Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88EBA2C68D6B11F09E040CABDAE4EC9C.roa
File: 88EBA2C68D6B11F09E040CABDAE4EC9C.roa (raw, json)
Hash identifier: ZeINT3BG2OxqKdxTlBjvti/IEKQk0lJ2WYGyr4xHRug=
Subject key identifier: 59:6B:16:2D:FC:92:DB:D3:AF:E8:15:35:C1:59:7E:D2:4E:D5:13:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88EBA2C68D6B11F09E040CABDAE4EC9C.roa
Signing time: Tue 09 Sep 2025 10:55:45 +0000
ROA not before: Tue 09 Sep 2025 10:55:40 +0000
ROA not after: Thu 16 Oct 2025 10:55:40 +0000
asID: 22773
IP address blocks: 154.202.30.0/24 maxlen: 24
154.202.31.0/24 maxlen: 24
154.202.69.0/24 maxlen: 24
154.202.72.0/24 maxlen: 24
154.202.73.0/24 maxlen: 24
154.202.76.0/24 maxlen: 24
154.202.77.0/24 maxlen: 24
154.202.109.0/24 maxlen: 24
154.202.110.0/24 maxlen: 24
154.202.111.0/24 maxlen: 24
154.202.112.0/24 maxlen: 24
154.202.113.0/24 maxlen: 24
154.202.114.0/24 maxlen: 24
154.202.116.0/24 maxlen: 24
154.202.137.0/24 maxlen: 24
154.213.192.0/24 maxlen: 24
154.213.200.0/24 maxlen: 24
154.213.201.0/24 maxlen: 24
154.213.205.0/24 maxlen: 24
154.213.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106274 (0x19f22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 9 10:55:40 2025 GMT
Not After : Oct 16 10:55:40 2025 GMT
Subject: CN=68c007b1-3612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:26:5c:cf:8d:34:a2:70:a9:d7:6b:bd:d7:
89:14:af:3c:d6:21:bc:5c:5e:61:de:c8:38:63:13:
f0:87:9f:f8:c5:47:7b:c7:5d:24:26:a9:c3:11:ca:
8b:65:a0:4f:68:c3:3c:07:15:27:01:4e:ea:de:87:
b3:b6:95:32:a5:85:19:31:4a:9e:51:65:07:1b:7d:
02:c0:17:b9:6b:22:a7:5e:d0:7c:28:e4:c7:a0:5e:
d0:f2:c1:c0:56:f7:84:e2:bb:f5:65:ac:c8:5a:90:
c6:ae:53:64:c1:86:f0:d5:3b:6c:08:bb:84:1b:e3:
51:ac:7c:45:8f:69:fc:ad:aa:ba:a5:a7:35:9b:df:
b0:9e:aa:b2:2a:70:5a:6b:f1:20:36:55:35:a7:1e:
24:a5:f3:1a:8a:3c:b3:2e:e2:7a:1f:93:2e:24:97:
f5:00:a5:05:f6:a5:1e:f1:54:8d:b3:56:8f:eb:ac:
50:83:e3:46:01:85:6a:04:6f:26:2c:9e:4f:0c:be:
c0:0f:b3:5c:db:b7:99:16:c6:f2:a0:a3:e0:42:12:
4b:48:40:1a:90:0e:d4:86:74:1b:d1:a3:0c:95:ab:
6e:20:9a:1c:b0:4d:52:6c:e2:98:5f:c5:7c:e1:17:
2f:49:02:26:1c:80:10:ed:8a:63:87:b3:bf:39:e4:
1f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6B:16:2D:FC:92:DB:D3:AF:E8:15:35:C1:59:7E:D2:4E:D5:13:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88EBA2C68D6B11F09E040CABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.30.0/23
154.202.69.0/24
154.202.72.0/23
154.202.76.0/23
154.202.109.0-154.202.114.255
154.202.116.0/24
154.202.137.0/24
154.213.192.0/24
154.213.200.0/23
154.213.205.0-154.213.206.255
Signature Algorithm: sha256WithRSAEncryption
80:6c:1d:88:22:87:48:fd:d9:62:84:94:dc:50:1b:ed:8d:e4:
9f:d5:07:ce:45:5a:d8:af:82:58:35:2a:c3:c6:59:b9:46:29:
0d:0c:e6:86:53:ba:79:dd:39:c5:d5:df:54:2b:df:51:36:8c:
fd:8c:7b:a7:2f:b2:12:5d:ca:14:bb:23:65:b0:f3:24:b6:59:
1c:7c:b3:ae:0a:5c:74:d2:80:4f:75:8d:87:30:39:19:cb:e4:
ea:07:99:cd:d4:bb:5f:1a:2f:ae:bc:0f:a7:f6:6a:ba:eb:1c:
9c:a8:76:18:68:07:40:06:d4:49:26:df:ed:b8:32:b2:08:e7:
d5:16:ad:ba:c5:18:c7:a9:86:ba:68:19:f0:fc:67:9f:1e:fe:
06:98:8f:25:3c:40:6a:bb:c8:5e:e7:e4:26:62:2a:19:89:9e:
46:e3:cf:87:8d:63:bd:82:31:a7:70:08:1c:d8:e4:6a:76:51:
7c:bf:8a:19:b4:89:3a:37:25:56:9d:d4:e4:8b:d1:0a:01:98:
8f:85:84:18:4a:f1:8e:18:11:e6:29:64:91:f2:ce:82:d8:8e:
1f:9a:ce:1c:ac:04:5b:5c:1d:85:de:ce:c0:70:f2:1a:df:d2:
97:8e:96:80:84:93:8f:45:aa:3a:6b:df:08:9d:1c:ce:82:a4:
5c:9a:d8:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 18 15:12:00 2025 by rpki-client