Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83D70B84510411F093D672C2DAE4EC9C.roa
File: 83D70B84510411F093D672C2DAE4EC9C.roa (raw, json)
Hash identifier: aUnTCvGb7zGoJZHGH1R0y8BwNwFQY+mVwIFuOAFVwoo=
Subject key identifier: B7:95:B4:30:69:B8:45:EF:0C:1D:7F:4F:48:9A:3F:07:48:9F:90:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018864
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83D70B84510411F093D672C2DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 14:07:09 +0000
ROA not before: Tue 24 Jun 2025 14:07:03 +0000
ROA not after: Tue 05 Aug 2025 14:07:03 +0000
asID: 202656
IP address blocks: 154.219.1.0/24 maxlen: 24
154.219.4.0/24 maxlen: 24
154.219.29.0/24 maxlen: 24
154.222.42.0/24 maxlen: 24
154.222.193.0/24 maxlen: 24
154.222.194.0/24 maxlen: 24
154.222.195.0/24 maxlen: 24
154.222.196.0/24 maxlen: 24
154.222.198.0/24 maxlen: 24
154.222.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100452 (0x18864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 14:07:03 2025 GMT
Not After : Aug 5 14:07:03 2025 GMT
Subject: CN=685ab10c-2e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:4b:16:e9:41:e9:48:11:c2:d7:34:f4:ff:
bb:5e:64:d2:73:6d:a4:d0:ee:45:f5:05:cd:4b:3e:
75:bf:28:30:77:18:87:0e:e7:a3:b2:52:11:bb:3c:
50:01:f1:41:e6:76:d1:9c:cc:da:c2:6f:76:b1:db:
98:ab:0f:6c:c1:ba:44:3e:7f:7e:c0:25:27:c7:ee:
55:3e:33:f1:ac:89:29:cb:3c:9e:2c:2f:31:d7:c6:
42:e6:7d:22:95:c3:ac:5d:29:a1:6a:9f:4d:34:e4:
73:7d:43:4f:3f:d2:91:b3:08:ca:7d:17:bc:24:e1:
94:d9:00:cc:80:82:9c:24:c5:37:e7:cd:81:f5:5c:
50:bd:3a:a9:04:6e:70:c1:27:cf:c5:5a:91:58:45:
e1:fe:33:75:3f:ab:97:4e:ed:84:94:41:eb:47:1c:
fa:93:43:48:ac:d9:55:60:81:c0:af:5b:fa:77:9c:
6d:d4:65:ac:40:c7:cc:f1:38:1d:63:e8:91:c4:3f:
20:08:d8:82:14:73:ab:d0:d6:c2:11:8a:ab:3b:cf:
4c:f0:29:64:7c:33:d5:b4:52:a2:84:ed:70:6b:75:
19:74:b4:b7:40:e9:6d:51:9a:1e:64:a2:9b:7a:a5:
ca:57:8f:fd:ed:67:e3:85:7c:7d:ad:bf:0b:a2:7f:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:95:B4:30:69:B8:45:EF:0C:1D:7F:4F:48:9A:3F:07:48:9F:90:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83D70B84510411F093D672C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.1.0/24
154.219.4.0/24
154.219.29.0/24
154.222.42.0/24
154.222.193.0-154.222.196.255
154.222.198.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:4d:b8:cc:0b:2b:db:d7:28:c5:c2:de:f7:07:d5:41:35:a1:
ee:f1:2e:61:09:39:58:f2:3b:f9:15:8d:f6:92:28:95:43:8c:
cb:a8:86:0f:e7:db:22:4c:82:8d:a4:44:70:ef:2e:78:80:d6:
15:97:77:91:d6:f2:e8:ad:09:c3:af:3b:b0:ef:0b:d8:a2:ff:
a9:e5:e0:06:71:49:da:f3:bb:d0:a5:b1:43:fb:eb:73:ce:29:
05:93:14:eb:c8:4e:e9:e6:39:cc:4d:2e:9a:ef:d2:28:66:ad:
52:58:d3:d4:d2:c3:d3:bc:9d:ab:2c:f9:c9:ce:35:0c:3a:b2:
6d:6d:b7:02:82:1c:bf:35:d0:17:67:bc:fd:9c:21:5c:9e:9c:
34:d3:0d:5e:f5:0f:98:b6:f5:73:d9:0b:b9:7b:75:c7:42:02:
b1:f7:0d:69:e8:67:68:a6:60:d1:a5:0d:a9:a5:91:c2:bd:dc:
6c:9c:10:c5:34:21:20:df:54:74:c0:3a:d2:bc:5e:28:4e:71:
6d:e2:46:5d:8d:32:12:23:58:14:f8:7a:c7:f7:77:63:c0:12:
dd:a0:5f:2a:2a:34:e0:52:3a:19:1f:cf:f0:32:5e:66:60:df:
d2:3a:d6:86:a9:35:d1:c5:08:44:77:1c:31:cf:5e:8f:5b:66:
a2:9c:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:17 2025 by rpki-client