Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/920AD04C510311F08307A8BDDAE4EC9C.roa
File: 920AD04C510311F08307A8BDDAE4EC9C.roa (raw, json)
Hash identifier: 1d31MKaIhNORwu8271XGKUWoMKDnZdBbdj1VFOAyvoc=
Subject key identifier: 70:53:BA:45:F2:97:A1:54:56:0A:E2:A2:B5:DD:38:DB:C4:6F:08:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018862
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/920AD04C510311F08307A8BDDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 14:00:23 +0000
ROA not before: Tue 24 Jun 2025 14:00:18 +0000
ROA not after: Tue 05 Aug 2025 14:00:18 +0000
asID: 202656
IP address blocks: 154.219.17.0/24 maxlen: 24
154.219.18.0/24 maxlen: 24
154.219.19.0/24 maxlen: 24
154.219.20.0/24 maxlen: 24
154.219.21.0/24 maxlen: 24
154.219.22.0/24 maxlen: 24
154.219.26.0/24 maxlen: 24
154.219.27.0/24 maxlen: 24
154.222.40.0/24 maxlen: 24
154.222.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100450 (0x18862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 14:00:18 2025 GMT
Not After : Aug 5 14:00:18 2025 GMT
Subject: CN=685aaf77-ffc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:d5:d1:cf:9e:b9:ad:16:49:08:d1:15:e5:
a1:6a:5d:43:bf:e4:16:0f:c6:60:2c:b4:07:ec:a0:
dd:e1:34:4d:98:3a:1a:c9:de:aa:7b:95:66:14:6d:
f3:b4:f8:cc:a1:e7:08:48:c4:c5:20:40:49:7f:ac:
aa:e6:6d:eb:82:dd:83:a6:70:ec:22:ed:26:c2:08:
63:e4:db:38:86:8d:3a:37:69:55:36:50:8a:a1:6b:
4e:29:82:7a:1a:5f:ba:a4:a1:7d:63:ec:db:f5:36:
f2:24:92:6a:a5:09:05:1a:41:ab:e9:3a:de:52:7f:
c7:0b:32:65:31:d2:a6:ac:33:0a:e2:77:19:61:93:
dd:6d:48:41:a9:e3:97:ac:6e:8c:1a:72:e2:ee:4a:
62:28:f3:89:d1:5b:95:bf:06:ca:44:af:28:86:98:
26:8f:ac:64:10:11:05:f0:8c:07:5f:b1:cd:34:b4:
58:d1:6f:2e:85:b0:58:8d:7b:63:95:f2:76:0c:ec:
14:6f:94:70:13:95:e2:3b:2f:22:54:f2:2c:c9:b7:
d7:db:87:e5:ef:fd:f5:da:af:58:f6:c5:b0:c0:a3:
09:e3:ab:4d:66:43:ca:e9:37:9e:d6:b1:17:1c:4b:
30:71:80:43:66:7e:6e:2a:47:b4:36:e8:0d:60:57:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:53:BA:45:F2:97:A1:54:56:0A:E2:A2:B5:DD:38:DB:C4:6F:08:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/920AD04C510311F08307A8BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.17.0-154.219.22.255
154.219.26.0/23
154.222.40.0/23
Signature Algorithm: sha256WithRSAEncryption
59:a8:ee:f3:bc:74:29:a3:84:37:c3:69:d6:05:bd:71:80:4a:
74:23:68:00:ff:50:31:fc:41:4f:31:d3:4d:1b:25:9d:de:d8:
b9:17:c2:53:7e:88:cc:70:74:63:8e:40:a0:ce:6f:47:c4:6d:
e3:e2:fd:3b:c8:f1:72:45:ee:04:13:a3:0b:0d:b7:a4:3c:62:
ed:c9:00:28:dd:a6:d2:c9:0b:07:25:e7:55:9f:c6:69:dd:ad:
72:ae:f6:14:9d:df:cc:3c:ea:0b:aa:db:ba:b0:29:55:e5:28:
fb:1a:9c:55:7c:62:f9:50:28:a4:85:d3:ae:50:55:ab:21:2c:
2e:5e:e7:13:45:af:14:89:f3:e6:90:9e:7f:36:c7:45:c6:33:
39:ae:b9:c9:7e:5f:d3:75:80:5b:2c:02:dd:55:1e:26:5e:91:
a8:de:b3:1f:b0:fd:3f:db:ae:80:cc:14:23:66:e0:13:5a:b8:
f3:eb:f7:07:14:55:f6:e8:0f:01:41:24:30:2d:8d:34:9d:84:
dc:fb:ce:c9:e3:30:55:01:28:98:13:89:f9:c5:27:95:3e:d8:
99:0a:63:d0:45:5a:14:70:c7:25:3c:7e:64:a6:81:37:64:78:
a7:db:82:58:61:5a:0c:8b:09:26:6a:79:34:07:58:52:03:ad:
ba:b2:0f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:18:05 2025 by rpki-client