Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41450872842E11F0A2C5B38BDAE4EC9C.roa
File: 41450872842E11F0A2C5B38BDAE4EC9C.roa (raw, json)
Hash identifier: oKEZOA8V1jWwRwD+5IyPDzNNpgU5tqjFIfrk0FqmBso=
Subject key identifier: CE:B1:46:96:48:49:00:EC:8B:38:76:88:BB:FD:FA:C9:17:44:0B:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41450872842E11F0A2C5B38BDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 16:44:25 +0000
ROA not before: Thu 28 Aug 2025 16:44:20 +0000
ROA not after: Wed 01 Oct 2025 16:44:20 +0000
asID: 44559
IP address blocks: 154.81.40.0/24 maxlen: 24
154.81.41.0/24 maxlen: 24
154.81.42.0/24 maxlen: 24
154.81.43.0/24 maxlen: 24
154.81.44.0/24 maxlen: 24
154.81.45.0/24 maxlen: 24
154.81.46.0/24 maxlen: 24
154.81.47.0/24 maxlen: 24
154.81.52.0/24 maxlen: 24
154.81.53.0/24 maxlen: 24
154.81.54.0/24 maxlen: 24
154.81.55.0/24 maxlen: 24
154.81.192.0/24 maxlen: 24
154.81.195.0/24 maxlen: 24
154.81.196.0/24 maxlen: 24
154.81.197.0/24 maxlen: 24
154.81.198.0/24 maxlen: 24
154.81.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104966 (0x19a06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 16:44:20 2025 GMT
Not After : Oct 1 16:44:20 2025 GMT
Subject: CN=68b08769-40b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:6a:68:9c:e9:67:ac:e4:87:c5:d5:9b:32:
0f:30:ad:d2:87:7b:47:11:8c:02:66:c2:1b:21:16:
6a:59:7b:31:77:d6:35:bb:2d:86:06:97:90:57:c5:
ff:b3:d1:48:46:c7:4e:b4:0f:4b:ca:80:cb:90:75:
e5:8a:ce:94:de:60:19:a2:fb:2c:21:60:ba:f5:a9:
c6:6b:1d:d0:f6:72:4e:99:fb:c0:05:53:d8:5c:95:
8b:9c:81:e2:6a:79:11:bd:fb:f7:43:12:05:81:76:
89:be:be:bf:1e:46:5e:58:d1:8a:b2:05:54:f6:d4:
bb:b9:cf:c4:54:80:67:32:34:75:9e:84:c7:3f:16:
73:30:7e:3e:f5:ea:a5:20:99:cb:cd:7f:74:56:85:
f1:7f:9f:b9:42:11:15:1c:6d:dd:41:0b:c7:3a:44:
3a:ad:db:71:6d:95:14:08:cc:44:94:66:25:41:89:
6b:94:00:53:6d:cc:39:f5:f8:83:7d:df:a4:c9:91:
7b:77:db:50:43:f3:46:24:aa:29:ef:cd:88:d2:3b:
8d:b1:9a:17:8b:b5:28:39:7e:da:94:fa:7f:e7:b2:
8a:ed:d9:40:06:ae:0b:0e:62:a1:6a:85:3a:55:b9:
53:b8:e3:3b:78:8b:e3:fd:e7:c2:93:16:ee:60:2c:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B1:46:96:48:49:00:EC:8B:38:76:88:BB:FD:FA:C9:17:44:0B:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41450872842E11F0A2C5B38BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.40.0/21
154.81.52.0/22
154.81.192.0/24
154.81.195.0-154.81.199.255
Signature Algorithm: sha256WithRSAEncryption
20:2c:90:44:3f:fc:61:67:71:18:62:b5:eb:39:ac:a7:dd:2b:
c5:97:d6:21:3b:4f:77:47:4f:79:d5:95:9c:e3:2a:44:e1:04:
cf:45:5a:88:96:0a:6a:38:ee:23:37:c6:23:0f:ca:57:5b:c9:
9e:22:d0:97:9d:a3:58:31:07:be:15:47:c8:15:4e:ce:a8:7c:
32:aa:b3:94:f3:53:48:cf:40:07:b0:62:bd:48:8d:a9:7c:6d:
30:23:23:e0:dc:c6:60:54:62:e0:5d:67:e4:71:45:e4:80:90:
b9:65:72:fb:3f:78:68:f3:01:f8:fa:0b:c9:6b:db:f2:85:66:
38:40:57:41:73:d6:41:04:48:b6:24:50:ce:cb:b3:f7:56:a1:
b8:0e:6e:38:49:a2:3e:b2:66:86:bd:15:d6:38:b5:0f:b3:76:
66:ce:72:37:fd:21:da:fd:d3:f1:28:cb:7a:15:fb:0c:23:33:
af:69:33:7b:83:bf:bb:de:6c:3d:15:5d:91:76:45:1f:2d:3c:
86:fd:56:9d:aa:83:a7:d2:e2:e5:0a:88:84:c6:c7:58:17:71:
f2:c7:69:ae:bc:43:40:e0:15:d9:dd:62:af:86:93:19:15:60:
b8:a2:0a:cb:df:9c:5a:7c:e1:44:9b:28:bf:3d:3d:3d:f1:03:
af:be:b6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:25 2025 by rpki-client