Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86A0C53E4E9911F08F697690DAE4EC9C.roa
File: 86A0C53E4E9911F08F697690DAE4EC9C.roa (raw, json)
Hash identifier: OMJfX2zwxh2GYvsHszNaB4hTxB3f+Hx0vGEuYFI4BHI=
Subject key identifier: 12:29:3C:5E:0B:98:5F:8B:19:D5:98:AF:F4:F0:34:A8:D1:AD:85:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86A0C53E4E9911F08F697690DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 12:16:14 +0000
ROA not before: Sat 21 Jun 2025 12:16:10 +0000
ROA not after: Wed 30 Jul 2025 12:16:10 +0000
asID: 62240
IP address blocks: 154.194.82.0/24 maxlen: 24
154.195.116.0/24 maxlen: 24
154.195.117.0/24 maxlen: 24
154.195.118.0/24 maxlen: 24
154.195.152.0/24 maxlen: 24
154.195.153.0/24 maxlen: 24
154.195.154.0/24 maxlen: 24
154.195.155.0/24 maxlen: 24
154.195.156.0/24 maxlen: 24
154.195.157.0/24 maxlen: 24
154.195.158.0/24 maxlen: 24
154.195.159.0/24 maxlen: 24
154.195.160.0/24 maxlen: 24
154.195.161.0/24 maxlen: 24
154.195.162.0/24 maxlen: 24
154.195.163.0/24 maxlen: 24
154.195.164.0/24 maxlen: 24
154.195.165.0/24 maxlen: 24
154.195.166.0/24 maxlen: 24
154.195.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100288 (0x187c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 12:16:10 2025 GMT
Not After : Jul 30 12:16:10 2025 GMT
Subject: CN=6856a28e-2fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:a7:19:dd:c7:c7:8b:a1:be:d5:e2:21:67:
01:8a:25:5b:93:21:13:1b:e8:f8:c6:e5:6a:52:ff:
c3:f8:33:f4:75:a5:d7:68:67:30:80:43:d1:f8:42:
ec:94:22:62:84:88:14:56:96:e6:ac:f9:a0:0e:f2:
29:a0:53:c4:1a:56:9c:88:51:e0:b1:f9:f5:d6:3c:
50:ad:f9:75:ed:d6:21:f2:15:1e:61:90:3f:fd:f9:
66:f5:3e:75:04:f1:2a:df:d7:77:98:02:8f:44:c3:
63:29:d9:fd:7e:2a:5a:b3:eb:97:68:2c:8d:b6:85:
8d:3a:3c:0a:eb:cc:f4:f8:a1:e6:3b:88:7c:7b:a4:
97:ac:ec:af:6f:a7:1c:ba:22:61:4b:42:0f:d2:75:
8f:65:e1:da:ef:b0:83:1d:f9:cd:90:c5:d2:1a:52:
b3:e8:fb:3d:f7:62:39:0f:48:d1:f5:3f:d6:0f:e4:
ca:36:d4:71:cf:9d:fa:3a:cb:b9:c3:29:5a:42:83:
72:cb:40:f3:19:e3:cd:0a:01:6c:89:9b:34:61:52:
fa:66:43:d8:b2:55:9e:4e:1c:f8:a8:a8:a6:a9:a1:
3a:71:ea:f8:93:e3:12:7e:8d:22:1e:1e:38:56:02:
02:64:ee:e9:62:fa:f4:1d:71:a5:ad:5a:18:79:eb:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:29:3C:5E:0B:98:5F:8B:19:D5:98:AF:F4:F0:34:A8:D1:AD:85:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86A0C53E4E9911F08F697690DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.82.0/24
154.195.116.0-154.195.118.255
154.195.152.0-154.195.167.255
Signature Algorithm: sha256WithRSAEncryption
d0:f1:9a:03:ef:a4:f4:25:ca:81:3c:b0:be:ad:54:05:ea:08:
d6:56:d7:8c:c7:3f:4f:93:23:c6:8d:ab:d5:13:88:1c:8c:99:
1d:ce:b6:26:86:dd:72:5e:de:ba:a5:60:60:99:5a:3a:4b:f7:
10:a0:5f:7c:e4:16:4b:ad:83:7a:36:63:4f:30:7b:61:d5:73:
c7:82:e7:bf:f7:58:8e:d1:ec:ca:81:f6:74:b5:5b:d9:d7:2f:
54:4d:cf:d5:01:e9:35:a0:81:a5:99:d1:b6:59:62:d6:9e:52:
24:3d:23:42:24:6f:99:4a:d2:aa:12:65:9f:6a:9d:e2:07:b9:
ba:b4:ff:c2:d5:a9:0e:c5:0b:5f:e5:50:cb:5a:6e:90:a1:74:
71:94:73:3a:e0:01:bf:db:aa:60:68:ec:78:a8:18:87:f0:05:
ef:66:19:f6:59:fc:b5:f5:a2:ae:3f:48:d5:76:29:a3:00:21:
cd:c4:34:9f:b2:64:17:3d:9f:5a:62:e3:d8:76:0f:df:80:b6:
35:91:b6:0f:d0:67:35:df:22:b0:38:a9:eb:5d:8b:30:a8:74:
77:b8:7b:10:1e:ba:e1:47:90:60:ab:c7:62:38:41:66:17:9f:
91:fa:02:85:d7:68:2a:b5:c0:4e:e6:e8:00:38:a7:60:d7:01:
9b:5d:09:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:49:25 2025 by rpki-client