Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DB4A010843A11F08888D6D6DAE4EC9C.roa
File: 0DB4A010843A11F08888D6D6DAE4EC9C.roa (raw, json)
Hash identifier: OolMGWfoQxSLYhuzdlJTr7DIAXiOEgu8NkOMGsWqtT4=
Subject key identifier: 1B:7E:4B:03:3A:29:F6:DC:E2:A6:9C:28:A7:9F:85:54:94:E6:5C:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DB4A010843A11F08888D6D6DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 18:08:52 +0000
ROA not before: Thu 28 Aug 2025 18:08:47 +0000
ROA not after: Mon 06 Oct 2025 18:08:47 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.218.26.0/24 maxlen: 24
154.218.31.0/24 maxlen: 24
154.219.237.0/24 maxlen: 24
154.219.238.0/24 maxlen: 24
154.219.239.0/24 maxlen: 24
154.219.240.0/24 maxlen: 24
154.219.241.0/24 maxlen: 24
154.219.242.0/24 maxlen: 24
154.219.243.0/24 maxlen: 24
154.219.244.0/24 maxlen: 24
154.219.248.0/24 maxlen: 24
154.221.50.0/24 maxlen: 24
154.221.51.0/24 maxlen: 24
154.222.200.0/24 maxlen: 24
154.222.201.0/24 maxlen: 24
154.222.202.0/24 maxlen: 24
154.222.203.0/24 maxlen: 24
154.222.204.0/24 maxlen: 24
154.222.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104980 (0x19a14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 18:08:47 2025 GMT
Not After : Oct 6 18:08:47 2025 GMT
Subject: CN=68b09b34-e2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:34:90:e2:60:a9:d8:45:5d:f8:61:57:f0:
54:09:21:d9:68:34:aa:b9:d2:11:71:b8:b5:0b:64:
c9:6f:79:74:fe:b4:5d:b9:ed:51:6d:2a:4d:17:23:
19:94:b9:fd:c4:7c:16:1f:b9:41:ca:f8:a8:1e:9e:
28:7c:0f:39:fb:e1:b4:72:5f:28:41:5e:29:ee:3e:
4a:16:1d:f8:97:9c:c9:96:32:78:4c:92:a2:53:54:
b4:a0:0b:b4:34:ba:8c:50:ed:f2:41:cd:a0:f9:16:
4a:76:f9:19:ca:01:15:f4:55:93:63:4d:2f:c6:5c:
43:af:f4:1a:d0:0f:34:47:07:a3:c2:fa:f2:ce:7f:
92:d4:75:ac:2e:92:fa:33:40:65:13:5e:3d:ee:42:
df:d4:ac:71:e5:b6:29:e6:00:4d:03:e6:25:eb:b8:
20:51:ae:45:fc:57:6f:20:a7:5d:c6:27:30:c7:0c:
4e:a2:bc:66:75:dd:02:4c:e7:62:7e:e0:4c:d3:1c:
a3:29:5e:a9:c2:27:16:71:cf:b9:7a:42:f0:39:ae:
51:93:2c:e6:26:0e:b6:c0:c3:12:a1:3a:ef:e4:3e:
fc:86:6c:52:87:94:bd:1e:8f:76:7e:ef:7e:a3:6f:
00:91:31:00:c4:0e:fb:b1:4b:3d:46:2b:28:4c:79:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7E:4B:03:3A:29:F6:DC:E2:A6:9C:28:A7:9F:85:54:94:E6:5C:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DB4A010843A11F08888D6D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0-154.218.26.255
154.218.31.0/24
154.219.237.0-154.219.244.255
154.219.248.0/24
154.221.50.0/23
154.222.200.0-154.222.205.255
Signature Algorithm: sha256WithRSAEncryption
55:ef:3f:3f:ac:1b:8f:aa:49:5c:b5:ee:70:23:50:73:a1:58:
11:2f:b6:24:79:bc:c9:cc:c7:85:c6:1d:f1:ae:5e:62:8f:96:
9a:6c:7c:67:43:79:87:53:f7:69:32:58:1f:e5:25:8b:eb:79:
21:19:d4:81:0c:b6:70:40:fa:e0:c4:72:8e:5e:26:70:f2:d1:
9f:20:58:10:5b:e0:fd:2b:03:a9:6b:cf:e4:03:0e:93:ab:18:
d8:20:a6:c7:d1:5a:07:ed:5e:96:61:4f:b2:72:ac:6c:d1:69:
cf:6f:ab:0a:ab:47:6f:fe:80:e4:64:74:5b:d7:84:96:a3:33:
f4:62:b9:51:b7:df:f5:61:db:ba:c9:11:50:3b:8e:c2:a4:8b:
0a:9e:fc:bf:c4:b9:c4:eb:9b:45:7e:6e:e1:14:ec:01:55:bf:
28:b6:b4:2e:f7:93:0c:28:f5:b2:93:36:a8:7e:94:3b:d3:6b:
2b:b1:ad:75:3f:93:f2:f1:0f:45:e0:34:cc:c9:d7:4f:d7:d6:
81:c6:1a:c0:4a:76:67:53:24:d8:ee:d3:21:bd:fe:70:74:f7:
8c:61:19:62:23:1c:e8:42:74:0c:1f:38:e1:ce:97:a2:b8:ed:
04:f6:8d:fc:ba:57:ae:78:45:42:d6:68:93:8a:58:fa:41:8b:
e2:75:1c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:48:27 2025 by rpki-client