Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2076385E736811F085D69D96DAE4EC9C.roa
File: 2076385E736811F085D69D96DAE4EC9C.roa (raw, json)
Hash identifier: 421iK8b+ci7i9+Lcn/q766Y/DRaRxJegbbCtep2eCQA=
Subject key identifier: 0E:8E:01:B0:1F:A0:D4:FA:77:24:94:7F:BB:D5:34:80:04:9A:AA:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2076385E736811F085D69D96DAE4EC9C.roa
Signing time: Thu 07 Aug 2025 08:25:51 +0000
ROA not before: Thu 07 Aug 2025 08:25:43 +0000
ROA not after: Wed 10 Sep 2025 08:25:43 +0000
asID: 203020
IP address blocks: 154.217.64.0/24 maxlen: 24
154.217.65.0/24 maxlen: 24
154.217.84.0/24 maxlen: 24
154.217.86.0/24 maxlen: 24
154.217.88.0/24 maxlen: 24
154.217.89.0/24 maxlen: 24
154.217.90.0/24 maxlen: 24
154.217.92.0/24 maxlen: 24
154.217.93.0/24 maxlen: 24
154.217.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102622 (0x190de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 08:25:43 2025 GMT
Not After : Sep 10 08:25:43 2025 GMT
Subject: CN=6894630f-6a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:11:1e:de:e7:34:c7:bf:fe:1d:bd:76:af:
97:dc:16:a6:0d:39:bf:61:8e:1b:d0:f8:58:87:04:
2a:18:24:2c:77:fa:ac:22:c6:5f:74:07:10:d7:e0:
25:64:a0:8a:1c:0b:83:4a:c2:4b:02:c2:c2:d5:b3:
bc:95:f0:7b:fd:64:45:ea:1f:90:92:04:c1:d1:0b:
a3:ef:d9:94:8d:91:c9:99:75:64:02:81:93:c8:6b:
ec:df:51:8a:f2:75:f9:b2:85:61:cd:3a:1d:e7:ab:
30:76:06:72:4e:aa:9b:a9:44:c1:44:61:7e:4b:40:
2e:f7:68:11:b0:94:46:0d:57:7e:62:ba:78:d8:3a:
30:b1:a7:92:56:0a:51:c3:97:89:ff:1a:39:a8:41:
24:b2:98:e9:2d:07:c8:5d:69:32:67:d1:cc:60:9b:
59:8a:79:23:64:42:fd:4f:90:e6:e5:63:e5:7d:e6:
44:47:6e:9c:3c:79:cc:95:2a:a1:d8:4a:ed:c1:f5:
13:b0:b2:43:41:a6:fd:e1:91:a5:2e:57:0e:c5:6e:
30:5c:17:f5:bc:91:c7:92:7c:73:5b:6c:a8:b1:d8:
db:31:ba:8e:95:4f:a9:83:b4:c5:a8:19:3f:39:b2:
5c:a5:aa:cb:7d:af:7c:60:3d:45:f4:9c:98:d5:97:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8E:01:B0:1F:A0:D4:FA:77:24:94:7F:BB:D5:34:80:04:9A:AA:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2076385E736811F085D69D96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.64.0/23
154.217.84.0/24
154.217.86.0/24
154.217.88.0-154.217.90.255
154.217.92.0-154.217.94.255
Signature Algorithm: sha256WithRSAEncryption
6a:88:24:66:0c:5b:f1:fa:42:57:2c:b1:f8:e9:2d:ec:fe:c9:
4e:40:37:98:31:f1:e2:f4:16:96:6b:77:85:d2:5b:1f:37:b3:
53:d3:4d:a2:53:d3:28:d7:9a:6e:f7:2e:bc:b6:f6:13:e9:92:
2a:38:5a:41:7e:a2:2a:82:52:e4:b6:39:8e:26:cc:da:58:e0:
b9:52:33:a3:8e:8e:28:4a:8c:0d:89:8c:28:61:ce:76:03:db:
d5:e2:ba:11:ea:2c:97:35:de:4c:36:de:45:12:23:d6:8e:25:
78:cb:72:73:c3:ea:0a:ff:f4:59:7e:13:8d:49:d7:8a:2b:4d:
10:03:76:ba:58:48:02:d3:10:e8:fb:14:ae:59:fa:ee:9e:06:
82:39:bb:cf:48:a7:65:c1:37:43:42:96:02:66:3b:1d:60:84:
51:68:2b:80:71:06:4e:47:e0:ef:7b:8e:20:f0:14:a9:95:c8:
c1:6e:e3:ea:1d:5b:4e:ea:91:f9:fb:f9:df:ec:14:88:94:68:
e1:b4:59:35:e2:d5:92:5f:28:91:50:b1:0e:df:7f:71:9c:fd:
dd:17:58:5b:82:df:5f:2c:ea:31:0f:bd:07:df:45:13:e8:f1:
bf:c3:0e:64:c9:0e:e7:13:76:82:8c:66:87:f2:46:1f:70:94:
86:6f:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:31 2025 by rpki-client