Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E65394BA843C11F0959340E8DAE4EC9C.roa
File: E65394BA843C11F0959340E8DAE4EC9C.roa (raw, json)
Hash identifier: 9wjq5RRKOhgL+D9hcdPnswGhAowO6EqZBdwg3UfYN1w=
Subject key identifier: 00:BD:43:B8:FF:35:E3:57:6B:F7:60:5D:6F:86:FC:D7:1E:CC:F0:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E65394BA843C11F0959340E8DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 18:29:15 +0000
ROA not before: Thu 28 Aug 2025 18:29:10 +0000
ROA not after: Mon 06 Oct 2025 18:29:10 +0000
asID: 48031
IP address blocks: 154.218.20.0/24 maxlen: 24
154.218.21.0/24 maxlen: 24
154.218.23.0/24 maxlen: 24
154.218.24.0/24 maxlen: 24
154.222.207.0/24 maxlen: 24
154.222.208.0/24 maxlen: 24
154.222.209.0/24 maxlen: 24
154.222.210.0/24 maxlen: 24
154.222.211.0/24 maxlen: 24
154.222.212.0/24 maxlen: 24
154.222.213.0/24 maxlen: 24
154.222.214.0/24 maxlen: 24
154.222.223.0/24 maxlen: 24
154.222.240.0/24 maxlen: 24
154.222.241.0/24 maxlen: 24
154.222.243.0/24 maxlen: 24
154.222.244.0/24 maxlen: 24
154.222.245.0/24 maxlen: 24
154.222.246.0/24 maxlen: 24
154.222.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104986 (0x19a1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 18:29:10 2025 GMT
Not After : Oct 6 18:29:10 2025 GMT
Subject: CN=68b09ffb-b6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:58:cc:2c:6d:b7:71:f2:87:04:58:94:d5:90:
88:94:5b:9b:d1:fe:2e:9f:62:41:67:1b:67:5c:28:
cf:46:43:1b:62:cc:c3:9f:9b:a7:eb:45:c9:71:49:
15:01:2a:c8:69:fa:43:8a:44:55:49:c2:d7:e8:c2:
f4:8f:21:1f:1f:e0:e9:b6:61:8e:ec:8b:de:05:0a:
38:a9:23:48:ac:a2:3b:09:33:72:a7:aa:4c:31:ce:
03:3f:83:00:67:59:20:bf:80:db:e1:94:79:5b:f7:
98:3a:22:4b:68:b2:0d:91:cf:94:a6:c8:87:b4:ce:
c2:a9:e8:b5:74:ab:40:ce:61:22:06:b4:f8:8b:49:
b4:ce:3a:93:0e:9c:ab:00:b2:5e:75:50:bf:ea:e6:
f9:5c:89:09:94:07:81:8a:94:f8:e1:33:39:2f:50:
b9:86:96:3e:3a:3c:13:49:44:65:e3:cc:88:89:e9:
85:b4:1f:98:56:76:d5:2d:c7:f1:f2:4a:17:ac:9f:
1d:ef:f0:7d:57:d9:95:cf:50:74:b6:7d:2f:51:3d:
5b:97:a0:48:b8:5d:79:60:cf:5d:2c:57:53:b0:19:
44:6f:38:20:7e:ee:ec:01:fb:40:e8:f7:60:b8:2f:
4d:55:52:24:94:c8:75:00:93:e3:70:69:ab:a9:0a:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BD:43:B8:FF:35:E3:57:6B:F7:60:5D:6F:86:FC:D7:1E:CC:F0:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E65394BA843C11F0959340E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.20.0/23
154.218.23.0-154.218.24.255
154.222.207.0-154.222.214.255
154.222.223.0/24
154.222.240.0/23
154.222.243.0-154.222.247.255
Signature Algorithm: sha256WithRSAEncryption
48:cc:6b:f7:c1:85:76:92:13:72:60:71:5b:f3:d9:5f:bf:a4:
31:6c:37:7b:8e:68:c3:c5:7f:e5:0d:c9:10:b9:11:6a:42:df:
30:15:41:5b:59:b8:ff:96:55:58:96:43:29:10:70:25:31:7b:
c1:a5:79:6e:54:05:f5:30:19:a6:95:8f:c1:52:da:94:e7:eb:
dc:c9:9b:d5:e5:89:38:16:8f:b0:80:ef:58:b6:00:c0:e0:9a:
69:8e:a1:f3:ad:6f:26:72:d4:dd:dd:36:e7:0e:50:bd:22:d2:
9f:e8:20:c8:fa:59:49:09:b2:c4:d4:3d:de:b9:0f:7e:a1:0b:
f0:29:80:ca:8f:8a:91:64:a1:7d:74:7e:4a:a5:21:9b:10:9b:
9d:77:eb:cf:90:f5:ca:58:bd:ba:a3:c6:9f:45:e9:6d:a8:36:
34:b6:5a:07:38:62:fe:0c:99:a5:bb:7b:6d:cd:94:30:e1:2f:
90:3b:bd:f5:da:02:68:ab:84:68:3f:78:64:38:21:1c:ab:8b:
d6:28:58:6e:93:94:e1:2c:43:92:53:7f:0f:f5:e5:dc:bf:a3:
99:fa:3f:5e:c9:f6:c0:3d:fd:da:eb:12:a8:76:c8:e4:fb:03:
cd:14:87:84:38:07:42:40:b8:4c:23:00:b6:4f:cc:13:dc:ab:
36:70:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:41 2025 by rpki-client