Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53E61C14510711F0A37FE6D4DAE4EC9C.roa
File: 53E61C14510711F0A37FE6D4DAE4EC9C.roa (raw, json)
Hash identifier: BCHKzm2S47wwYmOHStjdSqRw6+GL4qgOPmPg1qQq4TM=
Subject key identifier: 62:6B:B3:6F:69:AD:CE:E5:F2:24:A6:60:C3:89:C7:31:E7:93:AF:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01886A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53E61C14510711F0A37FE6D4DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 14:27:17 +0000
ROA not before: Tue 24 Jun 2025 14:27:12 +0000
ROA not after: Tue 05 Aug 2025 14:27:12 +0000
asID: 202656
IP address blocks: 154.219.201.0/24 maxlen: 24
154.219.202.0/24 maxlen: 24
154.219.203.0/24 maxlen: 24
154.220.1.0/24 maxlen: 24
154.221.1.0/24 maxlen: 24
154.221.53.0/24 maxlen: 24
154.221.54.0/24 maxlen: 24
154.221.55.0/24 maxlen: 24
154.221.62.0/24 maxlen: 24
154.221.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100458 (0x1886a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 14:27:12 2025 GMT
Not After : Aug 5 14:27:12 2025 GMT
Subject: CN=685ab5c4-6cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8e:af:d2:37:43:f1:d6:3c:9f:48:6f:23:55:
35:e0:44:ad:9b:05:05:67:44:ff:e4:0e:4c:1a:58:
b6:43:1c:29:4d:9f:a5:40:bb:ba:a3:24:36:dc:7a:
1e:4c:2c:c2:83:93:55:ae:33:89:d3:4d:78:4c:a5:
08:12:5c:d0:04:7c:53:42:5c:36:f4:ff:96:01:59:
b7:93:f7:08:b3:29:f6:f1:2c:61:e4:d5:43:42:d8:
cc:78:44:57:b8:42:73:c3:f8:c7:21:22:67:ed:4a:
c2:02:7b:6f:06:1a:1c:6f:a5:71:d7:7c:41:61:f8:
94:b5:34:37:a5:cd:d8:84:52:ec:6a:ce:61:45:f1:
e2:24:f4:c2:f8:e0:4f:57:73:2e:e1:48:be:8a:78:
3e:d9:bc:6a:60:d9:95:96:0f:8a:83:d4:24:45:a0:
36:85:7e:66:60:0c:fb:ca:81:c6:fb:a8:78:41:3f:
aa:e2:1a:07:38:6e:1a:d5:d4:27:2a:12:40:6c:31:
0a:7f:6b:2c:7b:c1:e4:4d:e9:a7:16:63:8c:ac:4e:
38:01:6d:fb:cd:cd:11:59:22:f1:cb:57:f7:b9:2d:
01:55:44:c5:1f:79:e0:79:24:81:db:5b:3a:63:d1:
05:b4:01:d8:73:af:0f:1d:88:02:0e:4c:c8:f0:0d:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6B:B3:6F:69:AD:CE:E5:F2:24:A6:60:C3:89:C7:31:E7:93:AF:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53E61C14510711F0A37FE6D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.201.0-154.219.203.255
154.220.1.0/24
154.221.1.0/24
154.221.53.0-154.221.55.255
154.221.62.0/23
Signature Algorithm: sha256WithRSAEncryption
78:95:a4:c5:a2:a3:6e:3c:f1:3b:84:2b:96:24:90:c6:1b:85:
1e:41:b1:0e:24:52:50:29:57:d4:52:04:43:18:86:f1:29:28:
54:d9:88:bc:31:cd:97:dc:d5:e6:75:de:63:fd:3d:de:1f:df:
e1:ff:4b:7a:90:9e:ba:e6:78:da:8f:8e:f6:1b:62:b1:56:b4:
ea:50:51:d8:d8:98:92:6b:29:d4:00:5e:a4:81:23:50:f5:2f:
cf:6c:c7:4c:71:11:8e:7c:ff:96:3b:a3:69:75:53:11:60:99:
a9:4c:e6:29:84:68:21:4d:1f:ca:5e:63:0a:15:2d:db:fe:bf:
27:53:d6:df:07:b9:47:0b:66:79:7a:64:63:3c:89:8b:45:97:
43:a7:3e:03:6b:d2:b3:46:40:6a:6d:af:3a:e2:8d:8d:d8:06:
64:98:9b:be:a0:2c:eb:2a:e1:e6:d8:f3:21:a6:64:26:39:d1:
9d:62:53:2a:0f:22:a4:39:b1:e4:c9:b0:5f:f7:14:92:d3:90:
be:25:c7:f4:26:1b:ca:8d:e4:4f:6d:d1:6b:d0:cf:df:02:56:
da:a4:a1:6f:a3:2e:e9:44:4c:c5:46:ef:9a:c7:30:2a:21:1f:
39:8c:a6:57:57:7d:67:f4:1f:e8:65:5d:08:51:7c:3c:c5:de:
88:25:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:05:11 2025 by rpki-client