Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E8625C8831E11F080625699DAE4EC9C.roa
File: 3E8625C8831E11F080625699DAE4EC9C.roa (raw, json)
Hash identifier: uDCDWPrNXIq5OXCCDRVu4qCVkN6sDUWR7gQJK9AicmU=
Subject key identifier: DC:9F:0F:A1:A1:D6:CA:80:F1:54:86:E0:FA:D3:95:B1:BB:B2:70:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01985B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E8625C8831E11F080625699DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 08:17:17 +0000
ROA not before: Wed 27 Aug 2025 08:17:11 +0000
ROA not after: Thu 25 Sep 2025 08:17:11 +0000
asID: 54801
IP address blocks: 154.200.242.0/24 maxlen: 24
154.200.248.0/23 maxlen: 24
154.213.176.0/20 maxlen: 24
154.213.211.0/24 maxlen: 24
154.213.212.0/24 maxlen: 24
154.222.77.0/24 maxlen: 24
154.222.78.0/24 maxlen: 24
154.222.136.0/23 maxlen: 24
154.223.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104539 (0x1985b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 08:17:11 2025 GMT
Not After : Sep 25 08:17:11 2025 GMT
Subject: CN=68aebf0d-b572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5a:d1:07:f2:61:30:56:75:8a:52:f3:43:00:
4d:f4:96:ae:fd:db:db:a9:64:ff:bb:ed:0f:fe:13:
68:65:ed:de:d5:9c:62:80:ba:fe:8f:06:5a:db:b4:
dc:81:41:98:fc:43:14:ca:bf:ea:ad:af:c5:b6:10:
68:bb:7a:35:5a:9c:74:7c:8d:a4:c2:ad:9f:de:bb:
e5:9e:9e:fd:a5:07:be:83:e2:f1:e9:79:07:e6:f7:
b7:4b:25:59:24:e5:71:f6:4e:f0:88:45:ab:48:a3:
8b:7c:14:7e:d9:27:5c:98:5f:91:b8:33:43:76:62:
36:ad:06:55:0a:34:cc:f2:af:9c:3d:a5:44:01:5e:
b4:2e:fb:7e:83:7a:3c:ca:14:8d:fd:99:ce:16:59:
a3:2d:f8:b7:24:48:61:b8:4d:c2:96:b2:37:46:5f:
ba:a2:c1:b3:aa:8d:3c:37:ba:cb:0c:0f:8c:e1:9e:
cf:81:ce:1f:13:8e:e1:9b:07:4b:cb:23:89:86:28:
8d:74:d0:de:1d:fd:fa:d3:db:25:8a:ec:84:24:7e:
23:a8:1d:7d:d2:22:45:18:4e:85:51:3c:b3:b5:d8:
05:50:b3:59:07:3f:45:29:55:c3:44:35:38:79:68:
d3:09:44:0c:b3:74:c4:86:3a:dd:50:b5:ce:c1:6f:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9F:0F:A1:A1:D6:CA:80:F1:54:86:E0:FA:D3:95:B1:BB:B2:70:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E8625C8831E11F080625699DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.242.0/24
154.200.248.0/23
154.213.176.0/20
154.213.211.0-154.213.212.255
154.222.77.0-154.222.78.255
154.222.136.0/23
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:24:88:ff:d2:ed:21:b4:bd:fa:6d:45:58:87:f1:bc:b8:7c:
2e:8c:2b:66:1c:73:02:a3:f1:69:3c:9a:c3:95:70:8d:86:fa:
3b:fc:ed:2a:04:40:04:a9:7f:99:4a:fa:21:50:4a:4c:71:23:
b2:64:85:c1:2c:99:42:1b:69:f4:53:1b:12:54:80:50:09:4b:
83:5a:a9:2b:4f:12:70:1f:78:69:a4:00:e8:84:85:2f:82:b2:
05:4b:72:bb:d7:8c:1a:df:63:40:34:b0:8f:3c:5c:64:3c:87:
73:ff:07:08:0d:86:d4:12:a8:a2:8d:10:56:af:32:fe:f3:6c:
44:52:7d:79:f8:47:60:ec:59:bc:7f:d3:32:19:67:11:cc:16:
f1:bb:c9:06:7f:6e:35:0b:c1:36:a3:27:36:9c:96:1c:02:d1:
77:6d:69:6d:65:7f:5b:bf:6e:f8:75:53:1c:f4:1e:ce:2d:bf:
8c:32:06:78:81:24:75:19:bd:5a:b8:8e:30:1f:c4:8e:7e:9a:
e8:32:80:68:21:cc:96:4c:30:50:c9:fb:1d:ec:b3:35:3a:5e:
fc:26:1d:50:a2:79:23:d8:62:8e:c8:a4:08:f6:ff:2a:ce:d1:
1a:1c:5c:c0:bf:89:cb:df:21:db:e9:c0:ae:40:df:ab:6b:07:
c3:ac:be:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:15 2025 by rpki-client