Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE1DB86841C11F0BBDB2497DAE4EC9C.roa
File: 1FE1DB86841C11F0BBDB2497DAE4EC9C.roa (raw, json)
Hash identifier: I84vffFneiLArIOUraDJzKaO003G+VS4oYjHcDBfjaw=
Subject key identifier: 24:4E:22:C2:D7:9D:35:CB:F3:80:DD:D0:20:EE:EB:EB:A6:E6:47:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE1DB86841C11F0BBDB2497DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 14:34:38 +0000
ROA not before: Thu 28 Aug 2025 14:34:33 +0000
ROA not after: Wed 01 Oct 2025 14:34:33 +0000
asID: 62240
IP address blocks: 154.194.36.0/24 maxlen: 24
154.194.59.0/24 maxlen: 24
154.194.67.0/24 maxlen: 24
154.194.109.0/24 maxlen: 24
154.194.110.0/24 maxlen: 24
154.194.111.0/24 maxlen: 24
154.194.117.0/24 maxlen: 24
154.194.207.0/24 maxlen: 24
154.195.113.0/24 maxlen: 24
154.195.141.0/24 maxlen: 24
154.195.142.0/24 maxlen: 24
154.196.68.0/24 maxlen: 24
154.196.70.0/24 maxlen: 24
154.196.76.0/24 maxlen: 24
154.196.77.0/24 maxlen: 24
154.196.78.0/24 maxlen: 24
154.196.79.0/24 maxlen: 24
154.196.80.0/24 maxlen: 24
154.198.63.0/24 maxlen: 24
154.198.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104936 (0x199e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 14:34:33 2025 GMT
Not After : Oct 1 14:34:33 2025 GMT
Subject: CN=68b068fe-dec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:23:fe:8c:d6:02:5a:a1:d7:c4:e1:de:34:
81:84:a0:a8:af:c7:77:51:cc:d4:55:b0:1d:58:93:
c4:da:90:a1:0c:74:e6:b9:14:54:fb:28:d6:9b:05:
58:12:a8:ca:a0:83:ee:9f:40:1e:b7:eb:76:b7:75:
57:5e:69:e6:c2:3d:c4:cd:7f:c7:10:0b:e2:fa:62:
7c:33:8e:e5:c0:14:37:7f:fe:b6:7d:cd:4b:bd:f3:
5a:d6:2e:65:af:a7:92:88:07:6f:4f:16:bd:41:fc:
be:25:f6:c9:1f:f2:72:20:8d:90:b6:e9:b5:9f:7f:
4e:8e:96:ab:ce:68:e7:52:0a:36:42:0f:36:81:97:
66:62:14:11:e2:35:ae:fc:8a:3c:34:55:7b:79:db:
f3:62:70:ba:bc:0d:dd:93:b4:77:64:7f:bc:37:a7:
16:d5:5e:a1:7d:0a:d1:47:5e:13:2f:90:9f:c4:0f:
8a:a1:d5:88:c5:9d:90:bf:e1:18:22:5b:ca:9d:cf:
48:80:f9:24:f3:21:1b:32:8c:2e:df:d7:05:9d:70:
ff:3a:f5:e9:92:b7:34:35:45:10:da:64:88:66:f7:
74:1a:fb:6f:79:49:94:92:43:ca:87:53:cc:ab:08:
0e:8a:85:4b:ec:b7:a7:5d:55:70:29:55:35:2f:14:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4E:22:C2:D7:9D:35:CB:F3:80:DD:D0:20:EE:EB:EB:A6:E6:47:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE1DB86841C11F0BBDB2497DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.36.0/24
154.194.59.0/24
154.194.67.0/24
154.194.109.0-154.194.111.255
154.194.117.0/24
154.194.207.0/24
154.195.113.0/24
154.195.141.0-154.195.142.255
154.196.68.0/24
154.196.70.0/24
154.196.76.0-154.196.80.255
154.198.63.0/24
154.198.191.0/24
Signature Algorithm: sha256WithRSAEncryption
28:35:3d:d5:2b:1a:9a:63:8b:62:1a:b4:53:68:20:9a:5c:79:
8d:ac:80:5e:3a:6e:ae:f5:7c:28:13:4c:6a:08:65:8c:78:bd:
3a:e7:1b:34:3f:49:e1:48:3c:c2:28:14:a4:6d:dd:cf:2f:2d:
4d:c3:64:de:cc:73:77:13:c0:d8:b3:f5:74:b6:36:b1:b4:0c:
ea:a7:02:16:56:32:03:b3:1b:5e:b0:98:37:99:58:54:75:9f:
19:14:f2:bf:5f:f1:4c:99:cf:fc:b4:b6:f0:1f:82:ab:ff:68:
c0:ac:07:16:09:c7:e2:97:24:3e:a3:1c:9d:2c:ad:c7:25:61:
c2:16:a1:eb:6b:2d:86:8a:7a:46:3c:b1:99:c5:99:4e:3f:a4:
bb:83:ad:65:50:8d:e5:9b:ce:2e:3c:79:c0:0f:09:e9:30:07:
90:c7:83:37:f2:c3:a9:5a:71:7a:ea:08:a2:a5:e4:fb:c9:36:
d6:62:c3:46:e4:f9:3b:69:70:57:50:6c:94:d1:e1:d8:0e:30:
50:9b:cc:c4:0e:35:10:2a:a8:f4:ee:5b:17:56:a6:23:33:72:
fd:e1:86:67:cc:c5:3b:1f:bd:2f:64:84:df:30:87:8d:80:c0:
4d:2a:86:6b:c0:8b:3e:c3:33:1f:53:2a:e5:fc:7e:e4:2a:dd:
40:e8:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:22 2025 by rpki-client