Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ED9F4C0842B11F086B742F6DAE4EC9C.roa
File: 2ED9F4C0842B11F086B742F6DAE4EC9C.roa (raw, json)
Hash identifier: FVMUbGegGRrZhSHGFWeXyfgb8jED4WurukXknfsEdO4=
Subject key identifier: D1:8A:8F:53:35:B2:B1:4B:32:3F:5E:77:EF:AF:22:4F:C7:B5:29:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ED9F4C0842B11F086B742F6DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 16:22:26 +0000
ROA not before: Thu 28 Aug 2025 16:22:20 +0000
ROA not after: Mon 06 Oct 2025 16:22:20 +0000
asID: 44559
IP address blocks: 154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
154.209.197.0/24 maxlen: 24
154.209.198.0/24 maxlen: 24
154.209.199.0/24 maxlen: 24
154.209.200.0/24 maxlen: 24
154.209.204.0/24 maxlen: 24
154.209.207.0/24 maxlen: 24
154.219.73.0/24 maxlen: 24
154.219.74.0/24 maxlen: 24
154.219.76.0/24 maxlen: 24
154.219.77.0/24 maxlen: 24
154.219.78.0/24 maxlen: 24
154.219.79.0/24 maxlen: 24
154.219.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104960 (0x19a00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 16:22:20 2025 GMT
Not After : Oct 6 16:22:20 2025 GMT
Subject: CN=68b08242-7a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:31:f5:9f:96:87:d3:ba:a5:8c:0f:67:28:
c7:b5:5b:89:03:1f:72:b4:90:44:09:66:e9:41:fe:
8b:53:21:1e:7e:50:98:42:46:d2:3a:2a:8d:a0:d3:
2f:60:d7:76:e0:8a:ef:b5:7c:08:d2:b8:69:f1:78:
39:0c:e0:09:66:ad:62:cc:53:60:c2:4a:36:0f:83:
f0:50:03:da:7e:7a:e7:1a:58:06:90:3f:09:8d:a5:
3a:f0:64:2b:9f:19:1d:e6:b6:a3:c3:be:4b:d8:21:
09:c8:03:e5:9b:0a:5c:af:e4:65:21:54:9d:bd:a9:
8d:3b:05:6f:c4:95:de:94:85:d7:b3:d8:1e:11:52:
cd:be:ae:be:38:dc:cc:1b:f9:d2:93:a7:d1:d6:49:
65:90:26:93:51:95:55:c5:ce:33:4c:bc:a9:83:0f:
e1:bc:9e:2a:c8:9c:aa:cd:d4:bd:89:49:25:3e:ff:
ad:57:75:cf:e9:19:ca:6c:69:2e:c6:ba:73:64:29:
05:c2:ff:f5:5a:50:c3:88:10:37:27:97:b0:7a:1c:
02:d7:75:83:18:1d:bd:a1:18:c4:ff:c0:2b:48:70:
f2:ee:64:ff:fd:4f:6e:41:77:c8:66:ca:e8:ef:55:
d1:22:ec:93:db:24:8d:7f:7a:56:f2:df:d5:d7:e6:
66:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:8F:53:35:B2:B1:4B:32:3F:5E:77:EF:AF:22:4F:C7:B5:29:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ED9F4C0842B11F086B742F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.144.0/23
154.209.152.0-154.209.154.255
154.209.195.0-154.209.200.255
154.209.204.0/24
154.209.207.0/24
154.219.73.0-154.219.74.255
154.219.76.0-154.219.80.255
Signature Algorithm: sha256WithRSAEncryption
35:32:cf:81:10:9c:7c:e2:0b:93:c1:bc:57:55:e6:33:d5:c0:
d2:a6:e0:4b:4d:10:7b:57:c4:c0:7c:64:79:93:77:9c:08:dd:
5f:e3:67:d9:6e:6a:9d:3b:38:5f:49:73:f2:27:9b:1c:49:02:
75:00:2a:bd:69:59:9f:5f:07:f8:b7:37:7b:fb:bc:cb:16:c4:
c7:6c:49:b4:66:cc:da:75:b1:20:af:6f:96:fd:30:81:41:4c:
09:d4:5e:47:f1:ec:dd:78:55:9a:2d:19:45:9a:da:77:a4:de:
e3:3d:c1:6d:c5:6e:2a:de:6e:81:25:c2:db:be:67:ee:43:90:
c0:32:a1:d5:82:4e:ce:e6:a3:e3:19:6a:14:5b:93:4c:29:e6:
24:35:41:ea:78:8e:a2:51:ac:ef:cf:c6:16:3d:4e:7c:c8:26:
b6:e2:fb:c1:8d:cd:47:c7:b5:78:b4:90:59:38:ad:ae:73:6b:
21:1b:d8:46:d6:6b:2d:24:db:45:75:87:26:1e:e2:3b:5d:24:
8e:23:7c:5f:23:ef:79:d0:fc:77:c9:d9:63:73:26:ab:1c:be:
cc:9b:e9:d6:55:17:c9:74:ac:7a:0b:7c:67:b6:8a:b4:fc:46:
ff:7d:42:ba:bd:a0:23:49:9d:9a:a1:92:96:82:f7:dc:ad:02:
04:dd:74:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:48:29 2025 by rpki-client