Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C539BF7450E411F0804DBE79DAE4EC9C.roa
File: C539BF7450E411F0804DBE79DAE4EC9C.roa (raw, json)
Hash identifier: Vm9iaywMJOptcvob+ACnACGse05AqYXr2hLbhl++KxY=
Subject key identifier: D1:90:CB:42:DA:E3:23:A5:FD:A7:F2:11:2D:7B:4E:64:DF:62:B1:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01884A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C539BF7450E411F0804DBE79DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 10:19:54 +0000
ROA not before: Tue 24 Jun 2025 10:19:49 +0000
ROA not after: Fri 08 Aug 2025 10:19:49 +0000
asID: 44559
IP address blocks: 154.209.206.0/24 maxlen: 24
154.219.71.0/24 maxlen: 24
154.219.72.0/24 maxlen: 24
154.219.73.0/24 maxlen: 24
154.219.74.0/24 maxlen: 24
154.219.76.0/24 maxlen: 24
154.219.77.0/24 maxlen: 24
154.219.78.0/24 maxlen: 24
154.219.79.0/24 maxlen: 24
154.219.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100426 (0x1884a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 10:19:49 2025 GMT
Not After : Aug 8 10:19:49 2025 GMT
Subject: CN=685a7bca-2cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:2d:61:70:cd:c9:e9:6b:f8:f0:88:66:13:
a0:2d:85:03:96:5c:e2:3e:cf:26:08:d7:0d:64:85:
1d:c6:64:90:ef:8a:88:56:62:d9:4d:ba:82:93:1f:
46:0c:78:06:e1:50:75:d0:47:30:1d:2e:ad:16:33:
7c:9b:79:83:40:32:5f:0e:a8:38:98:ed:1a:1d:fb:
e8:e7:3e:56:ac:5b:a4:ab:92:c3:d7:58:7f:ef:d2:
ef:a6:fb:68:88:20:ea:a9:0e:22:29:fb:95:d2:8a:
e3:01:1c:68:74:08:28:b5:cb:01:5e:b6:ff:17:4e:
ee:95:48:e8:4f:c8:e0:7c:65:8f:64:ed:dd:4c:37:
97:67:ad:c1:81:3b:c7:cc:81:bd:4c:cd:c3:75:11:
f2:da:1c:62:9d:3e:93:e3:cf:b5:84:3b:f9:bf:0d:
67:fc:56:d8:66:2f:e2:35:95:ee:dd:77:a0:1f:1b:
a8:e1:35:8d:5e:8a:92:a7:8a:d0:21:82:01:8f:dc:
26:2c:f1:87:49:66:c7:1b:45:b4:63:09:5a:c5:d8:
75:d9:fa:33:cd:53:6c:5b:bb:b8:54:b8:94:68:b7:
33:06:72:52:28:2e:d4:b9:e2:e9:34:19:f3:2a:6b:
04:09:5e:17:90:d4:91:02:2d:04:a3:5d:a7:92:15:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:90:CB:42:DA:E3:23:A5:FD:A7:F2:11:2D:7B:4E:64:DF:62:B1:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C539BF7450E411F0804DBE79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.206.0/24
154.219.71.0-154.219.74.255
154.219.76.0-154.219.80.255
Signature Algorithm: sha256WithRSAEncryption
7b:46:ed:c5:ae:15:90:bc:91:37:3c:3a:be:45:65:c2:bb:73:
d0:56:54:46:2a:72:11:7f:18:ed:6f:31:d0:a6:94:e9:4d:e4:
3d:39:af:b0:c4:10:bc:54:e7:de:6d:ea:d5:34:ba:ea:bf:f4:
2e:18:d1:d5:a2:8c:d8:c5:5a:2a:92:e2:14:74:65:cc:92:74:
e6:66:dd:8b:79:16:e0:3f:7d:d8:47:98:97:ae:00:2e:4f:81:
90:9a:ba:1b:cb:e4:00:97:1f:e4:ca:2e:dd:dc:64:bf:1f:df:
c1:35:bc:33:24:5e:e2:fd:4b:36:4c:6f:16:73:78:02:dc:7e:
68:b2:76:60:b5:61:c4:77:95:e3:59:bb:96:c7:27:1e:30:b4:
9f:15:15:58:08:c1:6e:09:fd:ec:54:3d:9b:e7:7c:7e:9b:3e:
88:9e:26:08:db:bd:cf:5e:5a:a0:d9:ba:6c:e8:d5:0f:74:0d:
2c:00:41:43:ca:1f:53:a0:09:57:07:28:4a:c6:3b:31:6c:0f:
ba:9d:24:ad:31:f5:cc:ec:97:31:b8:35:fa:9e:d9:ee:be:98:
a0:62:2f:14:e7:e8:d4:73:92:41:90:d6:eb:07:c7:65:45:60:
16:44:e3:0b:4c:e4:13:f8:96:48:f4:82:c2:d6:62:33:67:99:
a7:0b:72:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:43:11 2025 by rpki-client