Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19B7A62752411F0BEBFDCE0DAE4EC9C.roa
File: F19B7A62752411F0BEBFDCE0DAE4EC9C.roa (raw, json)
Hash identifier: 1s4bRTqfa8yMglwWUE/d4D2oT3D7CJos8lFch7vZygs=
Subject key identifier: 43:9E:2C:6B:64:02:86:33:77:8F:3D:92:A4:D3:8F:08:7E:6B:71:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019115
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19B7A62752411F0BEBFDCE0DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 13:29:58 +0000
ROA not before: Sat 09 Aug 2025 13:29:53 +0000
ROA not after: Mon 15 Sep 2025 13:29:53 +0000
asID: 54801
IP address blocks: 154.81.136.0/24 maxlen: 24
154.81.166.0/24 maxlen: 24
154.81.181.0/24 maxlen: 24
154.81.191.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
154.83.209.0/24 maxlen: 24
154.83.211.0/24 maxlen: 24
154.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102677 (0x19115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 13:29:53 2025 GMT
Not After : Sep 15 13:29:53 2025 GMT
Subject: CN=68974d56-549d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:16:97:bb:f0:e5:4b:92:26:93:a0:41:84:
5c:df:9e:02:5d:c6:19:42:2b:48:69:03:91:80:45:
ee:18:84:01:1e:48:87:56:6c:dc:e6:5d:0a:cd:e6:
9a:45:b7:b1:f2:70:8e:9e:fa:41:c2:a2:7b:21:c3:
c0:4a:78:f0:98:fa:51:8c:c3:fc:9d:57:f3:ed:3a:
c2:9d:09:cb:a9:89:47:c3:40:92:ac:95:d4:0e:bb:
bb:50:07:9a:79:e1:6a:59:62:1b:74:f4:84:4d:1c:
3b:31:35:26:db:f2:4a:ca:22:85:f1:46:b7:74:ef:
a5:6e:c7:98:29:d1:63:5e:02:f3:11:c1:0a:c4:0d:
a8:1f:de:71:5c:48:8e:72:ea:cd:6f:51:2b:71:0d:
8e:6c:af:a2:04:dd:cc:a2:32:52:9a:8e:a5:94:54:
5b:c5:a3:6c:05:56:32:d6:c3:61:3c:67:42:02:ba:
8b:45:0c:c2:03:5a:fe:26:71:38:68:be:37:12:95:
7a:25:03:a2:ee:80:d0:88:7d:01:f6:2c:a1:47:5c:
a7:c6:14:38:0c:bb:5f:73:6f:87:d5:14:a7:d8:74:
13:05:0f:07:ce:8c:e6:01:58:19:52:69:63:2d:0a:
7c:cd:22:85:a0:a7:60:42:47:f5:66:d8:d3:69:d0:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9E:2C:6B:64:02:86:33:77:8F:3D:92:A4:D3:8F:08:7E:6B:71:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19B7A62752411F0BEBFDCE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.136.0/24
154.81.166.0/24
154.81.181.0/24
154.81.191.0/24
154.82.18.0/24
154.82.20.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
154.83.209.0/24
154.83.211.0/24
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
60:72:31:bc:1c:d3:ac:7e:b6:b8:49:00:31:4e:ef:d2:43:ea:
56:42:22:0e:ff:63:c5:03:eb:d6:42:61:a8:81:ce:31:54:9d:
28:d2:31:23:57:34:5b:00:65:42:23:06:ec:a7:1f:74:cc:57:
61:6c:55:26:3d:6d:b1:06:3c:7c:cb:4c:06:b2:0a:1d:75:95:
07:9f:fe:45:53:cc:08:79:82:51:ac:7f:8c:6e:1e:18:56:e9:
96:ae:ff:2c:32:06:89:b1:f3:2e:e4:e1:cc:c8:52:32:b5:e4:
59:f4:7a:cd:c3:08:66:fc:8f:de:f6:e4:d9:6d:93:b9:8c:49:
02:d9:4e:b2:56:c4:37:f6:96:f5:76:f0:c8:3c:2f:70:b8:10:
46:06:2e:5a:b0:10:30:17:b5:18:0a:e9:16:ed:95:0c:c7:82:
23:5a:08:28:58:01:b5:4f:14:6d:71:e0:e7:45:da:e9:56:35:
a7:dd:f5:60:61:53:08:b7:c2:ae:be:3a:d0:1d:cd:a3:e6:7f:
9f:e5:01:a3:f3:e8:53:32:49:6b:6b:87:e3:2c:29:ef:00:97:
28:3a:4d:38:90:cf:57:f3:90:b5:ef:5d:10:99:d3:1b:59:bf:
13:1e:d7:40:d9:96:9b:7e:fc:72:29:09:a0:e6:79:d5:65:7d:
5b:d0:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:27 2025 by rpki-client