Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0814ED6E995111F0B6E2F3DBDAE4EC9C.roa
File: 0814ED6E995111F0B6E2F3DBDAE4EC9C.roa (raw, json)
Hash identifier: WZzUcru64Vd4PA77ny/NPTv6z6OuQzAdpQqmgc86J2Y=
Subject key identifier: 89:0D:6E:3F:A2:C8:AE:29:8F:89:C1:C2:4D:17:3F:21:8F:2E:9C:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A080
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0814ED6E995111F0B6E2F3DBDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 14:16:16 +0000
ROA not before: Wed 24 Sep 2025 14:16:11 +0000
ROA not after: Fri 31 Oct 2025 14:16:11 +0000
asID: 214143
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.196.214.0/24 maxlen: 24
154.206.11.0/24 maxlen: 24
154.208.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106624 (0x1a080)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 14:16:11 2025 GMT
Not After : Oct 31 14:16:11 2025 GMT
Subject: CN=68d3fd30-acce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:91:07:3b:03:12:33:cb:b6:2e:34:5a:55:
cb:61:3a:c5:11:99:32:fc:40:85:b0:e2:8a:e9:b6:
91:c2:12:e1:dd:13:77:60:08:e6:aa:dc:22:50:30:
3c:83:cf:c1:ba:72:0a:dd:d8:6d:45:57:fe:fe:e5:
a6:ea:41:7a:07:77:37:fb:ba:6a:d3:d6:16:fb:a2:
21:45:6c:45:30:41:8b:6c:74:87:6a:e5:d0:1a:af:
91:07:b3:c1:b3:b1:e3:65:7f:48:a9:69:39:63:09:
ae:33:33:05:37:1f:ef:17:e7:ee:0e:a9:83:8b:1a:
13:08:ca:50:43:a9:7e:c0:8c:1d:bc:fb:ff:b4:13:
b5:59:00:42:eb:d2:6e:8d:84:e1:24:fd:71:3f:79:
b5:4c:cf:2e:67:db:a2:b5:a8:5d:c5:32:44:0e:17:
92:55:3c:6e:10:c8:e0:ef:e8:fd:a0:f0:38:2f:b2:
3f:32:a3:47:65:1f:7f:03:ac:d7:0f:54:1c:fb:1d:
cb:5d:49:3c:8c:6f:f2:6a:50:84:00:bf:2f:dd:da:
8e:ce:b0:10:e2:8a:51:13:53:fa:d3:5b:3b:cf:9c:
60:6a:c4:cf:67:c2:0d:9a:87:87:45:38:2e:61:83:
08:1b:76:a6:47:cb:51:14:ad:1a:5b:03:02:2b:67:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0D:6E:3F:A2:C8:AE:29:8F:89:C1:C2:4D:17:3F:21:8F:2E:9C:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0814ED6E995111F0B6E2F3DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
154.196.214.0/24
154.206.11.0/24
154.208.88.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:a8:a6:38:d3:85:a2:e7:c5:e1:2d:0c:e8:53:e9:87:b0:70:
29:00:26:e7:18:f8:b9:58:b6:ee:6b:6c:92:ab:ce:71:34:23:
a8:ce:23:7b:af:e0:53:83:4f:c3:26:7f:c0:ef:3a:07:05:4e:
6f:2d:b0:36:f2:53:b1:90:57:89:86:9c:b6:14:02:a2:3d:c5:
a2:9c:2e:c2:59:7f:33:9b:58:61:e1:3a:10:e1:95:11:58:51:
70:2c:12:33:58:ec:6e:b5:2d:a9:71:4b:81:04:79:56:3d:c7:
88:8b:5f:f2:2f:a3:42:5f:55:4c:a8:bf:45:0a:3e:db:bd:65:
9b:f5:22:d0:9d:02:31:90:c2:97:d2:89:d0:aa:38:0a:d0:af:
2e:3d:67:45:54:2e:a1:4c:6f:c2:f6:08:e2:80:89:be:36:4f:
f6:65:43:e9:7c:83:b7:39:b9:04:24:2e:cf:3d:66:9f:38:9d:
ce:f1:7f:48:bc:4d:e9:16:6f:21:e2:3f:b2:3a:99:89:cf:14:
09:f3:b9:e7:f2:c6:00:f1:22:68:74:21:96:d4:5b:75:9a:77:
6f:41:0a:04:ab:1c:c8:36:56:18:ba:40:38:ac:1a:10:50:4f:
45:73:87:fa:2e:41:f3:bd:af:72:7e:e4:83:72:04:44:f7:fa:
05:03:dd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:31 2025 by rpki-client