Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A83EA96510311F0824A98B9DAE4EC9C.roa
File: 0A83EA96510311F0824A98B9DAE4EC9C.roa (raw, json)
Hash identifier: 1PhP6GMSAM32G1AgRLXJnBlsVOGlG/66fBJKOJ6v02s=
Subject key identifier: 48:50:D6:F2:CF:C4:9E:09:7C:24:9E:F7:7A:DB:48:C9:76:E6:1C:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018860
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A83EA96510311F0824A98B9DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:56:35 +0000
ROA not before: Tue 24 Jun 2025 13:56:30 +0000
ROA not after: Tue 05 Aug 2025 13:56:30 +0000
asID: 202656
IP address blocks: 154.218.30.0/24 maxlen: 24
154.219.247.0/24 maxlen: 24
154.219.250.0/24 maxlen: 24
154.219.251.0/24 maxlen: 24
154.219.252.0/24 maxlen: 24
154.219.253.0/24 maxlen: 24
154.219.254.0/24 maxlen: 24
154.219.255.0/24 maxlen: 24
154.221.60.0/24 maxlen: 24
154.222.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100448 (0x18860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 13:56:30 2025 GMT
Not After : Aug 5 13:56:30 2025 GMT
Subject: CN=685aae93-4946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:89:3b:1a:4d:18:50:d1:36:c3:58:a1:a0:
d8:b0:07:83:cd:22:a3:04:c9:93:26:58:41:76:56:
93:09:27:9f:76:bc:9d:42:b3:b1:f0:ef:93:5f:6b:
8f:ca:44:7f:54:f9:05:4a:78:64:3d:32:8a:e9:26:
6b:fe:c8:94:ce:38:6f:f6:dd:a6:d3:b4:ae:06:7e:
12:a5:5e:5c:3d:c4:86:ed:97:cd:c6:af:e2:5e:69:
c6:a5:58:4f:ce:89:4d:50:56:6f:81:70:8e:d3:55:
fb:93:09:b6:74:55:85:8c:89:5b:f3:0f:12:24:78:
ab:fc:ba:a9:84:dd:ee:17:c3:2b:d0:96:46:69:61:
50:3a:5c:f0:9d:43:b8:bd:43:30:be:25:12:d4:eb:
65:d4:9f:91:33:fa:99:d7:c4:ec:81:0b:56:b8:b4:
ff:f0:bc:b3:ad:11:a7:01:4b:8c:e9:a3:d7:fd:e4:
00:cb:b2:3a:e5:1a:9f:2a:eb:a1:25:d8:43:4d:d4:
90:51:fc:85:8c:c5:14:09:9b:15:49:c8:e2:be:68:
73:4c:ee:5d:e8:16:57:7d:19:5e:ab:49:f8:58:49:
88:68:b5:9a:a5:86:4b:e8:aa:65:59:ad:6e:78:33:
86:d5:c3:9f:f1:0c:88:d4:bc:fe:2a:c0:43:00:12:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:50:D6:F2:CF:C4:9E:09:7C:24:9E:F7:7A:DB:48:C9:76:E6:1C:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A83EA96510311F0824A98B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.30.0/24
154.219.247.0/24
154.219.250.0-154.219.255.255
154.221.60.0/24
154.222.192.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b8:38:85:92:fb:aa:54:28:32:83:2d:03:fd:b2:0b:bc:23:
4d:db:a0:7c:29:a5:54:83:b2:ee:b5:06:ff:df:ce:ec:62:c9:
30:66:f0:01:d4:cc:f7:8b:5b:11:fb:7e:42:6f:31:50:93:e6:
e7:c2:35:3b:a3:80:54:fb:70:3b:06:01:6e:24:ca:59:28:24:
d6:ab:b6:e6:2b:da:39:98:d8:b5:2f:03:1b:1e:c1:76:16:56:
5c:8d:f0:95:f2:10:ad:1e:56:94:e5:7a:e6:80:b0:10:d0:c2:
0c:3d:96:c0:ea:8b:f3:e9:9f:e0:03:31:a5:4e:45:a6:dd:ed:
15:59:04:8d:d5:b4:96:7f:ed:a4:c3:97:e1:e1:a9:e5:88:40:
6a:77:a8:e4:32:cd:25:1b:9c:79:af:71:74:35:a6:52:e9:e3:
1b:10:f3:3a:29:8e:f5:5f:2c:6f:31:40:b3:b3:77:63:91:0e:
dd:3f:c1:b0:67:d7:cb:e3:85:96:94:a9:f4:b9:0d:6a:8a:9e:
d6:e2:d0:09:9e:48:63:cb:30:c1:86:37:bd:8f:0a:4a:6f:94:
3f:64:b4:ba:2e:02:10:e0:23:26:ad:47:b1:48:eb:a3:44:62:
47:c1:8d:9c:45:3e:93:2f:b9:42:4c:b6:ac:7f:06:31:46:f7:
6c:14:6f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:15:49 2025 by rpki-client