Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9118336E736311F0A26659F5DAE4EC9C.roa
File: 9118336E736311F0A26659F5DAE4EC9C.roa (raw, json)
Hash identifier: KfGaG3m+3Kbmu9ej4CH7ZLDwomO4PAh7VXmeC0X+zMU=
Subject key identifier: 9D:D9:C8:B4:9B:6F:89:92:3D:BF:5A:72:85:ED:72:6C:FD:F9:67:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9118336E736311F0A26659F5DAE4EC9C.roa
Signing time: Thu 07 Aug 2025 07:53:12 +0000
ROA not before: Thu 07 Aug 2025 07:53:08 +0000
ROA not after: Wed 10 Sep 2025 07:53:08 +0000
asID: 203020
IP address blocks: 154.217.5.0/24 maxlen: 24
154.217.6.0/24 maxlen: 24
154.217.18.0/24 maxlen: 24
154.217.19.0/24 maxlen: 24
154.217.20.0/24 maxlen: 24
154.217.47.0/24 maxlen: 24
154.217.48.0/24 maxlen: 24
154.217.49.0/24 maxlen: 24
154.217.50.0/24 maxlen: 24
154.217.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 18:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102604 (0x190cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 07:53:08 2025 GMT
Not After : Sep 10 07:53:08 2025 GMT
Subject: CN=68945b68-ac12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bd:c3:f5:84:09:cc:cf:36:69:d7:7d:30:ba:
76:62:a0:c7:d3:fd:76:aa:bf:5d:28:23:7c:5c:be:
44:5f:12:f9:f2:be:88:5a:7c:11:e6:3e:49:c3:40:
61:1a:39:f8:50:4f:54:e1:92:ac:b0:ca:ca:43:2f:
2f:38:ff:b5:cb:3e:d3:b9:48:2b:cc:59:28:46:27:
6e:6b:a7:68:72:78:f7:87:33:9f:56:0c:ee:7e:4d:
b9:87:d3:94:16:c5:70:5a:84:f8:b1:fb:a8:18:08:
ef:3b:5b:d3:d3:21:de:f8:27:4d:81:06:94:bc:10:
01:e2:86:c4:10:ea:b0:27:ab:81:89:d6:3f:50:85:
42:0e:9d:fc:53:7e:ff:dc:12:c1:66:9f:42:56:ed:
0f:db:bb:cd:82:e2:d3:9a:8e:0e:be:18:83:36:ab:
fb:5d:ac:b7:8e:48:67:31:ed:80:54:14:64:5a:11:
6a:c9:d7:b7:da:54:c6:5c:44:c6:7a:77:81:07:3c:
79:32:59:0c:dc:01:52:fd:80:18:88:0f:0f:f1:f3:
ae:30:d7:38:58:89:1f:b1:9c:10:c0:d7:d1:5d:ae:
31:7c:f5:b4:af:84:f4:6b:be:8c:be:b1:f4:86:de:
f7:61:77:06:77:50:d4:04:9d:65:2a:af:34:4a:ca:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D9:C8:B4:9B:6F:89:92:3D:BF:5A:72:85:ED:72:6C:FD:F9:67:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9118336E736311F0A26659F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.5.0-154.217.6.255
154.217.18.0-154.217.20.255
154.217.47.0-154.217.51.255
Signature Algorithm: sha256WithRSAEncryption
63:89:2d:7c:c9:87:e5:f3:53:f4:93:1c:d4:a3:53:c0:ac:19:
33:3e:15:29:54:f8:55:e9:e9:6d:2c:98:25:00:ab:78:9b:1a:
3c:03:a4:41:4a:10:29:6f:bc:69:79:da:9f:dd:db:a3:d5:51:
9e:bc:24:35:93:ba:9d:4a:61:a1:8a:6e:dd:92:11:30:fb:14:
73:47:06:20:16:0f:25:35:d1:05:e9:fe:cb:75:a5:a3:9a:20:
cf:8e:e1:4b:1f:80:4d:91:cb:2d:e5:03:a3:46:db:06:d3:29:
8f:bd:82:08:68:76:4a:7e:ee:1b:98:01:41:e5:05:88:f0:c3:
16:91:ec:36:ce:30:90:48:51:82:87:5b:93:39:44:cd:dc:59:
37:aa:02:9f:4d:7e:a8:84:ec:29:6b:bd:77:be:f1:5d:a8:1f:
c8:24:ba:6c:c7:1c:a6:a4:42:c8:b5:a5:fe:07:49:6e:a6:7b:
dd:4d:10:a4:d1:60:d6:9d:f1:cb:08:87:b2:86:19:97:c3:91:
c9:6c:63:b5:3c:41:e4:ed:f4:f2:7f:66:b7:69:dc:5e:be:ff:
fe:01:8d:92:1b:a7:84:16:a4:53:af:3c:bb:3d:77:4d:b6:30:
b4:ff:dd:67:44:71:d6:f5:40:a5:41:0e:5d:fb:fb:e1:5b:9f:
f5:08:0a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:07:04 2025 by rpki-client