Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9052B50636F711F09D177FB7DAE4EC9C.roa
File: 9052B50636F711F09D177FB7DAE4EC9C.roa (raw, json)
Hash identifier: TPpO+JlyZfeWbpOO8E2Vjl3ovIp+E+D9P1bRDo/V1iQ=
Subject key identifier: F1:42:22:96:44:B5:51:28:A5:81:3C:8A:0D:19:B0:9D:9E:A6:81:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9052B50636F711F09D177FB7DAE4EC9C.roa
Signing time: Thu 22 May 2025 10:28:56 +0000
ROA not before: Thu 22 May 2025 10:28:51 +0000
ROA not after: Wed 09 Jul 2025 10:28:51 +0000
asID: 63139
IP address blocks: 154.223.22.0/24 maxlen: 24
154.223.25.0/24 maxlen: 24
154.223.27.0/24 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.31.0/24 maxlen: 24
154.223.36.0/24 maxlen: 24
154.223.38.0/24 maxlen: 24
154.223.39.0/24 maxlen: 24
154.223.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98775 (0x181d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 10:28:51 2025 GMT
Not After : Jul 9 10:28:51 2025 GMT
Subject: CN=682efc68-543d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:a5:0e:29:be:50:11:8d:9b:63:74:76:9e:
b0:83:61:ad:55:49:dc:cc:cd:a0:58:af:6e:0f:0f:
a6:c2:a2:2e:3d:83:4f:00:b7:56:63:18:fb:65:b2:
5c:8a:4f:58:76:a5:08:be:c5:7f:64:fd:f4:33:17:
bc:5e:a1:1a:90:b2:43:b8:5b:4b:08:2f:04:69:0f:
1a:8a:9f:29:a6:7f:1e:de:79:48:0e:a8:ea:77:ec:
93:fa:0e:13:fb:d2:5e:a9:6a:9c:d5:5b:f7:85:da:
db:d0:d2:9f:03:17:7e:08:6b:ae:09:23:91:b0:a2:
51:98:07:1d:24:72:cb:30:71:02:cd:67:09:5d:d6:
ac:38:12:92:7b:1b:26:5c:c8:92:48:20:7b:f9:91:
d9:8b:a6:0f:49:4c:cf:45:c0:1a:a4:a6:62:7c:dd:
b2:19:b3:57:c4:5e:18:ef:5c:56:95:d3:4d:52:cd:
51:8e:2c:61:76:ac:41:22:7b:83:75:16:e4:0f:62:
3d:93:44:42:1e:72:14:36:e9:15:ba:17:fe:ae:c6:
64:87:4e:ba:50:34:31:b0:8b:25:d7:28:33:b3:87:
82:e3:8a:50:4b:76:12:99:9e:2b:1d:6f:7e:8e:5e:
5a:70:9a:3a:78:a0:44:32:0a:2e:14:34:b5:6a:06:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:42:22:96:44:B5:51:28:A5:81:3C:8A:0D:19:B0:9D:9E:A6:81:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9052B50636F711F09D177FB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.22.0/24
154.223.25.0/24
154.223.27.0/24
154.223.30.0/23
154.223.36.0/24
154.223.38.0/23
154.223.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1d:db:f1:82:3e:e7:3e:98:96:cf:f7:56:60:0a:f1:e8:bf:
13:6e:fc:02:37:1b:4c:a4:61:35:8e:28:af:b0:74:1e:51:22:
87:8b:20:b2:56:34:90:a5:3d:f9:01:97:82:e8:94:90:7e:85:
33:59:47:1c:3a:c5:00:3f:04:df:1d:35:1c:da:62:64:9d:4a:
9d:67:f1:10:bd:82:51:9c:68:a9:62:9b:72:f3:3e:0e:ee:87:
ed:5c:17:2d:9c:88:10:ea:7a:aa:e0:f0:62:6e:fa:d4:a5:7c:
ce:55:b1:16:3d:38:66:d8:fa:c6:6b:8f:3e:cb:93:7f:a5:1d:
53:98:d5:80:7f:b6:41:14:08:b0:07:dd:93:53:13:2d:09:64:
bb:c5:96:7a:9f:fa:0f:80:e0:69:23:34:d9:b3:f8:d5:ce:eb:
e1:d8:ad:05:c2:da:14:49:42:93:aa:6f:8d:a6:30:5e:5b:a3:
97:15:4b:45:e4:ed:0a:8b:04:51:ac:de:5f:f2:5a:36:07:85:
f7:af:f4:9f:d4:9f:b2:88:b0:84:83:86:7d:31:24:5c:78:bc:
61:ec:da:32:4d:00:b0:4a:1a:7b:ce:e6:fb:28:0f:29:d2:39:
2a:26:82:ca:d5:d1:c8:c4:a3:01:86:cd:b9:c7:dc:fd:53:a9:
0c:ec:46:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:15 2025 by rpki-client