Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7134D15279A711F087817FD0DAE4EC9C.roa
File: 7134D15279A711F087817FD0DAE4EC9C.roa (raw, json)
Hash identifier: GHj5sg/n853IrWbF2glNBx1ePFHJUz9RfyN6hArGRsc=
Subject key identifier: 1D:6E:04:6F:7D:A2:B8:51:72:74:B2:D9:57:4B:1F:1E:35:BE:A8:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7134D15279A711F087817FD0DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 07:14:12 +0000
ROA not before: Fri 15 Aug 2025 07:14:04 +0000
ROA not after: Sat 08 Nov 2025 07:14:04 +0000
asID: 9294
IP address blocks: 154.196.96.0/19 maxlen: 24
154.199.192.0/20 maxlen: 24
154.204.16.0/20 maxlen: 24
154.205.32.0/20 maxlen: 24
154.206.224.0/20 maxlen: 24
154.208.176.0/20 maxlen: 24
154.210.32.0/19 maxlen: 24
154.210.64.0/19 maxlen: 24
154.210.240.0/20 maxlen: 24
154.220.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102839 (0x191b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 07:14:04 2025 GMT
Not After : Nov 8 07:14:04 2025 GMT
Subject: CN=689ede44-0acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:05:a1:fa:e8:9c:e0:1d:2d:a7:d9:08:e8:
32:c8:00:0c:4f:37:cc:0a:e8:4e:36:84:b9:6c:3d:
c7:3a:91:00:f8:f3:15:89:f9:77:96:88:5c:af:46:
e6:5a:d7:3e:ef:f3:52:9d:cc:fc:f1:94:e7:2c:f6:
53:2f:1f:c4:93:0a:e7:c6:77:74:70:0e:d0:d3:8f:
ef:9b:85:e5:5b:d0:29:1a:01:1e:74:23:90:6b:f1:
f8:23:0d:d9:da:68:aa:8e:bc:ac:5c:75:fd:52:d8:
c8:09:6f:99:18:34:c4:bf:a8:85:f8:1b:e9:93:ba:
be:c7:72:c5:9d:00:c7:37:42:1f:3f:99:2c:f2:67:
e1:f7:9f:58:9a:6e:42:29:30:97:24:99:de:13:94:
7c:6f:88:eb:ed:d0:55:d2:62:2c:b1:ed:50:4c:dc:
a3:b3:27:fc:a5:3a:b4:c1:a5:86:ce:8a:10:fc:d3:
f3:99:a8:c0:bf:1b:1d:57:00:b0:27:e8:b7:62:8d:
37:94:b0:4e:e5:7f:ed:dd:0e:6f:c1:c9:21:87:c8:
48:b4:57:06:16:1d:6b:63:51:4b:9e:b6:c0:5f:ed:
af:20:26:11:06:89:d1:35:0e:82:af:a8:74:0c:d0:
5b:1b:aa:69:47:e1:75:9a:09:4c:bf:62:43:d0:38:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6E:04:6F:7D:A2:B8:51:72:74:B2:D9:57:4B:1F:1E:35:BE:A8:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7134D15279A711F087817FD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.96.0/19
154.199.192.0/20
154.204.16.0/20
154.205.32.0/20
154.206.224.0/20
154.208.176.0/20
154.210.32.0-154.210.95.255
154.210.240.0/20
154.220.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:4d:cf:09:03:68:51:e6:05:7a:fc:1f:04:9d:ef:99:fe:43:
f3:99:c3:dc:40:30:8c:61:55:bf:3a:dd:d6:f5:84:dc:40:aa:
a1:00:25:09:80:a7:fd:ff:9b:49:ab:1f:4b:bd:ca:a1:fd:b5:
70:0b:04:eb:92:05:c5:d0:b5:40:19:b0:0c:49:69:bc:4b:00:
26:5d:01:8d:ef:bd:e7:5c:f6:05:44:00:db:8b:60:89:66:66:
2f:a4:93:a2:05:98:d8:6d:a7:d6:55:b7:0c:72:76:7e:96:63:
e3:10:51:7a:34:3f:29:e3:3e:a3:5b:a9:6b:d5:d8:4a:77:9d:
13:89:04:5b:db:b1:9c:02:3a:36:dc:54:19:5a:63:27:b7:d9:
99:b6:63:31:17:fb:60:fa:52:df:f3:9f:5d:ff:92:ba:a5:12:
d0:e6:99:6a:be:45:45:00:8f:61:63:79:4d:e3:a1:21:c5:67:
00:d9:26:14:7a:c7:dd:c4:21:9a:dc:65:34:70:03:cb:2f:77:
15:98:31:4b:7a:13:60:f6:64:46:a7:82:ef:06:69:15:d4:54:
b1:b4:e4:19:0c:f3:97:10:e2:e3:8f:69:66:5a:cf:62:48:71:
c1:e6:7f:a5:75:8b:ae:6e:d4:62:2b:d0:15:94:07:99:ec:6d:
60:c2:67:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:37 2025 by rpki-client