Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDF354EE57F611F090560FF5DAE4EC9C.roa
File: DDF354EE57F611F090560FF5DAE4EC9C.roa (raw, json)
Hash identifier: iQEhZnrYC4jv3WNUuPXO9Zg6bdo7PoOFXCTdYNKIVTM=
Subject key identifier: F9:C0:A5:01:E4:94:3F:95:03:A0:51:F2:B7:A7:D3:C6:4B:5F:AF:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDF354EE57F611F090560FF5DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 10:17:05 +0000
ROA not before: Thu 03 Jul 2025 10:16:57 +0000
ROA not after: Thu 17 Jul 2025 10:16:57 +0000
asID: 139646
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.214.32.0/19 maxlen: 24
154.215.0.0/24 maxlen: 24
154.216.128.0/18 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100855 (0x189f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 10:16:57 2025 GMT
Not After : Jul 17 10:16:57 2025 GMT
Subject: CN=686658a1-6360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:00:71:7e:c3:9b:9a:a5:ee:28:65:cf:e3:
a3:0f:2d:6a:ce:55:66:b8:95:10:ae:17:74:69:00:
bb:1a:b4:3c:b3:1d:61:ae:38:90:75:b9:8c:8a:d0:
71:44:14:7b:42:45:18:fc:d2:dd:7c:44:91:fc:c3:
d8:1b:84:75:a9:40:75:30:71:8d:13:47:97:93:40:
89:88:5a:8a:88:72:e4:fd:11:c1:a4:39:bf:e8:09:
79:de:de:3d:2c:61:d6:12:98:3c:d6:3e:b1:56:2f:
58:cb:61:43:7e:f0:e7:b6:44:18:9d:0c:c9:11:50:
09:17:e0:af:f3:86:f4:81:bc:15:35:30:3d:e7:c1:
07:08:04:e1:10:e7:60:f1:fe:90:1e:31:05:79:db:
c6:bd:78:07:68:58:27:9e:4e:06:f7:5d:e8:4f:b9:
56:9f:3b:c0:f5:06:1e:d8:2d:1c:bb:f6:01:21:c0:
5a:fb:f5:43:cb:fb:cc:2a:f2:13:76:2d:5f:e0:de:
9d:30:7a:a8:8e:f1:c9:88:92:b7:41:40:70:ee:fc:
db:9e:cf:c9:9e:ca:11:e5:d5:f4:fb:2b:df:b1:d5:
e3:09:1e:34:d8:10:77:08:d3:84:de:63:7c:11:d5:
aa:c0:b1:22:f7:62:02:1e:1c:08:f9:c8:4d:78:b2:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C0:A5:01:E4:94:3F:95:03:A0:51:F2:B7:A7:D3:C6:4B:5F:AF:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDF354EE57F611F090560FF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.214.32.0/19
154.215.0.0/24
154.216.128.0/18
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
be:34:e8:84:4d:25:bf:9a:ae:a0:42:e1:04:3e:71:78:6f:01:
1f:29:a7:75:85:df:0e:87:d5:13:30:f5:01:c4:64:27:b6:2d:
f9:36:27:65:ad:08:ae:ed:1a:a2:95:3e:de:01:c9:07:61:b9:
6c:59:ca:13:ed:2f:ae:03:6c:08:8f:f0:96:2e:9b:c9:13:44:
99:16:fe:01:cc:60:ba:40:67:8e:82:25:a4:b7:51:dc:ef:da:
c8:41:a0:cc:e4:d9:4d:b6:d9:1e:91:b1:f1:43:6f:16:f4:81:
1f:05:22:85:a8:99:de:e0:c6:84:15:2e:3e:05:67:b9:b4:c6:
e8:4d:55:f1:0d:10:84:6c:cb:f1:34:79:b9:aa:6f:92:2a:a8:
48:6f:b5:ca:2e:87:3d:e0:5c:33:08:06:f9:9d:89:a6:42:05:
77:c4:fd:a6:a8:be:1c:12:74:aa:5c:fc:f6:e7:d9:92:e3:7e:
21:39:f4:02:d8:49:9a:12:82:42:34:61:a4:4d:9f:30:5c:a4:
71:12:8d:0e:bf:a4:bb:52:0f:da:61:bf:ac:c1:41:83:56:12:
23:ca:61:1a:5b:d5:6d:ed:dc:69:23:d9:9c:2e:95:52:e7:d3:
05:72:e8:d0:1b:23:73:f3:d8:05:02:e6:fc:dc:b8:0e:35:3f:
96:6d:a8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:12:09 2025 by rpki-client