Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/748106D67E5811F0B9AF48F5DAE4EC9C.roa
File: 748106D67E5811F0B9AF48F5DAE4EC9C.roa (raw, json)
Hash identifier: nXRgo1ISmWHydZQ/+7JToYeBXmP+UCmX5vKe2cIy2ug=
Subject key identifier: 21:90:F3:A8:94:67:71:DF:7C:B3:94:C2:28:AA:AB:0B:25:CA:24:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0192BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/748106D67E5811F0B9AF48F5DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 06:31:23 +0000
ROA not before: Thu 21 Aug 2025 06:31:18 +0000
ROA not after: Sat 01 Nov 2025 06:31:18 +0000
asID: 137443
IP address blocks: 154.223.181.0/24 maxlen: 24
154.223.190.0/24 maxlen: 24
154.223.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Aug 2025 09:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103098 (0x192ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 06:31:18 2025 GMT
Not After : Nov 1 06:31:18 2025 GMT
Subject: CN=68a6bd3b-1191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:d5:26:9c:2c:6f:74:30:25:b2:9d:c7:fb:
bf:ec:78:8c:d2:53:64:eb:95:ff:2e:22:3f:82:1d:
5d:6c:1a:66:aa:42:3b:dc:05:f2:92:da:4d:18:ac:
68:07:64:e8:9d:34:58:54:ad:8d:eb:84:6b:53:67:
c4:aa:15:91:ca:f1:12:00:b9:6a:39:2c:0c:46:56:
eb:9e:cd:46:c5:eb:18:a2:43:a6:72:8d:1c:b2:ea:
c9:3e:9b:c5:b8:1d:73:f9:8a:e0:34:98:fc:10:48:
e2:70:89:5b:06:a6:8e:cf:f1:3c:aa:06:69:f9:58:
0e:05:00:a6:bf:7c:56:ba:ca:7a:e7:ec:6f:7a:05:
e1:d2:6b:57:84:2e:91:ec:a2:01:d0:f1:3d:c1:da:
af:2e:75:35:d7:42:c5:81:a7:1a:07:19:65:d6:71:
58:6f:42:37:14:69:a8:b5:8a:0c:a8:ac:29:81:6a:
6e:68:fa:3a:3f:7f:4f:67:ae:56:8a:15:f0:ed:04:
99:74:cf:35:17:6c:24:16:65:5e:17:68:7f:bf:d6:
19:72:6f:5a:aa:ff:77:da:97:5f:dc:5b:4b:de:3e:
3c:ea:be:4d:5b:89:8a:b3:b9:3c:4d:30:59:b3:be:
0a:cb:0a:dc:58:c7:9f:30:4c:56:d6:b9:09:db:3b:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:90:F3:A8:94:67:71:DF:7C:B3:94:C2:28:AA:AB:0B:25:CA:24:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/748106D67E5811F0B9AF48F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.181.0/24
154.223.190.0/23
Signature Algorithm: sha256WithRSAEncryption
22:25:1e:76:32:ce:c5:c7:ef:50:7d:89:52:aa:7e:ac:5b:b1:
0e:f1:2d:61:53:bb:94:8b:ed:8f:7f:6b:2f:42:bc:78:d3:f1:
b1:17:fa:66:83:41:66:eb:04:ef:18:ac:c7:3a:cc:5c:b3:80:
e3:1d:c9:50:6b:4f:fd:52:82:9f:53:ab:43:62:f8:ec:34:c9:
a8:5e:85:87:b1:ca:48:bd:15:d1:43:27:b2:32:e0:cc:c5:11:
ed:c0:4b:15:d4:33:2a:ed:1b:a6:d6:32:88:05:81:87:05:84:
12:dc:70:28:ee:9e:1e:45:4e:7a:7a:e8:46:7b:f5:2b:70:40:
28:43:20:2c:3a:c9:8c:ad:b7:cc:23:14:71:f4:6e:23:fe:42:
8a:95:10:2f:c4:08:53:33:e9:f0:ff:79:89:2b:c4:ec:4b:f1:
3d:ce:33:2c:8c:fc:b7:15:bb:9f:99:19:f0:98:bc:ff:d0:e8:
a0:72:b4:49:b2:b0:c7:7d:b7:6e:7a:83:46:aa:f0:68:e2:9a:
d2:cc:d0:ad:44:f4:9d:64:35:29:6f:38:d5:1c:7d:43:b9:d4:
f0:fb:6f:b0:a8:14:e8:cd:a8:92:23:d9:3e:f7:bb:17:b6:3e:
99:c1:62:54:fa:c6:a5:6d:9d:47:6b:72:95:79:f2:08:e6:84:
31:a6:e6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 23:26:43 2025 by rpki-client