Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A73C9F10514211F0800903CFDAE4EC9C.roa
File: A73C9F10514211F0800903CFDAE4EC9C.roa (raw, json)
Hash identifier: rE0xmWYK3JEawSYMSsn+cWR6VPPVImTwzCSz7wus2w0=
Subject key identifier: 9F:47:9B:FD:6E:58:E8:A3:40:8E:E6:5C:D5:1A:2A:6A:A8:64:45:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A73C9F10514211F0800903CFDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 21:31:57 +0000
ROA not before: Tue 24 Jun 2025 21:31:52 +0000
ROA not after: Wed 03 Sep 2025 21:31:52 +0000
asID: 63139
IP address blocks: 154.94.101.0/24 maxlen: 24
154.94.102.0/24 maxlen: 24
154.94.103.0/24 maxlen: 24
154.94.104.0/24 maxlen: 24
154.94.105.0/24 maxlen: 24
154.94.106.0/24 maxlen: 24
154.94.107.0/24 maxlen: 24
154.94.108.0/24 maxlen: 24
154.94.109.0/24 maxlen: 24
154.94.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100550 (0x188c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 21:31:52 2025 GMT
Not After : Sep 3 21:31:52 2025 GMT
Subject: CN=685b194d-9360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:db:0c:e2:21:aa:22:1f:de:4d:85:b1:2a:
a7:e0:4b:31:e8:c2:e5:7a:10:f5:68:0b:b5:15:1d:
f1:06:3b:bd:b4:f4:67:f5:25:d7:8f:00:56:cd:23:
46:93:11:64:65:10:bd:07:07:ae:2a:5d:f5:4b:e9:
9a:90:95:98:a8:e9:69:f0:97:9d:50:f4:6a:fb:57:
9a:9f:8e:cd:6f:ef:ed:37:48:e0:a9:de:e1:2d:0c:
63:d6:07:10:64:42:a1:cb:34:21:00:3d:ed:bf:6e:
97:2e:8c:a1:8d:d4:86:3d:51:7b:fc:cd:52:dc:2d:
8d:75:55:0b:a0:5d:6e:55:86:59:0d:1f:3a:40:1c:
ee:a3:e5:b1:ee:30:96:5a:4e:30:69:f8:e6:8a:48:
d3:e7:ce:5b:02:05:15:56:bd:d1:d2:bc:19:0c:7f:
13:24:69:4a:46:4a:4d:0a:ab:a3:76:bf:a8:b4:ce:
78:12:75:03:64:3b:1f:99:79:f6:ed:bd:f6:fb:09:
67:d9:79:b8:73:35:cf:33:ad:63:42:c4:a7:64:cc:
86:06:c5:b7:2e:30:3e:96:7b:82:91:10:db:03:24:
05:c8:ff:92:d6:6a:41:82:39:da:53:d1:fe:04:a8:
1d:d9:83:44:52:a9:b2:b3:60:36:ad:23:5b:63:f5:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:47:9B:FD:6E:58:E8:A3:40:8E:E6:5C:D5:1A:2A:6A:A8:64:45:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A73C9F10514211F0800903CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.101.0-154.94.110.255
Signature Algorithm: sha256WithRSAEncryption
83:5d:3e:5b:22:68:08:9f:aa:ff:71:4b:95:50:a6:96:c6:e9:
ea:bd:17:48:45:bb:9d:13:87:5d:97:b9:b7:fe:c3:71:51:f0:
6e:3c:c7:a3:cd:cb:c6:37:c7:26:32:3b:c4:37:30:b7:c5:4d:
c2:91:7c:19:4c:8d:ec:fb:33:59:91:8b:0b:51:b8:2d:e8:a7:
74:0b:26:89:cd:47:2d:3d:47:33:01:f4:8e:c3:0d:a5:0f:1d:
5f:2c:c4:fa:4b:66:ff:24:59:16:93:0a:4b:94:0e:83:21:85:
af:f4:2e:d1:bf:78:86:81:ec:29:c2:14:c3:63:07:11:87:b6:
94:e4:86:58:8c:e8:84:d9:ea:dc:05:14:79:b2:5f:d8:ec:00:
1d:96:20:b6:78:00:fb:52:d4:15:ee:f5:f2:d8:20:19:85:1d:
33:6a:3d:19:52:5a:2a:cc:9d:57:d6:67:1b:13:27:39:0a:93:
68:d0:c2:c8:60:bd:19:49:52:27:34:0e:3d:7f:cc:9f:b6:ee:
58:df:28:5a:d6:8c:87:bb:a2:7d:09:2c:de:4e:f5:42:0f:ec:
dc:cc:52:53:63:a7:77:28:33:91:1c:02:fd:da:3f:cc:33:9b:
38:63:90:9e:3e:69:67:95:56:98:41:cb:91:78:eb:2d:a9:40:
da:1b:dd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:06:50 2025 by rpki-client