Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22864F94512611F090528199DAE4EC9C.roa
File: 22864F94512611F090528199DAE4EC9C.roa (raw, json)
Hash identifier: D9sEU+n/WtoZUBeQiWo1UhaEbLr6Mx1YXexr6WK77Pw=
Subject key identifier: C7:BA:F6:DE:82:1F:DE:A6:3B:AD:98:74:D7:93:43:94:16:C3:A5:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01888A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22864F94512611F090528199DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 18:07:48 +0000
ROA not before: Tue 24 Jun 2025 18:07:41 +0000
ROA not after: Sat 09 Aug 2025 18:07:41 +0000
asID: 138915
IP address blocks: 154.223.27.0/24 maxlen: 24
154.223.32.0/24 maxlen: 24
154.223.33.0/24 maxlen: 24
154.223.34.0/23 maxlen: 24
154.223.37.0/24 maxlen: 24
154.223.40.0/23 maxlen: 24
154.223.42.0/24 maxlen: 24
154.223.43.0/24 maxlen: 24
154.223.44.0/24 maxlen: 24
154.223.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100490 (0x1888a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 18:07:41 2025 GMT
Not After : Aug 9 18:07:41 2025 GMT
Subject: CN=685ae974-9095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:16:ce:19:e1:0f:92:23:64:e1:32:d2:ed:
4c:cc:7d:37:f8:36:72:30:f1:1a:fa:39:a5:fa:36:
da:3d:33:67:ae:09:91:cf:c4:bf:a7:be:53:0c:e5:
22:fd:1e:74:e5:79:e5:60:22:24:35:67:fd:8f:07:
47:e3:69:8b:96:9c:d8:c3:d4:80:77:c1:72:d2:b7:
f0:a3:8c:9b:7d:53:24:50:6e:6f:b5:28:2b:d3:b5:
7c:a3:be:2d:b6:92:e2:33:08:7d:57:b0:ac:41:a0:
79:a5:6c:fb:16:f4:8e:13:63:00:44:e9:b9:4b:3a:
84:81:e5:6d:2c:ab:f1:47:6d:d1:69:71:64:77:bd:
6e:8e:eb:ad:73:25:e6:e6:1a:03:2a:8a:4f:bf:5c:
99:aa:4e:46:14:82:82:56:1b:97:b6:66:f8:e7:96:
50:4e:c5:be:bf:43:f6:0f:55:20:2d:67:ac:53:ca:
90:0d:7f:69:c2:04:ef:6c:89:2e:8b:79:b4:e7:81:
19:2e:df:b4:6e:bf:0c:8b:ab:b5:6d:14:03:d7:90:
08:d4:19:fc:26:12:df:4f:f9:21:bb:1d:44:ca:10:
e2:8f:4b:ad:00:80:bd:9f:3c:4b:27:97:e9:3c:f5:
63:96:fb:78:ab:91:33:19:2e:5a:a9:93:12:46:49:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BA:F6:DE:82:1F:DE:A6:3B:AD:98:74:D7:93:43:94:16:C3:A5:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22864F94512611F090528199DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.27.0/24
154.223.32.0/22
154.223.37.0/24
154.223.40.0-154.223.45.255
Signature Algorithm: sha256WithRSAEncryption
ba:97:1e:32:4b:29:01:20:05:bb:89:ed:5a:8b:ff:d4:ef:1e:
dc:28:12:c6:95:a7:73:d2:7d:16:b5:df:ab:1d:a3:7a:20:f8:
4f:c0:f0:5f:01:42:a1:69:e2:4a:61:fb:8f:f9:b8:e5:30:50:
72:ee:22:a1:5a:f9:26:ad:09:8f:18:1d:8f:db:77:c2:6d:ca:
7f:ba:90:44:58:16:58:4e:be:d6:82:ef:87:9d:36:c7:8b:ea:
02:67:d8:56:50:62:45:90:1f:d4:2d:17:45:b0:ee:0a:9c:eb:
a3:0d:12:2c:54:6a:01:9a:a2:e0:f0:ee:5e:61:0a:13:64:d9:
e7:48:78:63:78:4e:ed:d4:63:fe:17:07:bf:15:b5:4f:11:98:
71:7e:eb:ff:a1:8a:58:42:f6:59:1b:fe:e0:96:e4:80:50:7f:
9d:76:dd:37:1b:d8:99:77:9a:d3:4e:e9:84:9e:aa:a3:bf:8c:
10:00:7d:af:3e:26:3d:f6:16:d0:a5:f6:48:85:45:89:93:dc:
fe:23:15:d8:0e:7c:bb:b7:c2:df:ba:c9:96:39:be:02:d6:44:
31:fe:7a:6d:1e:77:e2:4c:2f:5e:21:f4:40:50:19:e5:c5:2e:
bd:9f:ef:0f:5b:8a:4b:a2:ad:40:fa:38:81:19:94:ec:6a:eb:
91:96:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:48:13 2025 by rpki-client