Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB7C6822781C11F0930ED9C2DAE4EC9C.roa
File: DB7C6822781C11F0930ED9C2DAE4EC9C.roa (raw, json)
Hash identifier: kqaJ6H4PMx2OWt/poEh7T7os9lIu0iibvcWd7ZmKTjI=
Subject key identifier: 39:6C:AB:E8:17:97:88:D1:B0:A7:3A:6D:95:E8:F4:45:E0:21:5C:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019194
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB7C6822781C11F0930ED9C2DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 08:09:39 +0000
ROA not before: Wed 13 Aug 2025 08:09:34 +0000
ROA not after: Mon 15 Sep 2025 08:09:34 +0000
asID: 138915
IP address blocks: 154.205.141.0/24 maxlen: 24
154.205.144.0/24 maxlen: 24
154.205.146.0/24 maxlen: 24
154.205.147.0/24 maxlen: 24
154.205.148.0/24 maxlen: 24
154.205.149.0/24 maxlen: 24
154.205.150.0/24 maxlen: 24
154.205.151.0/24 maxlen: 24
154.205.152.0/24 maxlen: 24
154.205.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102804 (0x19194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 13 08:09:34 2025 GMT
Not After : Sep 15 08:09:34 2025 GMT
Subject: CN=689c4843-cbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:d6:d2:7b:95:7e:2d:05:fa:6a:c8:4e:49:
73:aa:dd:67:14:35:84:3d:47:6e:39:92:f7:54:90:
47:c1:35:23:25:b5:1f:56:a5:59:b0:8f:61:91:18:
25:68:6e:fc:3a:eb:1c:a7:57:b7:fe:1d:c5:52:af:
62:99:bc:45:e7:8b:b3:bd:ff:be:32:43:2d:40:61:
e5:d0:92:d7:01:48:79:d2:b3:be:91:27:98:dc:ae:
32:dd:f2:40:68:41:71:7d:72:ba:1b:ae:cf:f0:dd:
76:ab:5f:46:4c:eb:d3:06:58:aa:9d:a4:5a:65:be:
3e:aa:e9:b8:45:be:d3:08:19:a5:2b:55:20:16:cb:
07:3d:b1:60:80:e9:2b:29:4e:c1:1f:e5:8f:36:71:
cb:1d:ff:65:48:c2:07:09:b1:51:a6:fe:f6:ff:5c:
2b:9c:d3:3a:33:fe:1a:96:72:e5:eb:c4:15:00:01:
4e:ca:61:ad:24:3a:bd:55:d5:9d:7c:e1:d9:22:6e:
90:da:32:5f:de:5f:7a:8c:b0:b5:da:ee:f0:69:bd:
2a:1a:e5:be:5b:e2:91:03:65:ab:d0:c8:4e:b4:6e:
0e:06:14:aa:0a:97:7f:75:a8:4f:7b:80:7a:cf:ab:
e0:61:88:64:40:e1:92:93:03:08:bb:10:e8:7d:33:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6C:AB:E8:17:97:88:D1:B0:A7:3A:6D:95:E8:F4:45:E0:21:5C:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB7C6822781C11F0930ED9C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.141.0/24
154.205.144.0/24
154.205.146.0-154.205.153.255
Signature Algorithm: sha256WithRSAEncryption
2a:cb:2a:ad:d9:28:53:f1:72:6e:36:08:5b:0f:2b:d0:0a:d2:
e4:be:d6:48:4a:a2:4b:6b:fd:17:c8:0c:bc:b9:52:ed:a3:fe:
9f:46:24:50:cf:cc:04:12:a9:ad:2f:8d:80:58:53:a8:d9:0c:
8e:0e:47:b5:07:ae:08:88:5a:6a:46:1f:43:79:b2:ba:cf:0a:
e4:e9:9c:20:fc:92:3d:7e:a6:d4:ea:37:44:2c:c1:3b:c8:75:
fe:d6:27:30:f5:ce:ea:e7:b5:0d:9d:ae:a4:b7:03:57:07:73:
8c:5c:52:82:fb:39:a9:01:8e:00:c5:c3:48:f9:70:09:7d:6d:
2a:3e:0a:cd:dc:2b:06:e0:87:b3:a4:23:39:a1:25:70:bc:4e:
b0:c6:63:f2:42:64:fa:fc:f7:1a:7a:98:94:c0:25:40:ce:70:
25:d9:73:0c:a0:1d:74:ab:07:fb:c2:b7:fd:19:fb:2b:a8:8f:
10:8a:c6:c5:e9:25:20:a0:95:c2:b9:b6:77:7f:bb:08:c4:6c:
f1:ee:c0:5c:76:db:a0:8b:e8:49:ac:db:ab:97:9f:b6:f9:86:
ea:d4:fe:86:ff:3a:84:0f:d3:cb:d9:5d:d2:3d:77:60:fb:1e:
8a:da:83:ae:ee:51:76:26:c6:96:0e:92:cd:72:2c:cc:eb:48:
13:cf:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:44 2025 by rpki-client