Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AFA3F6850E011F08C185ADADAE4EC9C.roa
File: 3AFA3F6850E011F08C185ADADAE4EC9C.roa (raw, json)
Hash identifier: gK7pXmAm7OtBc4s0tTv/c/+Hl15vft7tpwFZO6K6m0g=
Subject key identifier: 1C:87:CC:8A:1B:A8:A9:11:99:CE:9D:24:29:D1:5F:19:31:8A:69:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018840
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AFA3F6850E011F08C185ADADAE4EC9C.roa
Signing time: Tue 24 Jun 2025 09:47:25 +0000
ROA not before: Tue 24 Jun 2025 09:47:19 +0000
ROA not after: Tue 05 Aug 2025 09:47:19 +0000
asID: 44559
IP address blocks: 154.209.19.0/24 maxlen: 24
154.209.95.0/24 maxlen: 24
154.218.27.0/24 maxlen: 24
154.219.193.0/24 maxlen: 24
154.219.194.0/24 maxlen: 24
154.219.197.0/24 maxlen: 24
154.219.200.0/24 maxlen: 24
154.219.204.0/24 maxlen: 24
154.219.205.0/24 maxlen: 24
154.219.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100416 (0x18840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 09:47:19 2025 GMT
Not After : Aug 5 09:47:19 2025 GMT
Subject: CN=685a742c-808e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:89:cc:68:de:36:15:18:dd:80:8c:2a:bd:
32:b0:6b:3e:a7:56:34:98:8d:b9:6b:06:4f:f4:85:
81:66:be:b6:ea:0f:22:b2:f4:5d:2a:19:4c:0a:38:
62:10:f9:d2:be:ed:e5:82:88:9d:7f:cc:65:be:f3:
66:97:01:2d:b4:bf:91:68:91:31:04:31:1b:9c:10:
86:d8:54:28:58:f8:93:63:94:f5:2e:01:e7:91:72:
20:3b:f7:dd:74:07:92:7b:03:d7:eb:47:ca:3a:6a:
87:50:6b:24:95:37:75:5f:dd:64:1a:a0:ca:fa:07:
10:f5:8f:e5:77:0b:f2:6c:38:ff:a7:4e:f7:25:6d:
50:95:a3:32:85:82:0e:e0:88:00:e3:28:7d:dc:e4:
84:fc:cb:ca:c6:7f:5a:10:80:4a:ed:09:64:6c:4a:
ba:7a:b2:a2:20:16:83:dc:b3:ff:6c:00:19:8a:f4:
43:5b:30:f6:5c:82:64:f1:3c:a6:ff:f6:35:00:12:
e2:49:28:02:6d:98:a1:b7:53:cc:ca:69:af:61:51:
25:b7:26:fa:23:eb:b7:6a:c9:06:58:6e:20:49:48:
34:15:26:b2:0d:ce:41:7b:9c:68:d6:9d:99:72:1e:
9f:a8:7a:45:e6:0b:dc:bc:cd:9c:b1:6d:cf:ba:dc:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:87:CC:8A:1B:A8:A9:11:99:CE:9D:24:29:D1:5F:19:31:8A:69:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AFA3F6850E011F08C185ADADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.19.0/24
154.209.95.0/24
154.218.27.0/24
154.219.193.0-154.219.194.255
154.219.197.0/24
154.219.200.0/24
154.219.204.0-154.219.206.255
Signature Algorithm: sha256WithRSAEncryption
11:47:5b:77:09:0c:78:34:78:44:23:ad:0b:da:fa:1e:9f:8a:
5e:f5:87:06:e5:b1:80:6e:24:5b:16:7a:35:39:3a:52:d1:6b:
4f:dc:18:98:33:88:d6:88:d5:55:27:36:2c:5f:97:b9:24:e7:
82:c0:78:f6:0d:fb:2c:fa:f5:69:c9:03:d7:bb:61:ac:ac:08:
cf:90:c0:61:4a:5d:75:98:ca:c6:c4:8c:fd:cb:aa:52:4e:de:
dd:2e:f6:85:67:59:d3:89:07:98:57:79:68:60:af:cf:51:61:
1d:ce:3e:be:34:de:99:54:eb:13:9f:6d:0a:2f:af:8c:cc:37:
a0:d6:24:ad:c0:33:47:15:c5:65:8c:a8:c1:ba:d7:01:50:d9:
7a:0d:c4:1f:63:ea:d4:bc:37:d7:1d:79:0a:5b:f3:66:22:47:
3c:85:e4:b4:1e:1f:a2:ea:33:2d:03:b6:da:92:1b:51:6c:e7:
a6:5f:1d:2c:cd:d8:3f:bc:08:01:a4:a5:9d:cc:55:30:14:c3:
d7:03:6f:b7:3d:b5:c3:ea:f2:52:7b:b9:78:24:7a:6a:22:c2:
7a:a5:f3:4f:ec:a6:3b:c2:e6:c1:a2:6c:87:45:89:03:81:b3:
9f:5a:39:df:83:c1:96:99:83:47:71:ad:d0:1f:69:b0:aa:ae:
7d:31:97:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:35:12 2025 by rpki-client