Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28172742841D11F0B7AD9E9DDAE4EC9C.roa
File: 28172742841D11F0B7AD9E9DDAE4EC9C.roa (raw, json)
Hash identifier: xCegTvMUXRcOVskMGZDceHrL418eaQiCUCLFJGFlQI8=
Subject key identifier: 74:F4:61:5D:BA:C5:22:01:1D:27:B1:76:FB:54:F5:DC:A1:3C:A9:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28172742841D11F0B7AD9E9DDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 14:42:02 +0000
ROA not before: Thu 28 Aug 2025 14:41:56 +0000
ROA not after: Wed 01 Oct 2025 14:41:56 +0000
asID: 62240
IP address blocks: 154.196.81.0/24 maxlen: 24
154.196.87.0/24 maxlen: 24
154.223.208.0/24 maxlen: 24
154.223.209.0/24 maxlen: 24
154.223.210.0/24 maxlen: 24
154.223.211.0/24 maxlen: 24
154.223.212.0/24 maxlen: 24
154.223.213.0/24 maxlen: 24
154.223.214.0/24 maxlen: 24
154.223.215.0/24 maxlen: 24
154.223.216.0/24 maxlen: 24
154.223.217.0/24 maxlen: 24
154.223.218.0/24 maxlen: 24
154.223.219.0/24 maxlen: 24
154.223.220.0/24 maxlen: 24
154.223.221.0/24 maxlen: 24
154.223.222.0/24 maxlen: 24
154.223.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104938 (0x199ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 14:41:56 2025 GMT
Not After : Oct 1 14:41:56 2025 GMT
Subject: CN=68b06ab9-9efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:63:26:49:8c:82:83:0d:62:3c:fd:53:52:
e9:2d:8a:6b:a1:49:01:e4:97:65:87:fa:e7:71:fc:
4b:1e:76:d2:08:47:a0:3f:0e:d4:f6:2e:f1:4d:c2:
95:4b:a5:14:0c:28:ca:c1:e3:29:c6:57:a4:f8:20:
07:a7:21:c5:ba:58:7f:da:41:cf:dd:80:a3:27:4c:
90:9a:89:2b:e1:28:70:28:a9:d4:12:e2:a2:52:8e:
09:75:86:ff:8c:ef:53:a7:4a:28:5f:b7:fa:91:74:
43:fb:bd:ea:c7:8f:bf:ad:83:2d:d1:27:dd:5b:5a:
d5:05:6e:3f:de:9f:13:c5:48:12:3f:81:76:d0:13:
d2:8a:89:db:44:74:a4:26:8a:55:ab:77:1a:82:fc:
ee:72:73:a6:08:ab:3e:9c:72:b8:4e:c9:47:ef:8a:
bd:de:34:39:36:fd:3d:f6:0f:54:d1:14:a4:9d:81:
bd:65:ab:c8:18:58:1d:5e:a8:e1:e2:47:c1:aa:75:
42:9b:c5:28:3e:e8:c2:08:8e:25:6d:89:29:5e:51:
04:fe:45:29:f9:6d:00:8a:f7:be:5d:87:70:73:21:
dc:21:56:1a:3e:38:6c:eb:97:b9:cb:f6:87:c8:db:
3d:5f:29:fe:71:85:fe:8a:f7:2a:8e:d8:f1:7f:e0:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F4:61:5D:BA:C5:22:01:1D:27:B1:76:FB:54:F5:DC:A1:3C:A9:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28172742841D11F0B7AD9E9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.81.0/24
154.196.87.0/24
154.223.208.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:b0:cc:5b:bd:65:42:50:ad:4b:7c:2c:db:c2:08:74:cc:03:
73:df:cc:d0:8d:f6:56:21:f5:38:7c:22:32:66:60:85:97:92:
de:ff:bd:bd:2f:84:75:99:9e:3a:39:d5:3d:f2:0d:26:0a:11:
ee:01:ee:3e:7a:84:94:28:43:36:d9:0f:86:b2:40:df:e0:de:
2b:5f:0d:72:6f:b1:c7:6d:a1:19:a0:83:e2:e9:44:2c:68:aa:
f7:31:57:02:64:d4:1b:8e:9f:08:bf:d5:31:67:ae:74:1c:bf:
42:5d:8a:58:60:30:40:1b:24:64:86:f3:36:bf:a9:70:fc:28:
87:a0:7f:de:a2:78:1f:3c:e0:c5:94:38:2f:51:a2:ea:70:56:
18:03:9a:ab:9e:c7:09:27:e3:07:08:9d:0d:1f:5d:df:e6:a9:
31:95:00:22:bc:4b:35:3d:a5:91:5c:c7:20:d3:c3:64:39:91:
c2:e9:25:fa:1e:83:7d:bd:04:7f:7e:3d:51:2e:81:eb:ea:f6:
2e:20:d3:2d:2a:85:5b:5c:7d:b1:62:84:7a:60:0b:fd:ad:dd:
be:13:b2:53:b4:8e:a9:8d:2e:e4:3f:48:14:a1:5b:c8:f8:76:
52:18:e5:88:09:59:e1:1a:df:c6:57:07:07:e3:6e:56:38:ef:
a8:8d:ad:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:35:53 2025 by rpki-client