Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/328A2DFE543011F0B44FECE0DAE4EC9C.roa
File: 328A2DFE543011F0B44FECE0DAE4EC9C.roa (raw, json)
Hash identifier: o9So+wjdJqxp72LseGqwygRgVUvX1fyD9qkntN/nqFY=
Subject key identifier: 55:7E:3E:D6:32:40:C2:D1:7D:2B:B4:F7:7F:95:C4:B7:BD:5F:2D:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01895D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/328A2DFE543011F0B44FECE0DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 14:57:24 +0000
ROA not before: Sat 28 Jun 2025 14:57:19 +0000
ROA not after: Sat 02 Aug 2025 14:57:19 +0000
asID: 203020
IP address blocks: 154.223.141.0/24 maxlen: 24
154.223.142.0/24 maxlen: 24
154.223.162.0/24 maxlen: 24
154.223.163.0/24 maxlen: 24
154.223.172.0/24 maxlen: 24
154.223.173.0/24 maxlen: 24
154.223.174.0/24 maxlen: 24
154.223.175.0/24 maxlen: 24
154.223.184.0/24 maxlen: 24
154.223.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100701 (0x1895d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 14:57:19 2025 GMT
Not After : Aug 2 14:57:19 2025 GMT
Subject: CN=686002d3-ead1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:5b:fd:b0:7f:df:85:b1:1d:0d:f9:ad:16:
d2:a5:3a:d9:68:b4:f5:48:94:dd:93:02:08:59:47:
f2:b3:07:12:a4:99:9a:52:3c:b6:50:39:bd:3e:61:
2e:48:14:d1:0a:d5:34:fe:bc:54:6c:2b:1b:dc:4b:
d3:83:d4:24:26:68:06:53:a9:30:7a:00:56:a2:1c:
47:8f:2e:93:85:16:d0:0f:1f:a7:94:92:9d:ae:23:
a1:fc:f2:70:aa:39:9e:87:5d:cc:bf:dc:6b:b5:c9:
dc:97:44:cc:85:8c:c1:08:81:60:a2:ec:d1:a7:d0:
78:4c:c7:6e:e1:f1:df:14:8c:d6:ef:d1:8b:16:4f:
12:f5:e3:72:93:51:57:76:f3:ae:c2:08:0e:0e:74:
44:61:a7:16:47:b6:eb:42:0e:48:dd:a1:59:f1:1a:
ab:a4:61:cc:a8:f8:1c:82:2b:a6:e5:49:26:e0:36:
94:8c:3e:9f:db:4c:3c:eb:a0:48:a4:c5:46:9c:16:
a4:90:2e:ac:f0:42:25:b0:e1:38:ab:f3:a8:79:a4:
ce:2e:20:31:70:b3:44:b8:99:cc:b4:35:5f:9c:1e:
e3:66:6e:bb:08:64:15:ec:e3:41:54:3f:bc:40:75:
cb:f6:f1:3c:de:c9:c9:25:d7:11:6b:41:a3:9f:a5:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7E:3E:D6:32:40:C2:D1:7D:2B:B4:F7:7F:95:C4:B7:BD:5F:2D:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/328A2DFE543011F0B44FECE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.141.0-154.223.142.255
154.223.162.0/23
154.223.172.0/22
154.223.184.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:27:80:7c:9f:df:6e:05:bd:94:b7:bf:b8:4a:9d:28:e4:b5:
46:c9:f5:fc:71:c9:20:0f:12:b9:a1:bd:21:9e:4d:65:ea:76:
73:d4:9e:1e:4b:7c:39:ce:3d:9d:e3:4a:55:55:d5:c8:18:64:
09:b3:4f:12:66:ea:04:04:d7:5c:9f:ae:3c:7a:9a:63:f5:3a:
50:72:26:ed:e4:c4:63:6d:2d:49:00:b2:23:49:19:c4:88:aa:
dd:50:cd:f9:55:ae:cb:6c:7b:a1:d4:07:f0:0c:95:81:07:21:
32:10:08:41:5d:bd:1c:b1:23:f6:bc:58:d4:2e:2d:17:72:16:
32:6a:88:b9:0d:eb:29:0a:a9:3c:57:25:87:41:e2:60:ee:32:
4b:31:cb:72:a6:dd:3a:44:dd:04:b5:58:ef:7e:46:93:14:ed:
1f:e8:2a:08:87:d0:e8:9b:d7:22:19:62:ec:75:ed:79:7e:eb:
d0:0c:b2:68:27:92:9e:87:50:2c:6a:27:bc:44:54:91:76:f9:
fa:38:73:b3:35:bb:3a:7d:00:ac:96:1b:ab:4d:cc:31:c0:66:
4d:11:f8:44:42:7e:ed:3a:91:28:80:ee:5c:ea:27:f6:9c:f9:
c6:d6:32:66:a5:be:bd:66:93:93:74:46:c2:06:1f:e8:26:ee:
3d:74:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:52:54 2025 by rpki-client