Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA485B0A47A511F0A22695B3DAE4EC9C.roa
File: FA485B0A47A511F0A22695B3DAE4EC9C.roa (raw, json)
Hash identifier: YPbY9cbXvlxKIIhrj7P3ljrpnFTL6lovYUFS12I5CMU=
Subject key identifier: D5:F8:BA:0A:84:A2:BF:FB:B9:B0:11:DE:D2:FC:0B:A8:1B:F2:A7:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018641
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA485B0A47A511F0A22695B3DAE4EC9C.roa
Signing time: Thu 12 Jun 2025 15:57:45 +0000
ROA not before: Thu 12 Jun 2025 15:57:40 +0000
ROA not after: Tue 28 Apr 2026 15:57:40 +0000
asID: 984
IP address blocks: 154.80.252.0/24 maxlen: 24
154.80.253.0/24 maxlen: 24
154.80.254.0/24 maxlen: 24
154.80.255.0/24 maxlen: 24
154.93.129.0/24 maxlen: 24
154.93.130.0/24 maxlen: 24
154.93.148.0/24 maxlen: 24
154.93.150.0/24 maxlen: 24
154.93.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99905 (0x18641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 15:57:40 2025 GMT
Not After : Apr 28 15:57:40 2026 GMT
Subject: CN=684af8f8-31ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:f9:6f:29:9b:9b:38:dd:f3:9b:c2:0b:ad:
c8:ac:af:95:5b:ca:50:7a:74:65:b2:80:f4:34:b8:
c0:04:e9:c0:fa:da:38:78:36:aa:21:39:28:0f:0c:
e1:67:a8:e7:92:f2:e7:ec:13:ca:8b:8e:4c:06:10:
af:ac:09:00:8e:5b:07:3c:4b:61:56:5b:c5:25:11:
6f:e9:bf:67:b3:44:69:10:d5:aa:ab:36:33:d9:a0:
97:a7:b5:9a:35:b5:6c:48:04:48:71:fc:05:ba:a9:
12:ec:28:42:98:48:b1:11:b7:94:24:29:78:32:61:
8d:d9:cf:25:56:cb:07:63:fb:76:ce:50:66:ca:dd:
fe:36:ec:c2:40:a9:13:fd:56:ac:2f:80:55:a1:d7:
33:49:79:2c:59:ac:54:7f:c0:25:19:53:24:01:cd:
9d:11:1d:93:d4:a8:0e:f5:f1:0b:65:0a:20:5d:b5:
b1:47:9d:c4:1f:7c:aa:da:9d:aa:de:39:2e:da:a1:
27:ec:17:ab:06:4a:ae:72:f0:63:80:ba:88:51:93:
2f:72:e6:10:f8:1f:98:4b:f8:c0:68:f6:f8:4d:02:
aa:76:de:aa:70:45:25:35:4e:29:d5:75:03:e1:cc:
07:b3:63:6a:ab:bd:80:c8:59:df:80:85:c2:48:50:
82:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F8:BA:0A:84:A2:BF:FB:B9:B0:11:DE:D2:FC:0B:A8:1B:F2:A7:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA485B0A47A511F0A22695B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.252.0/22
154.93.129.0-154.93.130.255
154.93.148.0/24
154.93.150.0/24
154.93.162.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d8:cd:1f:fa:19:87:c5:9f:df:7f:a4:be:e1:91:a3:26:84:
20:5b:a7:5a:b6:4a:3b:65:cf:17:19:a5:60:05:1c:90:74:ba:
48:ae:8f:fa:5a:64:80:a9:dd:56:55:e0:10:7b:5b:6f:05:03:
fb:c7:4c:60:06:e4:de:12:50:51:8a:74:28:88:d8:ba:50:b3:
06:4e:1d:a8:c0:32:b7:1e:74:d0:ce:8e:fd:9a:5f:b9:89:5c:
63:f1:ae:1d:45:11:2d:fd:07:43:a0:9f:f0:dd:80:69:c9:55:
7a:6d:66:66:7a:0c:c6:b8:96:0a:79:46:0d:06:aa:44:0f:9b:
a7:d2:06:8c:64:91:8d:b1:41:60:5c:35:34:b0:c0:2a:f9:13:
74:9b:97:39:f8:51:02:2b:ea:bd:d3:de:c4:e4:2f:85:76:61:
48:78:85:62:dc:01:ed:e9:ce:86:1f:3e:20:db:41:f5:1e:12:
36:21:43:41:20:1f:bc:91:e2:fb:73:df:e6:43:c9:56:79:b6:
0e:45:24:d3:74:8c:09:62:c1:53:f9:f5:3a:95:59:20:ce:43:
5e:0b:a1:d3:fa:1f:67:23:48:2f:fd:c0:2f:ea:21:3d:2d:55:
53:8d:36:8a:47:ff:42:b0:54:61:15:68:df:eb:12:de:66:4d:
d8:23:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:28:13 2025 by rpki-client