Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0214D492842511F0ACEA0FCEDAE4EC9C.roa
File: 0214D492842511F0ACEA0FCEDAE4EC9C.roa (raw, json)
Hash identifier: r+mKhX9WWX7MyTP5W+NUJTNMJngVFk9YkZpTpz8vkYs=
Subject key identifier: 73:A8:E2:7A:BA:2A:46:2E:C0:F4:BC:A8:0F:A9:CD:F9:27:44:FF:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0214D492842511F0ACEA0FCEDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 15:38:14 +0000
ROA not before: Thu 28 Aug 2025 15:38:07 +0000
ROA not after: Mon 06 Oct 2025 15:38:07 +0000
asID: 49505
IP address blocks: 154.209.214.0/24 maxlen: 24
154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.209.223.0/24 maxlen: 24
154.211.9.0/24 maxlen: 24
154.211.10.0/24 maxlen: 24
154.211.11.0/24 maxlen: 24
154.211.16.0/24 maxlen: 24
154.211.17.0/24 maxlen: 24
154.211.18.0/24 maxlen: 24
154.211.19.0/24 maxlen: 24
154.212.28.0/24 maxlen: 24
154.212.29.0/24 maxlen: 24
154.212.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104948 (0x199f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 15:38:07 2025 GMT
Not After : Oct 6 15:38:07 2025 GMT
Subject: CN=68b077e5-89fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:4d:1b:35:d3:d8:2a:49:18:dd:e1:c7:da:
5c:94:2d:9a:b3:22:89:aa:90:e8:f0:ff:d6:4f:ee:
ad:23:de:7a:36:ba:bd:7f:d6:77:aa:74:79:10:2d:
30:10:4e:75:e4:3b:d2:10:e8:25:5f:ff:88:c1:ca:
6b:22:0c:23:1d:0f:20:cd:ee:c1:6d:c5:ae:9e:70:
f6:64:35:f6:12:ce:73:d9:da:aa:60:43:bc:6f:b3:
53:0f:ad:5d:e3:83:e1:dd:a0:f0:7f:e6:6f:df:31:
4d:5e:e1:41:9f:32:1f:2e:57:d8:f4:78:ee:ff:85:
16:0e:20:06:71:14:23:c4:d0:6d:74:46:7f:98:f4:
2c:01:5d:32:70:eb:be:21:18:5b:46:9b:64:7b:23:
cc:91:7d:3a:c5:80:a1:22:1b:15:05:51:b6:ca:e5:
0c:ea:04:71:78:0d:d8:27:2f:a8:1b:1e:80:41:0f:
04:e0:77:85:a0:62:a3:57:00:b8:84:e3:85:96:02:
26:35:1a:bf:a1:fc:e5:24:8e:ea:a2:06:33:06:a2:
73:2f:1c:d5:7e:3a:35:f0:15:5d:a4:1e:c8:46:c1:
3d:35:2e:b0:4b:98:86:eb:a7:c2:e5:c8:48:f8:41:
54:f8:52:e4:43:98:83:ac:cc:39:9c:c9:0e:c1:0e:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A8:E2:7A:BA:2A:46:2E:C0:F4:BC:A8:0F:A9:CD:F9:27:44:FF:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0214D492842511F0ACEA0FCEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.214.0-154.209.223.255
154.211.9.0-154.211.11.255
154.211.16.0/22
154.212.28.0/23
154.212.31.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:f9:8d:f1:9c:21:c8:84:63:df:69:24:a3:e0:d2:b8:96:44:
f8:43:f6:c6:50:3d:32:e9:5c:17:20:6d:97:3f:9c:ce:2b:48:
1a:06:7f:2a:e8:b2:54:b0:d0:c9:5d:f0:0c:c0:aa:1b:20:61:
65:bc:9e:dd:e1:3d:30:b6:dc:1d:ff:5f:0c:e9:93:52:33:44:
4c:32:35:e0:ab:c1:ae:88:b8:c0:28:fd:ee:10:e4:f5:3b:87:
73:86:7e:2b:9d:7c:b6:d7:6b:2f:ca:65:65:ab:3e:13:f2:59:
17:76:81:ac:20:26:b4:a4:72:d3:70:db:bf:20:ef:98:97:36:
95:c6:18:c6:84:ad:5e:18:89:23:30:5d:49:df:01:46:9e:93:
b9:f3:7d:f2:88:64:31:41:6d:c3:2d:c2:b0:93:84:fb:d9:14:
3e:33:89:09:82:57:8a:78:56:ff:5f:99:45:c9:85:dc:87:5f:
74:b7:c9:30:fe:0f:6c:c7:36:53:81:b3:29:2e:29:ba:4a:ac:
d2:6c:e8:e4:26:aa:1f:5d:d1:3b:e0:cd:b1:31:ad:2a:4a:7b:
2c:83:ca:ef:1d:d6:d4:e3:7d:2f:a2:60:27:ec:92:e9:fd:28:
af:96:64:5d:d5:6d:b4:90:b2:b5:e6:65:c8:93:4b:0a:7e:f7:
00:57:53:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:38 2025 by rpki-client