Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36C2056088B811F0BBC879A1DAE4EC9C.roa
File: 36C2056088B811F0BBC879A1DAE4EC9C.roa (raw, json)
Hash identifier: wCtu2OmpzPuXwX2jswSW0TAg2RtjFPNfdfref3N7+FQ=
Subject key identifier: F4:A0:73:C5:FE:F0:85:6F:26:59:20:21:FC:21:0B:1A:95:CE:A8:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36C2056088B811F0BBC879A1DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 11:22:03 +0000
ROA not before: Wed 03 Sep 2025 11:21:58 +0000
ROA not after: Fri 10 Oct 2025 11:21:58 +0000
asID: 203020
IP address blocks: 154.217.62.0/24 maxlen: 24
154.217.63.0/24 maxlen: 24
154.217.64.0/24 maxlen: 24
154.217.65.0/24 maxlen: 24
154.217.66.0/24 maxlen: 24
154.217.67.0/24 maxlen: 24
154.217.68.0/24 maxlen: 24
154.217.69.0/24 maxlen: 24
154.217.70.0/24 maxlen: 24
154.217.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105720 (0x19cf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 11:21:58 2025 GMT
Not After : Oct 10 11:21:58 2025 GMT
Subject: CN=68b824da-7255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b1:f7:46:67:ff:80:34:ca:df:0a:f5:28:aa:
6f:e5:62:69:1a:aa:e5:ed:b6:f8:37:c4:2a:f4:14:
75:bb:0d:59:53:9c:db:85:a8:e6:01:57:66:c0:29:
cd:ef:76:79:01:f5:ed:d4:e1:47:3f:bc:36:3c:d6:
64:8b:78:b5:2e:65:12:c0:fc:e5:35:10:0f:8d:09:
4f:43:a5:86:3b:70:c5:a0:72:c9:fc:51:28:a1:7c:
2a:d4:2a:24:3a:e4:4a:ca:c0:f5:33:33:b7:6a:8c:
22:c4:ba:69:1f:be:1f:61:b1:02:00:39:a3:1c:7b:
95:7f:70:f2:8a:8c:e5:bc:2b:22:6e:df:88:54:85:
c3:95:dd:7a:c6:dc:64:37:08:1a:ce:34:41:d0:bf:
a9:77:4b:84:75:50:f1:72:c5:b2:53:36:71:6a:37:
b5:95:b7:e1:05:38:cc:63:a2:aa:68:6a:2a:ab:70:
c8:a0:ba:7a:f7:34:71:25:d4:e3:47:8c:28:87:de:
d6:67:aa:64:a6:02:67:be:e0:ba:a7:46:88:33:09:
82:3a:a3:08:94:57:78:6b:f0:70:e7:5d:dc:34:9f:
39:12:4c:0f:ed:1c:d7:e4:09:e0:5a:2c:ff:f8:43:
46:ec:a0:97:e8:b0:25:e6:cb:2b:de:a6:ba:3b:b7:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A0:73:C5:FE:F0:85:6F:26:59:20:21:FC:21:0B:1A:95:CE:A8:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36C2056088B811F0BBC879A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.62.0-154.217.71.255
Signature Algorithm: sha256WithRSAEncryption
13:4b:a9:c7:96:2a:fc:b5:99:6e:96:db:c4:88:63:b1:13:23:
7d:eb:e3:bf:1c:d4:4b:5d:5e:b5:87:4c:72:3c:67:a7:6c:22:
7d:6d:04:93:15:68:2e:78:ed:fb:6a:14:11:d8:14:bd:04:f6:
23:e7:ef:15:90:64:a7:ca:47:3d:41:b1:60:bd:9a:16:c4:0c:
d4:bf:94:1e:32:cd:88:bf:23:c1:24:5d:74:cc:54:44:00:7f:
b7:dc:0a:5c:86:37:47:10:49:7b:35:14:a8:bb:66:c3:28:f6:
be:59:ed:08:0a:46:2c:63:16:96:de:5d:cb:bf:7b:f5:a4:8c:
fa:b2:50:21:f6:11:c6:28:09:d0:17:a5:a6:86:01:60:e3:c1:
0b:7a:dc:4a:27:31:5b:1a:ef:e2:7e:6c:1f:7a:1f:60:e0:cb:
b5:6a:10:11:2b:bf:57:8b:cd:0f:74:29:4d:c2:61:58:47:67:
a0:8a:98:d9:df:ce:d5:db:2e:c1:49:5a:cf:d4:9a:53:a8:76:
94:c0:5d:11:f6:d7:d0:ca:9b:cd:23:ba:a2:31:50:ce:d8:ec:
b6:8c:12:0d:1d:83:f6:59:ea:6b:39:74:1c:55:19:9e:44:3d:
a4:8d:f4:0f:3a:0b:1f:6f:7c:f7:45:c1:69:72:c4:1a:90:32:
b8:a3:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:48:27 2025 by rpki-client