Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33FEF5B2825611F0B09B797CDAE4EC9C.roa
File: 33FEF5B2825611F0B09B797CDAE4EC9C.roa (raw, json)
Hash identifier: rjZfxEPUirH77daeoMN8Pfjk58PQrMnaaR4zoYhGJBo=
Subject key identifier: 52:D7:B0:42:C9:48:23:A8:55:96:92:1B:9B:07:78:07:E0:5C:96:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0197AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33FEF5B2825611F0B09B797CDAE4EC9C.roa
Signing time: Tue 26 Aug 2025 08:25:20 +0000
ROA not before: Tue 26 Aug 2025 08:25:16 +0000
ROA not after: Wed 01 Oct 2025 08:25:16 +0000
asID: 214143
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104366 (0x197ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 08:25:16 2025 GMT
Not After : Oct 1 08:25:16 2025 GMT
Subject: CN=68ad6f70-1de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:f9:96:36:da:36:46:77:e7:e7:64:09:05:
bd:d6:de:37:79:f6:df:2a:57:a2:11:3a:df:01:2c:
47:8b:ad:a4:fc:4c:22:6d:53:44:1b:02:91:c8:c5:
ae:50:b3:0a:1a:2a:4a:e4:0c:0b:06:a8:41:24:cf:
87:ad:9b:3e:ce:b7:8a:f9:07:56:a6:8a:85:e1:b1:
97:20:a8:f7:49:5c:42:c4:e5:44:6e:96:30:af:a2:
9c:ac:74:46:6e:c8:19:8f:38:e9:c6:10:79:80:5a:
2f:51:e3:22:30:87:3e:77:4d:da:34:7f:4b:59:0c:
03:93:b6:5b:48:78:5b:dd:a9:5c:6c:c7:6c:3f:a4:
fa:f0:ff:8e:bd:bf:f7:b8:08:ce:db:76:cc:e6:0c:
60:92:3d:42:df:18:58:8f:be:9f:1e:0e:d4:7b:02:
9f:5d:cc:7a:49:28:3c:53:69:c4:3e:4c:05:65:97:
40:63:4e:62:89:94:4c:09:e8:f7:06:b4:eb:b7:7a:
5f:13:5c:be:fa:e3:2f:86:42:09:23:94:17:f2:a7:
86:22:b6:7e:b2:17:3d:21:30:4e:36:48:36:5b:73:
f1:f6:31:7a:46:0d:3d:d4:4f:d4:39:20:c7:09:60:
18:4e:00:f4:72:fd:6d:3f:e9:ce:26:3f:28:cf:bb:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D7:B0:42:C9:48:23:A8:55:96:92:1B:9B:07:78:07:E0:5C:96:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33FEF5B2825611F0B09B797CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
Signature Algorithm: sha256WithRSAEncryption
9e:dd:ea:91:df:5a:d1:1b:d7:56:a8:79:e9:e7:0d:44:e4:72:
c8:74:98:0b:d1:94:8c:09:c0:93:83:da:ef:2e:6d:2a:be:ac:
eb:15:34:ff:d6:58:33:f7:e0:87:1b:9e:80:05:3b:ee:81:6f:
83:c5:ef:c8:a0:49:60:5c:51:cf:ec:77:6d:51:91:1b:e7:15:
74:c0:eb:97:a4:8a:2f:d0:52:2f:59:fd:75:eb:ff:64:ff:d9:
d3:5e:19:c7:8f:0e:17:6f:a0:f0:67:49:ce:87:b4:26:d2:30:
51:10:56:39:f9:96:a7:9e:64:76:f3:3e:e3:9b:14:5b:6d:33:
0e:e6:ae:f0:16:d4:2d:e8:e3:d3:fa:47:80:f1:3b:fb:f3:e8:
17:af:18:c2:eb:39:96:d3:3c:a7:43:d4:45:bb:cc:bf:d0:2e:
55:bc:7d:7e:15:d0:46:a6:9e:26:ee:bd:42:ca:9e:08:cb:64:
c1:ba:99:d8:55:e2:cd:13:85:ef:82:c9:69:f1:aa:21:38:43:
6d:c7:36:33:f6:74:48:de:71:25:1c:df:c6:28:15:8c:75:2b:
31:52:55:cd:cf:e5:0d:b3:82:69:ab:13:7a:24:30:94:06:84:
61:20:6d:34:94:c6:af:3c:b4:7b:12:fc:4c:a5:fc:ed:12:1b:
66:35:5e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:34 2025 by rpki-client