Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28F0F466608411F08350807EDAE4EC9C.roa
File: 28F0F466608411F08350807EDAE4EC9C.roa (raw, json)
Hash identifier: 504wQ9khzZbHRKzv8UKpp222YT1WDSohuhMlfB7vzqc=
Subject key identifier: 1B:CE:65:1C:8B:CC:1E:B5:32:E3:8A:61:2F:21:AC:95:96:A6:EB:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28F0F466608411F08350807EDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 07:28:39 +0000
ROA not before: Mon 14 Jul 2025 07:28:34 +0000
ROA not after: Tue 29 Jul 2025 07:28:34 +0000
asID: 214143
IP address blocks: 154.203.196.0/22 maxlen: 24
154.203.208.0/22 maxlen: 24
154.223.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101787 (0x18d9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:28:34 2025 GMT
Not After : Jul 29 07:28:34 2025 GMT
Subject: CN=6874b1a7-6be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:38:89:cf:6a:b6:c5:87:55:d5:64:ff:43:40:
fe:12:da:d0:c5:58:68:71:ea:91:2a:2b:8c:98:d4:
03:64:bb:63:19:14:09:96:e7:19:79:f9:72:10:59:
ac:19:dd:09:a6:1c:1d:9e:63:3b:31:7e:63:c4:73:
b7:38:c0:3f:49:56:96:11:9c:2f:00:ed:1b:e8:e5:
81:01:7e:b3:4a:9e:1d:c8:75:49:81:e1:97:83:13:
00:d0:15:53:92:a9:cb:c8:4f:d7:ea:b9:17:b9:1e:
3f:19:ae:e2:7f:93:11:8a:68:27:b3:16:88:c9:03:
12:90:bb:e3:cc:2a:64:be:db:d6:d1:11:1b:37:17:
d3:91:2f:6e:64:5e:d0:3b:dc:00:de:f2:1f:91:69:
50:d4:e2:c8:40:0c:66:ab:e3:84:d8:9f:af:9d:04:
97:c8:1f:ca:8f:55:c3:4d:6f:1c:31:4c:31:56:f1:
ea:d9:86:7e:6a:17:37:cb:94:ce:aa:e3:e2:22:70:
25:9f:59:af:d2:8e:bd:d2:62:ee:c7:03:19:bb:78:
5b:ba:2e:d3:2f:5a:f7:74:0f:62:47:a1:1e:0c:f4:
b7:a9:40:90:59:db:8a:91:a2:7e:be:17:85:75:45:
83:82:58:ad:85:33:6e:a6:35:31:b6:ea:7b:d3:76:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CE:65:1C:8B:CC:1E:B5:32:E3:8A:61:2F:21:AC:95:96:A6:EB:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28F0F466608411F08350807EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.196.0/22
154.203.208.0/22
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:29:34:4f:6f:d7:a8:66:32:b7:49:9e:94:57:7e:cf:79:9d:
84:a8:54:4c:2a:5d:e5:d3:ed:85:57:82:c9:5a:29:43:0f:91:
fa:f4:95:5c:c4:62:97:03:a4:63:2a:e7:d1:83:c5:0e:d4:57:
94:60:94:6c:4e:e4:b3:c8:2c:06:b9:42:70:95:fa:d6:ce:4f:
f7:f6:19:03:42:4f:a1:44:7c:d1:a2:e0:a7:50:89:bf:71:78:
67:4e:c1:29:85:f1:b9:95:bb:d4:1d:03:9d:81:ca:66:c3:c7:
06:78:b3:af:91:38:fb:ef:76:d6:7b:a9:95:8a:72:b0:00:2b:
05:c6:4a:29:c8:0e:7e:da:c2:65:76:e3:19:d4:db:c2:2d:4e:
7b:cc:c9:de:75:81:e2:d1:dc:0e:9c:54:af:43:ab:7a:78:de:
d1:05:df:ee:60:3b:74:c9:ba:3b:72:70:8f:3f:b2:e1:f8:86:
88:85:a9:c7:c3:a0:61:db:e9:01:c2:90:f5:b1:ec:60:de:ee:
4a:8f:40:34:0a:c5:19:33:f8:f6:fb:e1:a4:eb:ce:4c:db:72:
ee:16:e4:f7:1c:78:95:e2:b0:12:ba:9c:a9:1d:bd:f6:cc:a8:
9a:a6:81:b9:2e:a4:88:04:4a:fa:45:c5:c3:7f:7f:e2:97:b8:
83:0a:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:46 2025 by rpki-client