Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/462ADE2E837B11F0A3D3DEEEDAE4EC9C.roa
File: 462ADE2E837B11F0A3D3DEEEDAE4EC9C.roa (raw, json)
Hash identifier: xTBbTxzHHBaVqUk/5qk2fG6gR/516V4ZTpoJYN0Z8ho=
Subject key identifier: C2:B4:17:FF:FD:7B:71:04:92:CF:E6:78:FD:F9:72:32:0E:5B:BB:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/462ADE2E837B11F0A3D3DEEEDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 19:23:13 +0000
ROA not before: Wed 27 Aug 2025 19:23:08 +0000
ROA not after: Mon 03 Nov 2025 19:23:08 +0000
asID: 63139
IP address blocks: 154.94.69.0/24 maxlen: 24
154.94.70.0/24 maxlen: 24
154.94.71.0/24 maxlen: 24
154.94.72.0/24 maxlen: 24
154.94.73.0/24 maxlen: 24
154.94.74.0/24 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.88.0/24 maxlen: 24
154.94.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104703 (0x198ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 19:23:08 2025 GMT
Not After : Nov 3 19:23:08 2025 GMT
Subject: CN=68af5b21-4716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:25:f5:1e:64:65:c3:95:f4:76:08:d6:2d:
03:33:6c:71:26:56:9b:45:84:94:a7:a6:b1:3e:fc:
c1:ce:32:07:c7:bf:c8:12:64:84:7f:4c:b2:83:46:
ff:9c:e2:d3:7f:ad:0e:99:4e:a2:41:44:66:21:2e:
e4:af:9d:1d:4a:08:75:9b:0a:e0:d1:72:98:b8:09:
a3:c3:f8:f1:0f:a3:7b:d9:8d:45:03:7c:02:79:24:
d4:e8:dc:91:cd:54:a9:0b:2b:b2:a5:53:4b:5a:e8:
06:1d:14:a7:b6:b0:92:00:48:07:fe:05:32:33:a6:
1d:b9:6c:b0:d0:45:fa:b3:cc:ea:3e:af:69:a1:2d:
e7:fa:8d:18:82:50:75:21:89:6c:ae:3a:ad:f3:77:
33:b5:f9:c2:f8:16:51:fd:c7:2a:7c:4e:c0:5d:27:
24:39:86:26:28:47:21:0e:fe:b2:73:74:af:71:5f:
70:70:a3:5c:0b:87:e3:bd:f9:6f:59:77:31:92:f2:
0f:d2:45:07:8e:f3:88:93:77:36:ba:6c:ea:e3:d4:
ef:c8:83:03:55:2c:92:d8:b2:b4:91:ab:ea:09:6a:
ca:18:92:75:ec:6b:8d:7b:27:49:6d:a0:4f:b2:6b:
21:ca:af:78:f5:9f:5a:6d:3a:a2:c3:a2:20:7c:25:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:17:FF:FD:7B:71:04:92:CF:E6:78:FD:F9:72:32:0E:5B:BB:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/462ADE2E837B11F0A3D3DEEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.69.0-154.94.74.255
154.94.86.0-154.94.89.255
Signature Algorithm: sha256WithRSAEncryption
38:25:c3:c8:43:a2:86:c2:9e:6c:ee:09:17:b6:c3:39:cb:32:
e3:78:09:75:fb:24:ae:4a:24:63:0e:d6:22:4a:91:1a:9c:dd:
43:01:ca:44:bb:a6:2c:36:0f:7d:ad:23:4c:1a:aa:25:74:2d:
b9:3d:26:b0:76:10:7f:ae:ef:66:d1:d5:a2:47:11:fc:b4:05:
8c:a4:d9:af:d8:55:07:2b:80:47:15:a2:b2:b0:3f:20:c7:0d:
5f:17:dd:fd:70:ef:59:21:5c:a8:b4:6e:c0:74:22:3b:a2:da:
b5:b9:bd:d5:08:67:10:e0:da:83:1e:8f:1a:d9:39:7a:ac:b5:
e2:7d:4c:0f:0b:52:f7:1b:bb:5a:b4:a0:3f:8a:87:fd:75:3e:
2d:04:cd:21:2b:0a:64:bf:a6:da:93:9b:a5:0a:bf:21:0a:7c:
5a:86:91:af:3f:82:4b:2f:e3:ec:69:92:98:51:12:a7:8c:01:
2a:19:b0:5e:ba:5a:0b:b7:37:b6:34:3f:f4:4c:c5:01:be:9d:
d8:e2:66:3d:f7:58:37:24:1b:8e:47:55:2a:b0:72:1a:97:b6:
14:c8:0a:cc:7c:f7:2d:35:01:88:8d:15:b9:82:00:b9:32:41:
71:8c:cb:fe:bd:2c:f5:5d:24:44:45:90:98:96:30:62:70:6f:
15:30:e7:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:36:10 2025 by rpki-client