Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D47DD6C774411F0805EF9BDDAE4EC9C.roa
File: 4D47DD6C774411F0805EF9BDDAE4EC9C.roa (raw, json)
Hash identifier: +gUeo/Ly3MHe8cIRDavupipAzTs7up2+EIEF90Xw2xo=
Subject key identifier: 99:23:E1:74:40:71:06:28:4B:07:89:47:3C:20:51:39:BC:9B:5D:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019177
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D47DD6C774411F0805EF9BDDAE4EC9C.roa
Signing time: Tue 12 Aug 2025 06:19:29 +0000
ROA not before: Tue 12 Aug 2025 06:19:24 +0000
ROA not after: Mon 15 Sep 2025 06:19:24 +0000
asID: 203020
IP address blocks: 154.201.37.0/24 maxlen: 24
154.201.38.0/24 maxlen: 24
154.202.91.0/24 maxlen: 24
154.202.101.0/24 maxlen: 24
154.202.103.0/24 maxlen: 24
154.202.104.0/24 maxlen: 24
154.202.106.0/24 maxlen: 24
154.207.32.0/20 maxlen: 24
154.207.48.0/22 maxlen: 24
154.207.52.0/23 maxlen: 24
154.207.54.0/24 maxlen: 24
154.207.56.0/23 maxlen: 24
154.207.59.0/24 maxlen: 24
154.207.60.0/22 maxlen: 24
154.209.224.0/20 maxlen: 24
154.209.240.0/21 maxlen: 24
154.209.248.0/23 maxlen: 24
154.209.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102775 (0x19177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 12 06:19:24 2025 GMT
Not After : Sep 15 06:19:24 2025 GMT
Subject: CN=689adcf1-0a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:d9:40:ea:5e:ab:a2:98:59:cf:75:5a:a5:
6c:40:38:6c:4a:ca:c8:38:28:04:75:7e:05:19:e6:
e9:32:98:ff:76:1e:b5:8a:4a:05:f8:d3:d4:c8:f7:
d7:66:03:12:1e:fb:bd:40:5e:25:e3:4d:df:a9:0c:
08:e7:76:ef:e8:c2:39:8a:2a:69:53:21:6d:5e:f8:
38:15:88:5d:cf:22:83:ea:23:69:d9:02:f1:85:e5:
a0:c5:f5:7e:b1:fe:44:b4:d1:95:e0:f4:a2:e3:ed:
ed:71:9b:6b:51:ec:25:98:04:c3:d8:e8:44:c6:14:
f3:43:7b:00:9e:b4:38:21:88:08:e0:49:36:43:da:
ef:af:23:0d:eb:a7:81:0d:58:ce:d4:f5:c7:2b:87:
c0:b4:1f:38:47:69:ee:46:c8:11:96:04:23:8f:a7:
f8:22:cd:89:1e:19:39:24:cb:14:0d:cc:02:b0:2b:
e6:2e:61:6d:3a:ba:59:09:6f:7b:73:e0:12:57:1e:
24:d8:60:20:5d:45:3d:ae:4b:cb:90:69:b9:02:f4:
28:c0:01:e3:3d:4a:d1:1e:0c:e0:b8:2a:ee:a8:2d:
23:e0:ab:f3:67:3d:54:a3:d5:59:5f:16:f4:06:08:
1f:3c:9d:3d:4b:75:9a:ab:8f:9d:b2:e4:4e:c2:8f:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:23:E1:74:40:71:06:28:4B:07:89:47:3C:20:51:39:BC:9B:5D:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D47DD6C774411F0805EF9BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.37.0-154.201.38.255
154.202.91.0/24
154.202.101.0/24
154.202.103.0-154.202.104.255
154.202.106.0/24
154.207.32.0-154.207.54.255
154.207.56.0/23
154.207.59.0-154.207.63.255
154.209.224.0-154.209.250.255
Signature Algorithm: sha256WithRSAEncryption
40:b6:08:c1:9e:17:15:58:1e:75:b0:32:04:f5:d6:76:1f:af:
60:53:63:9d:7f:9d:56:9e:4d:f6:2d:76:aa:ff:8f:ea:59:d1:
a6:08:99:ff:ec:85:b6:9f:7c:53:ea:f2:79:e6:bc:d3:cd:d9:
d0:e9:28:ea:65:03:04:16:f7:bd:b7:d8:76:11:9c:8e:a4:8b:
8f:21:e2:ed:aa:c1:c2:d0:4e:b9:59:23:2e:5b:11:d4:65:b3:
db:49:0e:d8:84:de:6f:1f:b6:c7:3e:34:ce:c3:bd:fd:ff:0a:
b7:4c:04:5c:36:f1:d9:5f:11:30:5d:5d:65:62:c7:1d:e0:b3:
3e:62:59:5e:00:f9:81:88:29:5f:25:1a:d7:91:b1:e9:2a:8e:
6e:0a:5b:69:27:74:42:30:fb:05:99:ed:14:69:56:39:5c:d7:
2b:6c:f6:17:e3:e8:ac:ef:77:7b:cd:f3:5c:44:ff:42:84:34:
6e:6c:a2:46:8a:1b:88:7a:04:9c:65:1e:74:c8:61:ed:f8:86:
fb:78:ee:d6:bd:d0:3b:73:a3:46:c3:7d:f1:24:14:65:f2:76:
9b:c1:c8:37:2d:67:e5:8a:8c:bd:fd:b3:b0:f8:50:66:3c:ff:
2e:46:a0:89:96:fa:5b:c5:d6:bf:e4:c7:8c:b1:ee:a8:30:51:
ff:27:0b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:39 2025 by rpki-client