Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/268ED1D4574711F085468179DAE4EC9C.roa
File: 268ED1D4574711F085468179DAE4EC9C.roa (raw, json)
Hash identifier: 8i/80Yt3CCI1qU3K6VVgFSpuHTkm67vcKmkbhlRZOwg=
Subject key identifier: B2:59:A5:9F:90:D0:97:CF:CD:A5:17:18:BB:5A:74:75:F2:2B:54:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/268ED1D4574711F085468179DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 13:19:15 +0000
ROA not before: Wed 02 Jul 2025 13:19:10 +0000
ROA not after: Sun 24 Aug 2025 13:19:10 +0000
asID: 8796
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100802 (0x189c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 13:19:10 2025 GMT
Not After : Aug 24 13:19:10 2025 GMT
Subject: CN=686531d3-ac6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:48:e6:57:a3:c5:c0:79:b3:00:7d:79:4f:
aa:ad:5a:59:85:ab:95:c9:29:a3:7b:cb:53:df:87:
e1:5c:83:1d:61:52:a1:6e:0b:18:5f:1d:fc:ad:e5:
c5:74:3e:97:1a:e5:3d:ac:58:86:dc:31:03:36:4c:
1b:a7:06:fb:d0:ac:22:00:56:56:36:17:e6:ad:ec:
f0:37:77:a0:a2:9e:da:ab:87:ac:93:6d:d6:34:e2:
ec:3e:61:ca:43:6c:44:04:b7:fa:08:d2:8b:e6:f0:
6e:eb:a1:13:cc:cd:02:64:ff:bc:cc:fc:73:53:ae:
be:61:4b:49:a0:5f:a6:75:56:78:f6:b7:0a:fa:83:
92:f1:66:9d:b9:9b:de:e0:22:a2:0e:c1:55:43:cd:
a6:3d:93:be:9e:2d:f2:df:bc:df:33:e2:32:af:57:
49:fc:7f:99:66:3c:3e:b6:13:26:6b:58:b7:e7:f2:
60:ec:06:37:81:c1:46:37:50:79:96:2d:42:17:cf:
3d:52:2c:4b:28:90:6f:e3:74:ea:45:91:85:11:8e:
22:33:33:fe:9a:90:45:9b:09:b0:4a:da:32:65:7f:
18:95:c6:4f:7b:e9:f9:bb:fc:18:08:53:03:3d:7a:
42:a0:f0:8b:cf:c6:a9:a7:29:1b:9e:cc:d1:7a:42:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:59:A5:9F:90:D0:97:CF:CD:A5:17:18:BB:5A:74:75:F2:2B:54:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/268ED1D4574711F085468179DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
94:24:b6:8d:d6:df:13:ed:8d:43:99:67:56:48:d2:69:9e:0f:
4c:2b:0a:dc:eb:a8:c3:bc:04:f5:68:5f:ee:4b:c1:f1:0e:b6:
7c:6b:55:96:67:07:4a:82:c3:b4:b4:57:b4:af:95:98:ba:d2:
90:3f:a4:84:40:49:fc:64:13:bb:0c:95:df:11:a9:1b:30:09:
08:1b:ea:15:b9:cf:00:47:61:35:50:4a:ec:29:65:8d:ce:10:
37:b4:f1:bf:35:68:10:a2:f9:22:18:ea:74:c2:e4:4a:5a:a5:
1b:25:77:69:99:71:ff:ec:39:ba:32:98:ba:d8:59:c9:dc:af:
81:07:45:2e:f4:9d:5b:65:6e:81:50:3f:c6:97:e2:03:4c:c8:
12:f3:2b:61:a7:79:a9:d8:26:12:dc:a9:55:63:dc:f2:bf:f1:
1a:9b:0f:3d:17:78:aa:43:99:3c:a0:b4:65:f7:d1:0c:5b:54:
8d:75:6a:df:9b:4d:d4:18:cd:9b:e8:a3:a5:d0:b8:d3:f2:8d:
f9:ee:b3:2a:05:71:90:86:6a:b3:43:a1:86:62:da:12:96:b3:
c6:48:42:f5:63:f0:04:bf:3c:2f:b5:2d:5d:2b:3d:10:3a:54:
bb:05:87:d7:48:b8:5d:2f:24:f7:24:58:8c:02:3e:d2:93:8f:
63:e5:0d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:12:07 2025 by rpki-client