Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C49A7C836B11F08B3B7B89DAE4EC9C.roa
File: 25C49A7C836B11F08B3B7B89DAE4EC9C.roa (raw, json)
Hash identifier: e7xVcwYbJvijBG1KHrn5n7+2i8C7h7s4XG6nq7zbJ2w=
Subject key identifier: D0:D8:8A:18:97:B6:F1:BC:BE:93:DC:E3:98:01:F5:61:3A:14:E1:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C49A7C836B11F08B3B7B89DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 17:27:47 +0000
ROA not before: Wed 27 Aug 2025 17:27:42 +0000
ROA not after: Wed 15 Oct 2025 17:27:42 +0000
asID: 63139
IP address blocks: 154.203.182.0/24 maxlen: 24
154.203.183.0/24 maxlen: 24
154.203.184.0/24 maxlen: 24
154.203.185.0/24 maxlen: 24
154.203.186.0/24 maxlen: 24
154.203.187.0/24 maxlen: 24
154.203.188.0/24 maxlen: 24
154.203.189.0/24 maxlen: 24
154.203.190.0/24 maxlen: 24
154.203.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104683 (0x198eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 17:27:42 2025 GMT
Not After : Oct 15 17:27:42 2025 GMT
Subject: CN=68af4013-712a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:e0:b1:36:d8:b8:30:30:c6:34:78:b7:ad:
f0:9a:46:e1:72:97:8f:f8:53:8e:96:d8:5a:db:72:
13:49:d8:2a:13:1e:14:e8:ae:e6:5b:87:c4:01:d8:
44:46:a3:fd:3b:61:41:4c:d8:42:18:c8:31:f4:08:
12:14:39:f5:8f:61:14:60:61:1a:19:ad:c2:95:74:
8d:0e:73:d1:15:c6:b3:94:49:46:f4:ae:2e:3c:25:
61:2c:35:8f:a2:aa:ca:7e:00:64:8e:2a:18:6b:af:
ee:8d:1d:c7:96:06:96:08:ed:3b:ca:17:5f:64:b5:
31:1d:dc:5e:1d:a3:d9:d4:cc:ad:69:97:1a:a4:15:
18:28:aa:57:5a:14:f3:57:19:c9:a5:3f:51:65:6e:
fa:b7:a6:dc:3e:68:9c:ee:98:d9:a4:a2:1a:6f:1a:
cd:13:85:71:29:cc:09:6b:56:e5:10:85:a0:13:b4:
8c:27:5f:9c:01:41:e5:d8:c4:04:bd:0e:e0:57:63:
a3:50:a9:3e:17:95:af:67:e7:f6:4b:1c:3d:00:ca:
45:b9:0b:22:3c:a2:19:1f:54:6a:92:8b:fe:f4:d8:
98:91:0f:e9:8e:ce:13:9b:4f:b2:de:07:e4:e3:0c:
b2:0b:a5:eb:f5:9d:b5:ff:ed:6b:af:a2:55:3c:eb:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D8:8A:18:97:B6:F1:BC:BE:93:DC:E3:98:01:F5:61:3A:14:E1:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C49A7C836B11F08B3B7B89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.182.0-154.203.191.255
Signature Algorithm: sha256WithRSAEncryption
2c:56:ce:79:e8:35:e4:f5:8f:eb:a9:af:15:ff:d5:f5:92:d3:
67:22:37:94:c9:c3:5f:c2:83:72:08:a5:7d:bc:52:f6:b3:c4:
28:77:8f:ec:af:81:3c:c4:4b:50:46:f3:4e:d2:81:50:53:32:
7d:64:94:5b:3b:c8:99:c4:25:b5:c6:dc:23:e8:25:fb:f0:b6:
4d:a4:d0:b8:0e:e9:68:05:b5:57:0c:78:5e:6a:ff:0a:7c:08:
de:f3:bc:a0:6a:89:58:2b:51:f3:eb:33:84:d1:60:fe:4d:b5:
26:68:df:2d:5f:3c:ea:eb:b8:50:cf:42:17:00:3f:12:d4:f6:
4f:f1:61:a1:98:a3:89:60:9d:61:d0:5b:8a:97:82:a2:4f:29:
8f:b1:15:34:97:31:57:d2:1c:f0:8d:db:a5:ab:ca:51:f9:83:
54:3f:d6:0f:10:a4:6c:91:48:81:18:f9:f3:96:8b:d0:fd:0d:
9a:b1:b8:5c:2c:5d:17:c5:96:fc:39:23:6b:8f:28:d1:c5:a6:
3a:b3:b1:94:47:c1:8e:91:3e:b8:0b:d6:36:87:88:92:31:15:
4d:be:30:1c:96:a0:1b:1e:67:a4:22:3a:6b:69:05:44:5b:60:
fd:b6:34:41:2a:96:48:d1:7d:4b:5e:14:a6:e9:2c:6f:5b:8a:
aa:33:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:02 2025 by rpki-client