Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37004E8484AC11F0B39138CADAE4EC9C.roa
File: 37004E8484AC11F0B39138CADAE4EC9C.roa (raw, json)
Hash identifier: s0xSoL8cexHkSmxULXXqW8MTZ8RSSNAvDguQvidJLqw=
Subject key identifier: 8F:25:86:AE:DB:F8:F5:4C:AD:2F:D9:94:4D:F0:C5:38:6E:94:87:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37004E8484AC11F0B39138CADAE4EC9C.roa
Signing time: Fri 29 Aug 2025 07:46:05 +0000
ROA not before: Fri 29 Aug 2025 07:46:00 +0000
ROA not after: Sun 05 Oct 2025 07:46:00 +0000
asID: 20326
IP address blocks: 154.85.123.0/24 maxlen: 24
154.94.33.0/24 maxlen: 24
154.94.38.0/24 maxlen: 24
154.94.41.0/24 maxlen: 24
154.94.46.0/24 maxlen: 24
154.94.50.0/24 maxlen: 24
154.94.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105020 (0x19a3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 29 07:46:00 2025 GMT
Not After : Oct 5 07:46:00 2025 GMT
Subject: CN=68b15abc-5db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:d0:fe:33:f2:7b:42:27:de:bd:c5:b5:ae:
fc:3d:e1:da:4f:2d:49:88:fe:37:6f:07:d3:22:7f:
86:eb:ff:34:a6:3e:1f:e6:04:37:0b:f3:8b:57:e9:
5d:62:2d:64:fb:ba:f7:e7:d5:24:83:2a:a8:50:ad:
d2:2e:88:ce:ce:7e:61:85:2b:2a:30:2c:9c:ff:c6:
d1:6a:11:98:63:20:6b:a2:c9:1c:80:7d:10:99:d0:
7f:86:a1:0e:7c:56:99:87:9b:6e:58:92:4b:97:18:
b7:bc:4c:68:99:78:b1:b2:71:59:26:d4:2e:f7:8f:
cd:31:d2:51:06:6b:dc:df:ce:f3:6c:1b:d1:98:c1:
c2:77:d0:8c:5f:28:a1:3e:c3:3a:d6:8d:ef:d9:81:
c0:98:78:09:f4:bb:bf:bf:88:4f:14:1d:01:b8:3c:
65:d8:36:b1:55:2f:b2:d5:4e:23:a9:cf:ac:e8:50:
19:fe:e6:ab:4b:66:4c:48:ca:68:f4:d9:ad:52:8a:
35:9d:aa:41:05:73:00:b5:48:23:01:58:6e:a4:28:
a0:b8:0e:a2:72:94:91:04:b2:82:6c:5a:dc:07:b7:
8f:1e:60:12:f4:0f:fb:81:df:9d:5c:d2:28:0d:81:
94:36:fc:56:15:f8:89:63:93:fe:db:60:60:6b:f8:
33:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:25:86:AE:DB:F8:F5:4C:AD:2F:D9:94:4D:F0:C5:38:6E:94:87:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37004E8484AC11F0B39138CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.123.0/24
154.94.33.0/24
154.94.38.0/24
154.94.41.0/24
154.94.46.0/24
154.94.50.0/24
154.94.60.0/24
Signature Algorithm: sha256WithRSAEncryption
18:64:bc:70:7d:0d:58:95:6b:b0:72:e7:ce:6e:03:59:f2:fa:
8a:a2:7c:97:fd:46:d3:71:aa:4d:8b:69:37:2f:cd:c5:1f:e2:
6d:f8:e9:5e:ce:41:69:db:bb:ba:91:4e:21:5f:05:bf:16:d1:
6f:2b:24:79:74:b3:d0:e2:9c:3c:61:58:f5:f8:e8:94:ea:26:
be:0f:a5:61:e8:9b:69:8a:16:a1:58:28:a9:18:54:9f:ec:d8:
9c:c3:11:23:49:46:9e:74:cf:b3:31:7f:6e:ac:44:ce:6f:9c:
25:02:19:fa:2c:31:c0:f2:c6:43:e4:44:64:fa:d0:e1:1d:2b:
98:94:eb:2b:21:9c:38:18:9b:0a:97:89:e0:3c:6e:62:1e:ab:
4c:be:7b:03:7e:ee:f1:93:dd:20:ea:45:83:5b:d7:97:d2:48:
ff:b8:02:5d:19:eb:c6:c8:e1:5f:04:a2:6c:4f:94:2a:08:c1:
1e:a8:5f:d4:6d:b4:4b:6a:97:fc:c3:64:29:fc:e5:81:81:71:
60:cb:71:ca:d6:06:59:27:4d:45:4d:b1:13:b7:84:90:b7:76:
12:a4:73:8e:da:62:50:25:b2:9f:9f:3e:f8:a7:34:93:d5:12:
a4:63:7d:c3:79:71:25:27:96:d2:91:57:e2:d1:00:b5:9d:3e:
6d:f8:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:01 2025 by rpki-client