Signature Algorithm: sha256WithRSAEncryption
17:6b:07:cf:6c:2a:bd:a2:68:1b:a9:89:6b:0d:5e:c5:96:b3:
6c:38:b1:bd:8c:20:23:97:2c:4c:1c:f3:01:dd:32:ab:20:c6:
5a:02:8b:2a:bb:a0:96:75:67:a3:d7:0b:47:d6:ce:6c:80:a6:
a7:6d:42:5d:09:f3:38:6e:cc:93:27:10:a9:cf:51:bf:42:f3:
2d:5d:e0:fb:dc:d1:d7:5a:d4:28:61:f9:40:e4:ab:f3:64:1d:
2b:dc:49:fc:d9:c4:cf:0d:7c:6e:8a:4e:8c:a3:71:bf:9b:af:
2e:bb:f8:bd:d1:3e:4d:89:4b:3e:44:86:72:cb:5f:a0:20:53:
33:b1:ce:a0:c4:72:65:d2:b3:98:14:94:20:e3:d3:cc:83:fd:
4f:95:2e:e9:4f:3a:57:b5:c4:a3:e1:7e:37:84:15:c1:16:a0:
00:99:d2:fa:45:d6:25:c9:94:36:d7:55:b1:0b:ea:96:ce:40:
0f:d5:4d:61:43:05:0c:60:d1:9e:70:92:e2:c2:d1:67:d4:b2:
44:c5:0e:7b:66:79:8b:6d:9a:2f:95:c1:c0:58:45:d4:c9:3a:
56:89:16:98:aa:8e:cc:27:cd:b2:7f:13:50:65:ac:de:dc:86:
a0:00:0f:56:22:da:3e:a8:dd:ce:50:46:c3:c4:21:ef:9e:18:
97:24:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:29:31 2025 by rpki-client