Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AFC81F659D711F0BC62B8AADAE4EC9C.roa
File: 8AFC81F659D711F0BC62B8AADAE4EC9C.roa (raw, json)
Hash identifier: B5uHA5zJ9FtobDByB3uda7DPwDsHw5CYj80wmSNIZqE=
Subject key identifier: 85:D0:AF:7F:5F:7B:C0:40:22:0D:E5:03:22:27:C2:2E:C0:DB:57:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AFC81F659D711F0BC62B8AADAE4EC9C.roa
Signing time: Sat 05 Jul 2025 19:37:54 +0000
ROA not before: Sat 05 Jul 2025 19:37:49 +0000
ROA not after: Wed 10 Sep 2025 19:37:49 +0000
asID: 395793
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101194 (0x18b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 19:37:49 2025 GMT
Not After : Sep 10 19:37:49 2025 GMT
Subject: CN=68697f12-cf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:36:d5:7a:b1:14:1c:02:58:4b:c7:57:f4:db:
27:b2:3b:9d:a0:83:23:5d:73:2e:7f:cb:e5:f5:71:
57:2f:21:6c:a7:57:bb:42:1c:d1:d4:2f:84:43:26:
3f:85:3b:a7:5e:db:89:33:db:c3:23:db:c8:7b:07:
c9:c4:a6:ca:71:ec:56:54:29:de:be:9d:d0:c1:0a:
67:3b:62:1b:c1:99:2d:4b:b8:4b:0c:60:67:8d:d7:
ca:77:4b:24:8c:85:86:63:e0:b5:35:ac:dc:7c:f7:
0c:6e:ab:c5:a8:90:90:29:35:0e:a2:9f:1c:95:bf:
ee:52:4b:30:7e:01:29:3a:ae:1f:72:aa:3c:48:5e:
fd:fb:51:b6:ea:33:d7:84:85:7a:20:3c:b8:8f:69:
c6:e9:20:6f:15:a2:72:a4:fb:a5:5b:06:bd:2b:b5:
f6:3b:78:3f:1b:cd:6d:08:ea:70:9d:fa:17:3a:de:
96:0c:f2:8e:74:25:83:92:3d:9a:60:c0:d0:91:26:
50:95:9d:7d:ea:64:80:25:ea:33:e8:83:6f:26:b8:
20:7e:0e:1e:65:d8:ca:66:22:39:c8:4b:23:42:53:
85:de:34:8a:67:f3:60:00:7b:48:87:1b:d8:2a:34:
35:d2:37:77:93:27:50:79:ab:27:00:6d:2e:8d:d4:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D0:AF:7F:5F:7B:C0:40:22:0D:E5:03:22:27:C2:2E:C0:DB:57:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AFC81F659D711F0BC62B8AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
Signature Algorithm: sha256WithRSAEncryption
43:5c:9f:bd:f1:02:34:c6:3e:e1:19:45:e5:4a:b9:f4:12:01:
0f:71:a0:1f:fc:13:16:aa:55:94:26:aa:a1:2c:d7:0e:50:1d:
5c:98:11:21:7b:df:a0:93:d7:8b:d9:4c:e4:67:f4:8e:15:12:
43:8e:77:82:26:2c:5d:f0:a2:b9:15:7c:20:c6:61:f6:7c:b6:
a8:d5:f8:b2:49:37:ad:c0:52:d0:66:fb:86:b4:ca:33:ad:14:
a2:12:06:f5:95:a8:1d:ff:9d:12:9d:60:47:95:90:61:7a:25:
7b:7b:6d:01:e0:94:98:d0:31:b7:10:75:54:f6:6b:b4:36:99:
72:6f:3e:c6:9b:38:51:24:e3:8a:86:d9:00:c8:82:68:59:e9:
11:ce:fd:5f:a2:3d:66:af:7f:77:65:4c:66:38:34:8d:79:0b:
08:aa:0c:5a:6f:ff:79:06:29:d0:68:8d:05:89:79:ea:70:f2:
13:52:72:93:bd:d9:9d:37:89:56:3a:08:a6:62:2e:23:f0:c7:
6b:32:c0:a6:e1:f2:95:4d:27:9d:50:75:e7:55:ad:85:bb:47:
8b:6f:11:af:6a:6e:b6:5e:8a:3b:78:d9:d7:ec:8b:8e:5f:fe:
1d:0f:5f:22:af:f3:e1:44:d0:17:03:a0:00:7f:29:b9:4f:6e:
3e:65:9d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:20:19 2025 by rpki-client