Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FD473464EAA11F08421AD7DDAE4EC9C.roa
File: 9FD473464EAA11F08421AD7DDAE4EC9C.roa (raw, json)
Hash identifier: pct1TVtptHInsPGw8AG6CGxGd21bYUANgSrouLq37KQ=
Subject key identifier: BB:C9:D2:7D:BD:25:02:DA:9F:6D:90:07:E5:59:2C:03:FB:45:7B:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FD473464EAA11F08421AD7DDAE4EC9C.roa
Signing time: Sat 21 Jun 2025 14:18:38 +0000
ROA not before: Sat 21 Jun 2025 14:18:34 +0000
ROA not after: Thu 31 Jul 2025 14:18:34 +0000
asID: 49505
IP address blocks: 154.205.244.0/24 maxlen: 24
154.205.245.0/24 maxlen: 24
154.205.246.0/24 maxlen: 24
154.205.247.0/24 maxlen: 24
154.223.198.0/24 maxlen: 24
154.223.199.0/24 maxlen: 24
154.223.200.0/24 maxlen: 24
154.223.201.0/24 maxlen: 24
154.223.202.0/24 maxlen: 24
154.223.203.0/24 maxlen: 24
154.223.204.0/24 maxlen: 24
154.223.205.0/24 maxlen: 24
154.223.206.0/24 maxlen: 24
154.223.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100320 (0x187e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 14:18:34 2025 GMT
Not After : Jul 31 14:18:34 2025 GMT
Subject: CN=6856bf3e-0967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d5:0b:95:81:bf:e3:7f:6e:b0:af:93:49:22:
22:90:d7:f1:5e:07:ea:5e:b0:77:b8:14:40:30:aa:
05:b8:b7:9e:eb:b8:a6:ee:f3:88:81:f5:e1:e3:fa:
99:82:40:5c:d2:9a:f7:26:b9:dd:cf:26:c1:f3:6c:
ea:8e:a4:0e:a5:19:c6:48:33:6e:f5:44:60:70:f9:
4a:dc:2d:6e:e8:62:c6:0a:23:4d:b3:c1:dc:11:62:
ec:c5:7f:a6:d8:d1:2b:d2:b3:c3:4f:df:05:fb:9d:
2b:1c:31:d3:3e:44:07:19:b9:a0:8c:a1:99:69:1f:
39:95:d8:93:bb:da:b8:4f:87:89:85:82:6a:9d:a7:
03:2e:21:d9:99:6c:c7:00:3e:53:74:5c:4d:d3:b9:
29:98:7b:aa:d1:65:7e:80:52:d5:5c:8f:b6:22:db:
c0:1c:d3:81:59:8e:1a:4d:56:f9:6a:52:ed:f1:5e:
95:93:86:70:b1:f4:71:0f:ce:eb:aa:e5:f0:92:54:
2d:15:c1:27:ab:e8:48:a0:a8:e0:2e:17:35:5b:0f:
c1:63:ea:48:0f:50:0c:8e:28:15:02:88:fc:80:03:
37:58:f5:e1:a0:5d:27:f9:d0:a7:ac:35:96:67:bd:
82:9f:7b:2b:00:d2:a0:ce:97:22:a0:2b:50:9a:1c:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C9:D2:7D:BD:25:02:DA:9F:6D:90:07:E5:59:2C:03:FB:45:7B:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FD473464EAA11F08421AD7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.244.0/22
154.223.198.0-154.223.207.255
Signature Algorithm: sha256WithRSAEncryption
00:d8:53:fa:b7:cf:66:d8:54:67:1f:55:1a:5f:59:3b:a1:32:
f8:a6:39:09:91:ee:c1:ca:48:5b:90:3b:0e:6b:9e:1e:7e:8e:
46:37:cd:d8:9c:6b:63:3d:3e:7b:f3:c4:c2:78:77:7f:72:92:
00:5d:ca:c0:11:5e:48:69:81:d9:20:6d:79:a2:b0:38:c2:68:
12:2b:80:a1:c0:16:f7:a0:44:a7:74:08:38:57:37:a1:fe:bd:
23:0b:3a:9e:8a:a7:d3:79:76:05:9c:5b:92:8b:26:81:73:16:
60:28:0c:d6:3b:c5:1f:dd:05:c2:46:be:72:f7:ba:49:43:68:
5c:2c:54:f3:51:3c:04:0e:40:b0:6c:22:73:74:0b:e4:d5:5d:
ed:cb:5a:65:98:0d:82:1e:fa:34:7c:b1:a2:47:b4:d3:cd:da:
2e:85:d4:d9:26:db:6c:88:30:5d:83:0d:5c:10:88:c2:36:cf:
04:ff:31:90:7f:10:16:b5:94:8d:75:bb:7b:2d:b3:b0:9d:17:
62:44:dd:36:e2:17:79:81:6d:5d:04:0a:f7:59:ee:c9:79:51:
d1:db:45:a4:fa:fd:28:84:f0:ae:47:d8:68:31:95:cc:17:94:
50:aa:30:3c:97:9c:77:66:de:0d:48:30:02:d3:c5:bd:19:12:
f3:eb:bb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:16:42 2025 by rpki-client