Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6213C88A8A4711F08A3691CADAE4EC9C.roa
File: 6213C88A8A4711F08A3691CADAE4EC9C.roa (raw, json)
Hash identifier: tT+ykCpQ1+JwoHHSslD0of3ve3UGpSX9kXMBTdltWjI=
Subject key identifier: 6C:2D:0E:43:EA:8A:5B:AB:FB:1D:68:05:B7:4E:A4:4C:C0:9F:A1:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6213C88A8A4711F08A3691CADAE4EC9C.roa
Signing time: Fri 05 Sep 2025 10:59:24 +0000
ROA not before: Fri 05 Sep 2025 10:59:19 +0000
ROA not after: Fri 05 Dec 2025 10:59:19 +0000
asID: 150008
IP address blocks: 154.206.31.0/24 maxlen: 24
154.209.252.0/24 maxlen: 24
154.209.253.0/24 maxlen: 24
154.209.254.0/24 maxlen: 24
154.209.255.0/24 maxlen: 24
154.210.213.0/24 maxlen: 24
154.210.224.0/24 maxlen: 24
154.210.225.0/24 maxlen: 24
154.210.226.0/24 maxlen: 24
154.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Sep 2025 00:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106002 (0x19e12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 10:59:19 2025 GMT
Not After : Dec 5 10:59:19 2025 GMT
Subject: CN=68bac28c-ed4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:ad:e0:37:b6:f3:3e:6a:bf:80:66:7a:b2:
3f:47:6c:ed:d4:5b:83:4a:db:56:a6:ca:96:3f:ed:
94:2d:6b:b8:a4:c9:c8:13:59:76:6b:2f:76:18:da:
76:5a:d4:78:dd:52:4e:0e:a9:a1:6a:32:46:c2:73:
9e:17:f8:06:95:28:a9:67:eb:c0:c2:d0:cb:ed:41:
17:26:56:91:f5:9f:b5:e4:1f:ef:1e:6e:3a:b1:15:
59:cb:bd:96:a9:b8:dc:74:56:a4:d8:71:68:4b:fb:
f7:c2:83:2f:da:13:4b:f5:3d:29:79:b0:49:6f:86:
0a:12:35:20:c2:0f:cc:19:ea:f7:36:58:7d:e7:0b:
30:85:10:11:4d:65:d3:ba:ae:8c:65:ed:98:2f:31:
d5:eb:81:4a:a8:85:0d:63:fe:62:c0:e1:1c:aa:a5:
55:9c:e2:fe:04:bd:2a:00:b1:e5:97:97:bd:11:c7:
5e:25:90:ae:0c:6f:85:05:e3:0f:44:4c:5f:10:7f:
21:4f:8f:bc:05:af:85:ef:64:58:26:9b:d4:1f:d8:
98:6b:04:88:d7:bc:53:56:af:05:ba:28:cf:fa:9d:
73:60:a2:5f:f3:74:a6:e1:6c:a5:6c:57:9d:62:aa:
8c:dc:d9:49:45:ea:e6:98:00:70:bd:17:78:7d:54:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2D:0E:43:EA:8A:5B:AB:FB:1D:68:05:B7:4E:A4:4C:C0:9F:A1:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6213C88A8A4711F08A3691CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.31.0/24
154.209.252.0/22
154.210.213.0/24
154.210.224.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:34:16:f8:a2:81:50:80:e4:b0:24:76:64:67:13:a2:da:11:
32:75:f5:d9:74:62:90:7a:c4:b9:ae:49:ea:0d:bd:84:51:4a:
9b:55:ef:dd:75:f1:22:bb:5d:99:5c:99:78:93:3f:0e:8b:1d:
25:ba:b0:55:08:10:22:a7:b6:35:25:88:cb:2c:22:38:a4:0e:
96:d8:6e:18:30:38:d2:b0:33:83:6e:a2:8f:48:73:a0:90:4f:
a6:e7:d2:10:33:21:13:40:76:4c:2b:cd:c8:7c:fb:f8:5e:36:
26:c4:3f:7c:6d:24:4b:ed:a3:47:d5:10:62:44:1b:2d:ad:29:
64:2c:8a:aa:cb:49:16:d6:be:7c:2f:e8:6c:da:b4:76:e4:d6:
ed:ce:99:f7:6a:6b:ab:94:66:e8:4a:26:d9:e1:35:b8:47:f2:
9f:7e:34:7c:48:86:5d:07:7d:2f:b6:bd:84:d9:cc:d6:e8:ad:
27:a8:92:86:2c:d7:99:f5:bd:7c:7f:4e:db:10:fa:88:75:9a:
21:0d:7f:c5:8c:87:9e:38:37:db:26:c3:dd:20:45:56:f4:04:
1d:bf:d7:74:48:f8:9e:b2:0e:7c:41:0e:2d:32:86:97:b2:a8:
dd:8b:71:75:27:03:ce:d0:8c:54:13:4a:ef:8c:13:c3:b2:fa:
5c:59:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 03:13:06 2025 by rpki-client