Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/180241BA79B011F08C776688DAE4EC9C.roa
File: 180241BA79B011F08C776688DAE4EC9C.roa (raw, json)
Hash identifier: EVIRDHGxMnPUJA1pYJNqhU4C522itm8Ype8nOaYL1nM=
Subject key identifier: F1:17:87:E1:D8:8D:F6:BB:3F:56:9D:F6:82:B1:B8:86:02:19:0D:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/180241BA79B011F08C776688DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 08:16:08 +0000
ROA not before: Fri 15 Aug 2025 08:16:03 +0000
ROA not after: Mon 25 Aug 2025 08:16:03 +0000
asID: 149014
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102850 (0x191c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 08:16:03 2025 GMT
Not After : Aug 25 08:16:03 2025 GMT
Subject: CN=689eecc7-5dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:86:b1:64:b5:02:2a:f5:ba:6b:17:32:60:
da:b1:24:b4:cc:73:7a:b7:e5:1f:4f:62:48:93:31:
c2:73:8e:e4:c4:2b:89:8a:9a:5d:29:4a:f8:9e:0f:
03:a5:80:f5:1b:65:59:a2:cb:42:f2:c1:7b:62:9f:
16:6c:67:d3:95:38:7d:73:89:3d:3e:4c:9c:6c:63:
bf:f3:86:49:e5:30:bd:9d:38:21:a6:b0:7a:20:36:
62:d6:b3:6f:0f:49:27:93:cf:e3:86:9f:77:57:12:
5b:f1:16:41:5a:ad:52:1a:ef:15:47:d1:80:4b:01:
8a:bc:4f:27:43:e5:96:94:d5:2b:35:bf:6b:dc:04:
ec:ed:80:3e:f7:f6:db:8a:63:3f:c0:dd:8c:f2:3b:
8f:55:67:ad:cc:e4:fe:28:bc:cb:98:67:a3:ec:8f:
b1:fc:47:d2:f3:a3:f5:85:0e:94:fb:78:a4:bd:71:
9a:9b:2e:cd:54:81:bd:a2:ff:2a:e8:6b:55:ac:20:
13:f2:f3:f9:72:93:dd:88:3d:a1:62:fa:12:2a:35:
0a:af:f7:6f:0a:90:35:2a:cd:63:54:f6:72:aa:7e:
16:0e:9e:f0:4a:16:b9:bd:1a:be:7b:cb:e0:f3:2e:
7a:12:44:45:9a:ea:3f:ec:f7:23:35:6c:54:f5:60:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:17:87:E1:D8:8D:F6:BB:3F:56:9D:F6:82:B1:B8:86:02:19:0D:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/180241BA79B011F08C776688DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:81:58:ce:9d:b3:52:3f:9f:d6:ab:02:63:69:2e:72:ca:65:
91:f0:64:39:33:05:d8:e4:f6:b1:ed:ba:af:fc:55:a4:79:87:
b7:92:56:24:8e:f4:5c:2b:ac:45:eb:63:7c:a0:9c:d4:b7:8d:
dc:1e:35:f1:ce:d2:97:c1:9d:e9:2c:fc:30:2c:b8:b5:c3:e3:
c1:17:4f:e2:a0:4e:e1:f5:dc:8e:cd:e7:2f:b1:5a:d2:44:3e:
91:3e:f8:e5:99:0a:59:28:26:95:4d:2d:00:f8:68:86:ca:8a:
97:67:5e:d1:4b:f2:41:6b:7c:19:9b:7c:2c:e7:6e:64:6f:46:
32:3a:0c:36:7e:90:a0:3b:44:96:d8:64:8a:09:b5:82:24:b5:
86:f8:a7:41:75:c8:7e:fa:9b:ba:64:da:50:e4:0e:fe:a3:29:
c7:02:06:e3:d6:d3:b9:01:36:28:ca:f6:5b:d1:4a:bc:a2:be:
6f:01:4b:b4:a6:53:e7:e9:54:23:bc:95:46:07:b5:f8:6b:cf:
63:7b:86:5a:1d:bb:08:e9:d6:c8:ed:78:16:0d:bd:b2:1e:bf:
bb:95:99:13:c2:d7:d2:90:9c:78:4c:b3:30:19:f7:ed:31:98:
ef:cc:a5:a8:8c:8d:83:c0:e5:7b:23:3c:5b:c6:3e:74:37:66:
cd:56:93:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:13 2025 by rpki-client