Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/789D79EC514511F0A53C85E1DAE4EC9C.roa
File: 789D79EC514511F0A53C85E1DAE4EC9C.roa (raw, json)
Hash identifier: JrFc8GGAgYw9HZfj9sL/Oy5eWdDD5CNNzTEpTptUgqg=
Subject key identifier: 71:A3:7F:28:A2:84:3E:E1:16:58:B4:B8:E0:67:55:A6:9C:A8:8C:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/789D79EC514511F0A53C85E1DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 21:52:07 +0000
ROA not before: Tue 24 Jun 2025 21:52:02 +0000
ROA not after: Wed 03 Sep 2025 21:52:02 +0000
asID: 63139
IP address blocks: 154.94.79.0/24 maxlen: 24
154.94.83.0/24 maxlen: 24
154.94.84.0/24 maxlen: 24
154.94.85.0/24 maxlen: 24
154.94.121.0/24 maxlen: 24
154.94.122.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
154.94.124.0/24 maxlen: 24
154.94.126.0/24 maxlen: 24
154.94.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100556 (0x188cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 21:52:02 2025 GMT
Not After : Sep 3 21:52:02 2025 GMT
Subject: CN=685b1e07-25be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:95:46:56:a3:36:73:a5:9d:a4:4c:64:91:
30:8c:82:c3:a9:df:67:7a:7d:e3:ff:fe:48:a6:dd:
67:40:bd:fd:f6:f6:5a:4d:ac:3c:48:55:b7:ab:77:
b4:3d:68:25:28:48:7a:b6:de:a5:66:d8:f4:fe:f9:
c3:fd:db:94:73:93:54:0c:6d:52:f4:e5:4a:fe:18:
b0:5c:27:3b:8b:24:20:c4:f5:26:0c:c7:6b:11:08:
e7:71:8d:26:33:2a:86:78:08:d5:5e:c0:d0:f7:0c:
43:19:eb:36:4c:7b:02:69:16:a9:04:06:bf:bb:29:
dd:6b:85:50:6e:e7:12:ed:6c:e2:4f:08:db:3f:d2:
5f:86:53:52:69:33:97:41:56:b8:2d:93:10:ae:8e:
cd:6d:77:02:ce:e8:e8:39:6c:6e:b6:15:96:38:e2:
29:04:54:2e:e7:70:f3:1a:8f:e9:0d:dd:5f:91:d8:
14:26:b8:51:9f:bc:63:f0:05:a6:13:53:5c:c9:43:
68:52:4d:94:10:75:13:12:d1:66:77:53:a1:e0:86:
55:79:4b:7f:e6:64:dc:b8:84:dd:8f:c9:18:80:98:
ae:2c:41:a1:a8:c6:c3:7d:75:2e:c7:da:91:ce:bc:
d2:13:9b:11:d6:a5:07:5d:c5:99:1e:04:62:d4:32:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A3:7F:28:A2:84:3E:E1:16:58:B4:B8:E0:67:55:A6:9C:A8:8C:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/789D79EC514511F0A53C85E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.79.0/24
154.94.83.0-154.94.85.255
154.94.121.0-154.94.124.255
154.94.126.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:78:d6:a9:ce:b9:23:71:c6:d8:1d:62:ad:91:a7:2d:84:27:
d9:4f:6b:56:44:d5:b6:a5:f4:46:a9:66:e0:30:3c:b0:fb:3a:
52:35:c8:c9:2d:b1:75:0c:ed:95:d5:13:88:72:5d:1c:61:6e:
6e:c0:ec:3a:a0:27:5a:44:2c:a7:9e:94:a4:42:fb:34:b5:dc:
b8:49:fe:9f:15:4c:cd:30:b8:8a:81:ca:e2:ad:d6:fe:f3:99:
90:8f:f4:19:6c:9d:0f:72:ea:46:f5:2e:51:57:41:02:e2:e4:
0d:e0:26:8c:8a:72:b0:1a:d7:e7:c0:4e:4b:93:4f:e4:9c:e8:
ea:e1:78:43:4e:f2:fa:30:77:f3:49:d3:09:3e:02:fc:e7:12:
b8:fa:33:2e:44:dc:bb:87:17:3d:fa:ac:fa:bd:51:18:5e:0c:
cd:f7:ad:03:e3:27:be:6b:29:bb:be:f1:f4:c0:3b:ae:e7:df:
8d:b8:43:64:0a:1d:bd:69:e5:34:88:d5:e7:85:ff:9c:d3:96:
8e:b3:1c:e5:0f:3a:39:d5:f7:22:fd:dc:5b:e0:c5:16:4e:3d:
f2:05:3b:94:a3:e1:16:fc:cc:ac:92:65:14:60:84:64:8e:8a:
e4:bc:8f:7f:99:aa:10:a8:3e:f2:13:e3:ba:d6:94:90:83:d1:
65:a2:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:35:33 2025 by rpki-client