Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2287C3E4510B11F094B95DEEDAE4EC9C.roa
File: 2287C3E4510B11F094B95DEEDAE4EC9C.roa (raw, json)
Hash identifier: A7jTIwSXW/Cke+qGgFrc1mBfL4Gis0Vh+SnHbjmL/Mo=
Subject key identifier: 76:40:33:BC:B7:13:8D:2F:A0:BA:F5:8D:7E:66:9C:60:5D:D5:35:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018872
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2287C3E4510B11F094B95DEEDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 14:54:32 +0000
ROA not before: Tue 24 Jun 2025 14:54:27 +0000
ROA not after: Tue 05 Aug 2025 14:54:27 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.219.237.0/24 maxlen: 24
154.219.238.0/24 maxlen: 24
154.219.239.0/24 maxlen: 24
154.219.240.0/24 maxlen: 24
154.219.241.0/24 maxlen: 24
154.219.242.0/24 maxlen: 24
154.219.243.0/24 maxlen: 24
154.219.244.0/24 maxlen: 24
154.219.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100466 (0x18872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 14:54:27 2025 GMT
Not After : Aug 5 14:54:27 2025 GMT
Subject: CN=685abc28-2604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:28:03:30:50:ba:94:ec:ca:9f:0f:77:23:
62:67:eb:e0:5f:fa:97:6d:a3:c6:6e:e9:08:ff:f0:
a8:69:00:22:bd:c1:52:78:dd:0e:71:08:8d:8e:df:
29:18:83:01:cb:d1:38:db:9e:3c:9a:21:0c:92:f9:
57:d0:5f:3d:d5:df:c8:cf:50:fd:4d:2d:39:0a:00:
b0:29:98:fe:73:83:5b:aa:64:1c:29:bb:06:ae:03:
a1:d9:a3:d3:0e:15:fb:47:a7:d1:a9:21:36:fd:28:
e6:8d:79:e7:c3:32:a9:58:3b:35:4c:09:e9:23:1f:
82:cd:fc:49:84:dd:e5:2f:ec:1b:b6:8f:d9:cf:13:
94:17:dd:45:32:4e:95:c6:76:23:b7:6a:ab:a5:a8:
62:41:57:63:7d:9f:db:4c:07:cf:81:4e:bf:18:11:
a9:35:92:bf:68:81:68:e3:d6:2e:22:ea:51:e1:6e:
95:40:95:38:24:eb:5b:15:89:f6:40:9d:e1:14:3b:
e1:79:a3:b1:77:60:44:18:51:7c:95:e1:ad:78:d0:
50:c3:64:46:ec:de:71:ef:81:c5:82:5b:6e:78:ec:
22:02:58:52:8c:a6:cc:d6:39:15:f6:c0:9c:c2:d6:
b6:71:fe:da:7c:c5:80:d8:2e:85:ce:32:fe:36:b4:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:40:33:BC:B7:13:8D:2F:A0:BA:F5:8D:7E:66:9C:60:5D:D5:35:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2287C3E4510B11F094B95DEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0/24
154.219.237.0-154.219.244.255
154.219.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1f:c0:c3:57:48:aa:50:e7:32:03:5d:50:72:c7:35:53:b1:
4e:7b:e8:bc:02:59:c9:cc:f2:e0:c1:91:52:65:a0:6b:75:26:
e1:88:07:62:93:b7:75:b0:28:18:24:b8:bc:86:70:4a:a3:a5:
f5:b9:8e:26:12:0c:0d:52:52:55:a1:c0:e2:5a:6b:7b:f0:c8:
77:a8:96:21:30:5d:80:ba:8e:0d:8b:99:c2:7b:83:17:be:3e:
b9:4e:c6:9e:bc:09:b1:f7:72:40:41:54:b5:72:63:ab:67:31:
42:97:95:ae:f8:71:e0:1c:ae:fd:e1:9e:c9:8c:89:1d:f3:5a:
f8:88:3e:05:b2:db:1a:1f:74:fa:f3:20:71:e3:89:4a:c4:c6:
f4:bc:fb:11:7d:3d:8c:fc:97:43:89:75:19:8d:54:7a:65:63:
00:d6:a9:76:04:17:0c:25:de:17:9d:98:36:d0:be:97:5d:da:
8b:ef:e0:4d:42:af:17:81:95:94:1c:20:d7:d0:09:6b:8a:7f:
b9:8d:93:6d:70:e1:fd:d9:78:5f:57:3c:b8:0d:82:41:f5:76:
73:16:5d:9f:d8:07:6e:46:b0:4c:80:0c:26:ba:05:be:9a:fe:
80:3b:12:c7:87:bc:bd:1b:ee:4c:96:e6:ce:f7:9d:8d:7e:b1:
4e:7b:d5:d5
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAYhyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjI0MTQ1NDI3WhcNMjUwODA1MTQ1NDI3WjAYMRYw
FAYDVQQDEw02ODVhYmMyOC0yNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2jgoAzBQupTsyp8PdyNiZ+vgX/qXbaPGbukI//CoaQAivcFSeN0OcQiN
jt8pGIMBy9E42548miEMkvlX0F891d/Iz1D9TS05CgCwKZj+c4NbqmQcKbsGrgOh
2aPTDhX7R6fRqSE2/SjmjXnnwzKpWDs1TAnpIx+CzfxJhN3lL+wbto/ZzxOUF91F
Mk6VxnYjt2qrpahiQVdjfZ/bTAfPgU6/GBGpNZK/aIFo49YuIupR4W6VQJU4JOtb
FYn2QJ3hFDvheaOxd2BEGFF8leGteNBQw2RG7N5x74HFgltueOwiAlhSjKbM1jkV
9sCcwta2cf7afMWA2C6FzjL+NrTY7QIDAQABo4ICuTCCArUwHQYDVR0OBBYEFHZA
M7y3E40voLr1jX5mnGBd1TXUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMjg3QzNFNDUxMEIxMUYwOTRCOTVERUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAmtoZMAwDBACa2+0DBACa
2/QDBACa2/gwDQYJKoZIhvcNAQELBQADggEBAJofwMNXSKpQ5zIDXVByxzVTsU57
6LwCWcnM8uDBkVJloGt1JuGIB2KTt3WwKBgkuLyGcEqjpfW5jiYSDA1SUlWhwOJa
a3vwyHeoliEwXYC6jg2LmcJ7gxe+PrlOxp68CbH3ckBBVLVyY6tnMUKXla74ceAc
rv3hnsmMiR3zWviIPgWy2xofdPrzIHHjiUrExvS8+xF9PYz8l0OJdRmNVHplYwDW
qXYEFwwl3hedmDbQvpdd2ovv4E1CrxeBlZQcINfQCWuKf7mNk21w4f3ZeF9XPLgN
gkH1dnMWXZ/YB25GsEyADCa6Bb6a/oA7EseHvL0b7kyW5s73nY1+sU571dU=
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:06:39 2025 by rpki-client