Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AFFF8967E6911F0916420E2DAE4EC9C.roa
File: 0AFFF8967E6911F0916420E2DAE4EC9C.roa (raw, json)
Hash identifier: wwEvh0oG/fldwLP5REF+/GPdBpOsi++FGUlnanw4pnQ=
Subject key identifier: 5A:DC:6A:9D:5D:FB:62:A7:32:7D:E6:35:41:F0:74:E3:55:B5:7E:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0192EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AFFF8967E6911F0916420E2DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 08:30:07 +0000
ROA not before: Thu 21 Aug 2025 08:30:02 +0000
ROA not after: Sat 01 Nov 2025 08:30:02 +0000
asID: 150706
IP address blocks: 154.223.168.0/24 maxlen: 24
154.223.169.0/24 maxlen: 24
154.223.170.0/24 maxlen: 24
154.223.171.0/24 maxlen: 24
154.223.176.0/24 maxlen: 24
154.223.177.0/24 maxlen: 24
154.223.178.0/24 maxlen: 24
154.223.179.0/24 maxlen: 24
154.223.180.0/24 maxlen: 24
154.223.182.0/24 maxlen: 24
154.223.183.0/24 maxlen: 24
154.223.188.0/24 maxlen: 24
154.223.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103150 (0x192ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 08:30:02 2025 GMT
Not After : Nov 1 08:30:02 2025 GMT
Subject: CN=68a6d90f-df2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:c1:de:ac:73:18:be:c8:b9:96:7a:71:4f:
bd:f7:43:a1:3c:db:f2:e1:b5:af:3a:05:dc:01:9b:
76:7b:a8:a1:b5:a1:66:16:93:ba:fd:04:70:00:0c:
39:53:f7:18:a5:67:aa:9c:01:af:6c:ee:1c:1c:9b:
45:87:e0:f2:e3:25:c1:07:e2:97:f3:dc:39:d5:44:
6f:c1:30:b3:f4:1f:83:87:d2:84:c3:5f:e9:65:8b:
39:68:9f:5a:16:5a:29:c8:75:a1:d0:29:98:bf:16:
f9:a1:58:ed:e4:63:fc:61:86:b8:b7:f1:f5:e3:a6:
a8:d8:21:83:b8:8e:bc:15:57:a7:d7:a5:5c:a2:0f:
be:db:f1:62:0f:0e:84:36:5a:7d:21:a3:7d:08:7c:
1c:0f:fa:6b:89:ad:ad:0d:5f:25:4c:8f:1f:82:fb:
8c:8d:18:aa:cd:80:6e:35:2f:91:05:71:4c:fa:24:
69:88:f4:62:a5:e8:bf:74:cb:59:ae:e3:d3:77:80:
f2:e1:08:75:26:6d:b5:80:da:e2:e9:98:36:23:28:
7c:bc:13:5c:83:21:a4:a3:2e:c4:3c:4b:09:13:6b:
fb:ec:82:49:87:b0:8e:8d:27:7b:52:ae:77:ff:3c:
a5:98:87:dd:ec:c5:6b:f5:13:14:78:a8:bc:b4:0f:
a5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DC:6A:9D:5D:FB:62:A7:32:7D:E6:35:41:F0:74:E3:55:B5:7E:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AFFF8967E6911F0916420E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0-154.223.180.255
154.223.182.0/23
154.223.188.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:26:f3:9f:e9:8a:1d:65:eb:36:9b:7a:75:b6:87:ed:d2:76:
8d:1d:2b:71:a4:43:c5:fd:84:a2:da:72:55:52:d7:54:b2:e6:
00:7f:4d:a5:df:6a:64:ea:39:87:8c:3e:7f:7d:65:3a:6b:09:
d6:56:fb:2b:5b:d3:94:99:24:ca:12:bd:a9:5a:92:8d:47:fa:
a6:48:2a:54:c9:b0:ef:5c:3f:5e:38:06:72:ed:1b:0d:9a:df:
ce:75:1a:0e:29:bc:a0:c0:23:c5:db:c2:e2:c6:07:72:b7:e7:
0e:40:06:31:eb:40:3c:c8:98:13:f3:26:1e:f6:19:87:4a:91:
dd:59:ac:fa:f0:4f:b1:b3:b8:08:18:53:37:45:40:da:eb:a9:
1e:fb:eb:04:e3:7e:c4:1b:b0:72:85:7b:53:26:29:32:c0:26:
cc:1a:6d:cd:d2:11:e1:29:6c:02:88:7b:49:52:a2:8f:cc:b5:
19:e4:72:8b:34:e4:3a:2f:ab:90:bf:5a:1e:cc:51:32:c2:28:
a4:2b:43:84:95:ca:a8:4d:06:5d:a8:50:08:ac:2d:fe:1b:43:
ec:6d:19:e3:5c:6d:a7:d2:73:81:58:3f:6c:ac:ff:94:aa:aa:
38:5a:86:9a:d2:b2:6e:45:47:30:b7:53:1e:3c:da:55:74:c0:
ce:31:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:41 2025 by rpki-client