Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B653A96A689611F090B3FB99DAE4EC9C.roa
File: B653A96A689611F090B3FB99DAE4EC9C.roa (raw, json)
Hash identifier: 0oywNTNLJSPWFjF5AcVZJYd4IAV9ab7POTpcwawMAXk=
Subject key identifier: 40:A1:D2:D5:2D:1C:56:9C:04:98:06:21:40:5B:AB:D5:B5:4F:DC:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B653A96A689611F090B3FB99DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 14:01:36 +0000
ROA not before: Thu 24 Jul 2025 14:01:31 +0000
ROA not after: Fri 05 Sep 2025 14:01:31 +0000
asID: 202656
IP address blocks: 154.218.28.0/24 maxlen: 24
154.218.29.0/24 maxlen: 24
154.219.196.0/24 maxlen: 24
154.219.198.0/24 maxlen: 24
154.219.199.0/24 maxlen: 24
154.221.56.0/24 maxlen: 24
154.221.57.0/24 maxlen: 24
154.221.58.0/24 maxlen: 24
154.221.59.0/24 maxlen: 24
154.221.61.0/24 maxlen: 24
154.222.1.0/24 maxlen: 24
154.222.12.0/24 maxlen: 24
154.222.13.0/24 maxlen: 24
154.222.14.0/24 maxlen: 24
154.222.15.0/24 maxlen: 24
154.222.43.0/24 maxlen: 24
154.222.44.0/24 maxlen: 24
154.222.45.0/24 maxlen: 24
154.222.46.0/24 maxlen: 24
154.222.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102280 (0x18f88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 14:01:31 2025 GMT
Not After : Sep 5 14:01:31 2025 GMT
Subject: CN=68823cc0-4908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:88:87:94:ee:4e:5b:e8:cd:ab:4c:3d:a7:
2b:e3:58:7d:bd:23:aa:62:7c:40:16:20:06:6e:8d:
e5:f5:e0:17:f7:51:b2:1c:0c:3c:6c:82:73:8b:43:
a5:b3:f1:fc:b9:49:e8:cd:40:86:40:9a:6e:f9:5c:
17:a3:ed:fd:41:f5:ed:cc:4c:b0:f0:3c:0b:83:4d:
79:2e:f0:1e:22:45:c0:05:d9:9c:84:9c:cf:77:1a:
0d:52:3f:01:e0:72:ee:32:ab:89:4d:73:45:9c:4b:
90:66:89:15:e5:6f:9a:8c:bc:52:90:11:44:66:7e:
69:4f:b8:82:8d:7e:7d:82:ad:cb:73:ed:37:fe:15:
35:2d:dd:71:28:e8:9a:e7:5d:4f:59:4a:bf:72:cb:
b3:f4:c8:b1:3d:03:60:7a:45:34:06:6e:c2:67:8a:
a2:57:f1:cd:ea:8b:e1:0f:1d:27:33:4a:3f:ad:06:
65:40:12:85:73:0d:08:c4:5c:13:53:d9:54:39:a5:
7b:4e:a2:cf:ea:12:18:d4:d5:c1:d9:84:7e:08:c6:
d0:e7:8b:9b:b5:ef:d6:49:15:44:0d:62:cc:4b:61:
7d:56:e3:cc:f4:9a:5f:44:24:cc:84:17:43:d5:38:
d9:1a:ec:b1:dc:2f:e8:b8:39:a5:07:99:ba:c2:b7:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A1:D2:D5:2D:1C:56:9C:04:98:06:21:40:5B:AB:D5:B5:4F:DC:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B653A96A689611F090B3FB99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.28.0/23
154.219.196.0/24
154.219.198.0/23
154.221.56.0/22
154.221.61.0/24
154.222.1.0/24
154.222.12.0/22
154.222.43.0-154.222.47.255
Signature Algorithm: sha256WithRSAEncryption
46:d1:ed:d9:e1:b9:5d:81:aa:51:89:0c:50:18:55:b7:01:dc:
28:6a:80:33:b1:65:5e:49:35:51:57:2a:e2:77:59:cf:6a:b7:
38:c8:a3:a9:4a:93:1e:64:8f:0b:a5:ea:4e:89:9a:c9:02:72:
c8:df:61:7f:fd:44:7d:0d:cc:74:89:8d:e6:8f:87:c7:fe:34:
3d:63:8d:89:79:9e:da:3a:e7:02:4e:d8:6c:e4:05:82:bd:cd:
c9:16:a3:90:34:57:7e:63:ac:b7:87:03:08:c6:9d:9e:3e:c0:
64:d9:cd:dd:0e:7a:1d:b9:d4:9c:e6:89:5e:a9:b4:08:8f:49:
a3:aa:8d:17:53:34:4e:53:6e:0e:fe:41:3f:34:04:8c:ad:5c:
4f:80:27:00:73:7b:13:52:6f:6b:b0:47:74:bb:7e:a2:5a:56:
4e:4c:84:b3:64:c9:94:96:60:21:98:5a:23:ae:04:bf:78:40:
ea:6e:9e:65:39:3f:c5:a7:98:59:78:07:7b:54:c5:1a:92:d3:
10:61:6d:a6:73:62:6d:82:5f:d5:e9:4c:67:21:38:fc:23:b7:
fd:0a:21:a4:55:8f:c6:2d:12:ae:e9:a2:95:1b:28:40:e5:b5:
78:51:9f:8c:5b:cd:0d:a6:38:16:23:6e:7e:de:e7:11:04:9f:
b3:23:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:10:37 2025 by rpki-client