Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A4753884EA211F0B9271ECADAE4EC9C.roa
File: 9A4753884EA211F0B9271ECADAE4EC9C.roa (raw, json)
Hash identifier: MLw+UR2aa7/dKTSuHG8qfsrE9xSaR0zI95ipnQ5GIXQ=
Subject key identifier: 56:BC:D7:2B:FB:7B:86:76:9D:F4:E7:1E:88:63:31:05:4E:D7:D2:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A4753884EA211F0B9271ECADAE4EC9C.roa
Signing time: Sat 21 Jun 2025 13:21:13 +0000
ROA not before: Sat 21 Jun 2025 13:21:09 +0000
ROA not after: Wed 30 Jul 2025 13:21:09 +0000
asID: 62240
IP address blocks: 154.194.4.0/24 maxlen: 24
154.194.7.0/24 maxlen: 24
154.194.38.0/24 maxlen: 24
154.194.70.0/24 maxlen: 24
154.194.71.0/24 maxlen: 24
154.194.86.0/24 maxlen: 24
154.194.87.0/24 maxlen: 24
154.194.88.0/24 maxlen: 24
154.194.90.0/24 maxlen: 24
154.194.91.0/24 maxlen: 24
154.195.0.0/24 maxlen: 24
154.195.1.0/24 maxlen: 24
154.195.100.0/24 maxlen: 24
154.195.126.0/24 maxlen: 24
154.196.16.0/24 maxlen: 24
154.196.17.0/24 maxlen: 24
154.196.19.0/24 maxlen: 24
154.196.47.0/24 maxlen: 24
154.196.48.0/24 maxlen: 24
154.196.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100304 (0x187d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 13:21:09 2025 GMT
Not After : Jul 30 13:21:09 2025 GMT
Subject: CN=6856b1c9-0585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:23:98:f3:c4:b4:ad:a9:b7:15:95:46:dc:
93:6c:69:ed:cb:1e:bc:9d:97:d7:6d:a4:29:66:d0:
21:51:85:55:d8:51:25:1f:b2:68:3f:e1:b9:bb:47:
ca:85:94:d4:ef:7d:22:03:6e:50:1e:65:54:a5:50:
42:33:91:75:08:28:4a:51:2d:b1:39:7d:b6:0f:77:
2b:3f:38:11:79:87:7e:2d:63:e0:90:70:f9:3c:01:
1f:b6:4c:35:c2:3a:a5:63:32:fd:a8:ff:d8:c3:fb:
5a:7b:f2:b0:58:62:e0:2f:b3:a6:36:78:3c:aa:7d:
e0:79:1b:e3:6d:07:e4:f6:83:6a:bb:20:32:7a:ab:
61:4e:e4:35:d0:13:2f:28:94:6d:d6:33:ef:cf:43:
64:a2:e2:dd:d4:df:b8:ae:9c:51:b6:c1:3f:62:a2:
d9:42:4f:78:6b:bf:a4:fb:18:82:57:22:67:0c:79:
5b:f1:6a:18:c7:ad:01:a6:bb:db:98:8c:00:e2:b3:
b4:89:e5:ed:fa:96:05:6c:8f:4c:a5:67:ed:83:bc:
91:72:a2:da:40:6c:77:73:65:e7:c8:3b:bf:06:05:
e4:26:5c:3e:dc:ee:0f:3b:6d:30:fb:a8:a4:ae:59:
15:1e:df:61:f4:91:6e:9f:1f:c1:b4:22:8a:63:17:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BC:D7:2B:FB:7B:86:76:9D:F4:E7:1E:88:63:31:05:4E:D7:D2:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A4753884EA211F0B9271ECADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.4.0/24
154.194.7.0/24
154.194.38.0/24
154.194.70.0/23
154.194.86.0-154.194.88.255
154.194.90.0/23
154.195.0.0/23
154.195.100.0/24
154.195.126.0/24
154.196.16.0/23
154.196.19.0/24
154.196.47.0-154.196.49.255
Signature Algorithm: sha256WithRSAEncryption
40:e4:03:bf:b3:a7:9f:14:89:df:a6:82:49:7c:3c:0b:16:20:
8c:9e:2b:d4:31:4e:27:fa:8b:36:fd:1c:ea:63:1b:0a:48:3b:
06:70:e6:32:eb:dd:b1:41:2a:a7:74:a5:85:12:ea:1f:5a:f5:
64:21:dd:a9:78:5a:27:8f:85:8b:92:31:1e:0f:41:9b:96:de:
d7:a3:f6:4b:5e:db:37:e1:6f:5a:0a:39:5b:d1:a5:ad:dc:9a:
9a:f3:78:6b:0b:bc:04:7a:44:5d:32:ab:93:a1:96:03:04:2d:
84:df:dd:ae:60:50:8d:e7:d2:12:0f:d1:0c:e0:5a:95:52:8c:
55:09:1e:1c:d0:a5:1a:cc:bd:8a:4b:f2:87:ac:5a:2a:a4:1d:
c4:db:98:9b:06:a8:0e:e9:43:96:66:5d:ab:f1:d0:5d:dc:08:
86:ae:4a:61:e0:be:22:cb:cc:8a:6f:99:ca:0f:d8:39:8d:7a:
36:49:df:d6:c3:11:71:23:62:1e:cf:91:60:9f:48:00:6c:f9:
85:00:11:14:e1:a7:38:1e:23:52:64:ad:b0:c3:78:2c:b9:f8:
a3:0b:3d:a1:d9:cb:67:31:09:48:a9:60:11:11:ad:5f:99:8d:
e3:2c:bb:e6:f0:9a:ee:84:59:4d:c0:14:97:04:23:b8:9b:3e:
f8:a7:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:46:59 2025 by rpki-client