Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/791DE6B876CA11F094864298DAE4EC9C.roa
File: 791DE6B876CA11F094864298DAE4EC9C.roa (raw, json)
Hash identifier: FBx4aUF02ofd/MfdVoX+9Or/5O+DB3WO0jWL3Cgrl98=
Subject key identifier: B0:EB:E8:39:2C:DC:0C:EA:B8:28:07:46:9D:2C:E7:29:9E:A1:EA:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01915B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/791DE6B876CA11F094864298DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 15:47:24 +0000
ROA not before: Mon 11 Aug 2025 15:47:18 +0000
ROA not after: Tue 16 Sep 2025 15:47:18 +0000
asID: 22773
IP address blocks: 154.202.78.0/24 maxlen: 24
154.202.79.0/24 maxlen: 24
154.202.80.0/24 maxlen: 24
154.202.81.0/24 maxlen: 24
154.202.82.0/24 maxlen: 24
154.202.83.0/24 maxlen: 24
154.202.84.0/24 maxlen: 24
154.202.85.0/24 maxlen: 24
154.202.88.0/24 maxlen: 24
154.202.90.0/24 maxlen: 24
154.202.92.0/24 maxlen: 24
154.202.93.0/24 maxlen: 24
154.202.94.0/24 maxlen: 24
154.202.95.0/24 maxlen: 24
154.202.96.0/24 maxlen: 24
154.202.97.0/24 maxlen: 24
154.202.98.0/24 maxlen: 24
154.202.102.0/24 maxlen: 24
154.202.107.0/24 maxlen: 24
154.202.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102747 (0x1915b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 15:47:18 2025 GMT
Not After : Sep 16 15:47:18 2025 GMT
Subject: CN=689a108c-b0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:de:fb:ae:fa:58:b8:93:88:ef:0f:f8:39:
d3:34:5c:f3:31:c2:94:27:c7:e1:5a:51:46:c5:39:
25:42:0c:4b:be:ac:00:fb:1e:91:a5:32:41:9b:b3:
36:1c:79:19:a5:bb:17:22:9c:70:49:c5:dc:d3:53:
db:74:76:1e:5e:ec:ec:ab:d0:1d:ac:0f:a3:50:01:
48:b3:16:0e:bc:d5:31:82:ee:1f:d3:d2:eb:2a:c8:
6d:09:76:52:a8:48:8a:7c:50:d5:16:7f:97:7f:22:
61:72:1c:60:1f:f2:db:45:02:8b:20:67:ba:f3:be:
6f:38:d0:10:78:3b:32:39:45:a6:ef:0e:15:17:97:
6d:08:b9:f9:35:fc:a2:2c:25:1c:63:71:75:7d:3a:
13:5e:47:c2:f2:61:b5:d2:97:7b:ca:2b:68:a9:70:
2f:59:aa:11:a5:79:5d:08:26:ff:5d:33:d5:a6:ac:
08:f7:bd:c9:ae:f5:fb:41:af:d3:3b:88:d3:38:f1:
0a:24:dd:d8:1e:4f:43:d9:93:d6:48:fb:17:6e:ab:
28:be:2b:ac:1e:36:4a:4c:e3:c7:73:0f:d5:ec:cf:
19:09:34:c8:5b:83:a9:82:e8:57:3d:44:69:7e:17:
32:54:87:19:68:38:57:b8:d8:ad:5c:a6:97:11:f2:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EB:E8:39:2C:DC:0C:EA:B8:28:07:46:9D:2C:E7:29:9E:A1:EA:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/791DE6B876CA11F094864298DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.78.0-154.202.85.255
154.202.88.0/24
154.202.90.0/24
154.202.92.0-154.202.98.255
154.202.102.0/24
154.202.107.0-154.202.108.255
Signature Algorithm: sha256WithRSAEncryption
9c:f2:82:8a:7b:28:96:ce:37:d6:aa:70:94:66:87:c0:ae:e9:
e8:d7:cf:69:3b:75:29:93:de:83:00:73:a6:bb:37:c5:dc:c1:
e5:0e:33:82:ff:43:ac:5c:bc:c3:33:1b:26:a5:b1:30:a8:dc:
fb:58:0e:24:8b:92:95:58:05:be:65:16:1e:69:52:60:c2:1e:
b2:52:ad:da:a2:68:e0:07:e7:fe:62:01:0e:29:3b:c1:93:fa:
9f:5d:69:8c:fc:fc:46:8f:21:5e:41:e3:83:85:bb:1b:56:99:
d2:f1:d0:47:72:37:bd:55:37:c5:16:78:49:b6:21:9b:dd:5b:
eb:9a:97:fc:b3:bb:aa:ff:f6:0b:99:62:56:38:6e:d9:03:1e:
0e:e8:1f:44:c9:5a:88:b8:74:9f:7b:d8:2f:72:df:de:df:db:
ba:7e:67:35:97:50:47:10:44:d7:dd:d1:8c:c5:10:b5:16:f9:
7d:7c:e7:f5:c3:fc:92:95:d8:9e:98:c8:7c:d4:70:ce:b9:9b:
6f:f4:2a:de:76:d5:2f:1f:ae:0b:be:e5:3e:cb:18:4e:70:03:
67:a3:ee:f6:4f:f8:3d:06:a6:f9:88:05:53:33:a2:19:0f:3c:
00:ab:5b:23:e7:30:5b:b8:44:2d:78:56:f7:ac:9e:12:51:c7:
d7:5a:36:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:51 2025 by rpki-client