Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA29B54510E11F09C405786DAE4EC9C.roa
File: BCA29B54510E11F09C405786DAE4EC9C.roa (raw, json)
Hash identifier: aae/J1yPCNr4+BgK7FHttc7k7sUZPS+FM5dGVrOKxb4=
Subject key identifier: FD:E7:4D:22:0E:28:E2:38:A1:85:CC:71:31:E6:EE:56:A4:CB:A2:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01887A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA29B54510E11F09C405786DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 15:20:19 +0000
ROA not before: Tue 24 Jun 2025 15:20:05 +0000
ROA not after: Tue 05 Aug 2025 15:20:05 +0000
asID: 48031
IP address blocks: 154.222.216.0/24 maxlen: 24
154.222.217.0/24 maxlen: 24
154.222.218.0/24 maxlen: 24
154.222.219.0/24 maxlen: 24
154.222.220.0/24 maxlen: 24
154.222.221.0/24 maxlen: 24
154.222.222.0/24 maxlen: 24
154.222.242.0/24 maxlen: 24
154.222.252.0/24 maxlen: 24
154.223.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100474 (0x1887a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 15:20:05 2025 GMT
Not After : Aug 5 15:20:05 2025 GMT
Subject: CN=685ac233-68d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:e7:ff:de:49:b3:17:43:b9:17:e4:9d:7e:
cd:d6:b8:ec:1c:c3:7d:5c:2c:43:f5:b5:f4:fe:be:
65:0a:4f:15:dd:f1:50:a8:aa:88:8e:b9:7b:b6:f7:
a4:42:43:36:ac:83:2f:ca:f4:b7:8b:93:40:f0:18:
30:2a:9d:9a:9b:d2:d4:61:0a:c2:6a:23:1a:a2:49:
df:0d:00:3b:21:60:fb:4e:3a:2f:71:34:df:5c:1f:
d7:0d:d4:3c:9e:df:4b:b7:ac:8f:83:ec:90:dd:3b:
d5:d5:49:c5:ab:93:a7:c2:71:4c:df:40:ad:e7:6b:
26:79:6d:28:85:0b:1d:e5:fd:1c:5d:14:15:7c:df:
52:e5:88:fb:b0:91:dc:10:36:f4:b8:70:fa:9e:27:
a2:82:bf:84:ba:8d:84:5b:75:b2:2b:b6:24:2b:62:
24:d0:9f:3e:b1:4b:36:0a:09:41:7c:90:c8:64:33:
cb:ab:30:34:55:f8:35:06:1c:78:c6:19:c6:46:96:
72:e7:e4:ae:28:b1:1e:52:bf:8a:ab:71:db:dd:85:
90:2e:1d:34:8e:4d:fd:c5:d8:d9:ed:67:f9:8e:3d:
97:0b:f1:31:7f:9b:53:d5:76:f5:fd:d2:74:f6:ce:
3b:52:b9:97:91:13:78:6d:c6:b9:3f:7d:85:50:c9:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E7:4D:22:0E:28:E2:38:A1:85:CC:71:31:E6:EE:56:A4:CB:A2:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA29B54510E11F09C405786DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.216.0-154.222.222.255
154.222.242.0/24
154.222.252.0/24
154.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:4d:b5:10:d4:de:37:18:f8:c8:34:0e:e2:f9:d9:7d:1a:81:
7b:72:5c:26:b0:91:93:41:ef:10:47:98:6e:dc:4c:5d:e5:3b:
4e:86:a7:5b:e3:08:6a:e9:56:0e:01:a0:38:91:2e:e3:1d:88:
2a:a4:ec:b6:ad:96:ac:57:ab:ce:62:14:22:64:99:5e:70:11:
a4:2d:22:a9:16:e0:1a:3a:e5:d1:30:ae:c7:b9:65:c9:f3:e4:
c5:14:b9:23:d9:38:30:7a:ee:44:6b:62:89:95:57:c5:52:d4:
65:8d:28:4b:d3:a6:bf:f3:b4:3e:71:c7:4c:9a:0f:31:e4:d4:
1c:bb:2b:8f:f7:d6:be:e9:ff:0f:e4:59:0e:4f:29:0f:a0:a8:
f3:e5:47:e3:fc:0d:9b:ca:ab:bf:3a:8d:87:32:65:49:11:88:
7e:ea:7f:64:b0:e6:9f:be:41:4d:a8:23:7f:c0:89:f2:e3:f0:
bf:eb:59:10:77:33:be:4e:d3:f8:27:2c:c3:2d:19:f9:aa:60:
1f:96:04:23:b5:a3:8d:b4:90:01:5f:61:a4:17:44:ea:2e:24:
ed:5c:ad:77:6b:db:91:f7:c8:cb:57:66:a0:f9:f3:c9:ff:84:
43:7a:c8:be:8f:ed:3c:03:aa:c5:9e:d4:7f:a8:d8:13:64:a0:
14:4a:52:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:42:24 2025 by rpki-client