Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17F3678512C11F0879788C4DAE4EC9C.roa
File: C17F3678512C11F0879788C4DAE4EC9C.roa (raw, json)
Hash identifier: xrqitxgEYKBI6GgL76jiaMRdT+S6PstaRDW0R3oYrds=
Subject key identifier: 9C:31:A6:DE:77:A8:60:87:CF:81:05:8D:B6:C3:79:72:9D:8D:20:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018898
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17F3678512C11F0879788C4DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 18:55:12 +0000
ROA not before: Tue 24 Jun 2025 18:55:07 +0000
ROA not after: Sun 17 Aug 2025 18:55:07 +0000
asID: 138915
IP address blocks: 154.206.56.0/23 maxlen: 24
154.206.58.0/23 maxlen: 24
154.206.60.0/23 maxlen: 24
154.206.62.0/23 maxlen: 24
154.206.79.0/24 maxlen: 24
154.206.96.0/23 maxlen: 24
154.206.100.0/23 maxlen: 24
154.206.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100504 (0x18898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 18:55:07 2025 GMT
Not After : Aug 17 18:55:07 2025 GMT
Subject: CN=685af490-e19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:78:24:e5:a8:a5:44:91:2f:ab:68:29:5f:
af:fc:31:c4:c9:fb:32:9f:67:fa:31:9a:1a:80:b5:
fc:78:96:c9:4c:94:14:22:df:43:a4:50:ad:be:d1:
a9:8c:3a:e7:91:e9:63:31:87:b3:f4:ec:dc:e0:83:
11:22:38:46:5b:5d:f4:cd:2b:95:0e:cf:9d:a2:0e:
0d:c3:99:75:25:d0:11:13:f5:89:4a:c7:b2:70:fb:
a1:df:b1:be:4d:ac:af:bd:f5:d1:93:3b:e2:23:c4:
bc:80:ec:fc:a9:92:45:e1:8f:11:c8:4d:be:5a:4a:
83:44:da:c9:fe:f6:2b:f3:13:99:9a:17:e7:74:79:
78:57:7f:80:13:1a:a6:d6:8b:f1:f3:85:94:54:40:
a7:f4:4c:fd:5c:25:83:fb:02:62:71:f9:22:33:0a:
10:e3:bc:9b:91:39:6e:c3:31:d4:a7:d5:00:69:0a:
63:7e:e7:e3:f1:9b:6e:d4:e6:7b:4c:7b:bc:99:57:
e7:3d:81:4a:8b:a7:be:a9:01:81:5c:e2:09:c4:59:
5a:67:57:ce:4b:b6:86:77:f9:42:9e:c3:8e:a5:4b:
ce:f2:41:eb:a9:1c:08:c6:99:46:ac:08:bf:f6:e5:
3c:19:bc:e6:0e:45:37:fa:74:0c:e7:6a:a4:bf:f8:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:31:A6:DE:77:A8:60:87:CF:81:05:8D:B6:C3:79:72:9D:8D:20:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17F3678512C11F0879788C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.56.0/21
154.206.79.0/24
154.206.96.0/23
154.206.100.0/23
154.206.107.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e4:07:7a:7f:a1:6f:ba:ca:ee:37:a9:aa:63:88:64:12:ed:
9d:df:df:7f:4f:43:e5:08:83:33:62:ed:de:29:84:86:bc:03:
59:6b:c0:51:6d:01:3b:b6:6d:71:80:ca:40:60:3f:ab:a3:60:
41:11:29:9d:37:e1:c6:4a:fe:d9:b7:84:9a:0c:8e:e8:c4:d0:
1e:5a:a6:ad:bf:21:98:ce:5c:df:ea:a5:8b:b1:86:50:6a:ca:
8b:5a:4c:b2:16:63:65:23:c0:bc:c6:c5:67:cb:95:6b:09:84:
17:e4:66:55:11:75:f5:3e:fc:bc:9a:85:75:c4:40:20:c3:47:
74:c7:fc:24:1c:6c:52:09:e4:b8:ab:7b:3d:4b:f4:e8:7b:76:
b0:b9:b9:1c:73:32:b8:5f:3a:f4:eb:34:5c:bf:72:2a:d6:06:
b1:6a:16:dc:ad:be:99:40:3e:53:4e:ee:73:66:87:42:1b:12:
39:ec:a6:9d:fd:d5:b9:4c:ac:0b:7b:9b:ed:ff:d4:31:f7:8e:
97:b5:0a:ce:e3:8e:0b:20:99:bd:fd:66:e7:f6:ac:ca:a8:31:
7f:70:81:8d:86:60:90:2a:6d:3f:e8:61:30:fb:7c:df:e4:cc:
1a:d4:c8:e0:47:bd:b4:48:a4:b3:35:c4:0b:ea:16:e8:73:e9:
0f:a4:82:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:04:45 2025 by rpki-client