Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/621A04BC871211F0879204ECDAE4EC9C.roa
File: 621A04BC871211F0879204ECDAE4EC9C.roa (raw, json)
Hash identifier: Xyy1HzbfPTV2vA61Flz5tmF5q2VBDIhpQD49lIEUc70=
Subject key identifier: 73:24:D9:D4:AB:A4:50:18:35:71:2C:24:F4:4B:B4:5A:02:88:20:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/621A04BC871211F0879204ECDAE4EC9C.roa
Signing time: Mon 01 Sep 2025 09:02:28 +0000
ROA not before: Mon 01 Sep 2025 09:02:23 +0000
ROA not after: Mon 01 Dec 2025 09:02:23 +0000
asID: 399077
IP address blocks: 154.91.117.0/24 maxlen: 24
154.91.118.0/24 maxlen: 24
154.91.119.0/24 maxlen: 24
154.91.120.0/24 maxlen: 24
154.91.121.0/24 maxlen: 24
154.91.122.0/24 maxlen: 24
154.91.123.0/24 maxlen: 24
154.91.124.0/24 maxlen: 24
154.91.125.0/24 maxlen: 24
154.91.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105287 (0x19b47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 09:02:23 2025 GMT
Not After : Dec 1 09:02:23 2025 GMT
Subject: CN=68b56124-ff9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:a0:94:e4:c8:26:e1:5d:b3:3a:1a:2a:4b:
d9:a0:49:f7:84:a3:f7:e8:d7:e1:13:9d:95:85:54:
8f:59:e1:7d:8c:b2:63:8b:e2:f6:66:ee:b8:23:7a:
9e:ce:58:9a:b7:10:49:e2:0d:42:99:7b:92:70:45:
f4:ab:c4:9f:45:98:71:a7:4f:9f:cb:19:ec:5e:26:
25:4a:22:d3:78:db:28:47:75:8e:bb:6b:2b:9d:bb:
0c:e6:f5:7e:3c:b5:25:75:64:90:9c:99:4d:9f:c4:
cc:02:b5:01:3d:c6:86:b8:d2:2b:c9:c1:b7:37:4f:
3d:61:f5:1e:f1:80:ab:8a:50:29:40:04:f6:1b:62:
d0:24:b8:11:d2:27:16:ce:67:e5:1e:fe:d7:f0:e4:
1f:3d:81:f6:8d:b5:07:45:db:6a:27:cc:84:9c:57:
45:f4:40:59:8c:75:ef:a6:b9:cf:e1:0b:2a:c6:43:
a4:44:56:1d:6e:7c:53:8d:a1:0d:44:7d:2a:c2:b1:
c7:9b:a8:d0:a9:e2:47:18:65:69:5c:5c:2a:6b:13:
29:56:51:f0:86:e0:62:fd:7f:02:91:0c:db:a9:f3:
40:13:fd:91:0b:8d:65:d4:58:35:05:f2:15:89:47:
5b:50:2d:1f:03:b4:52:72:58:84:d2:0a:e8:25:41:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:24:D9:D4:AB:A4:50:18:35:71:2C:24:F4:4B:B4:5A:02:88:20:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/621A04BC871211F0879204ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.117.0-154.91.126.255
Signature Algorithm: sha256WithRSAEncryption
5c:2f:63:e9:6a:d4:d8:63:11:32:20:3d:53:2c:d6:1a:a4:d7:
7f:46:07:3e:c2:17:6e:d4:8a:b5:50:73:f8:62:e7:35:e8:dd:
d7:28:9d:93:ac:36:2a:0f:80:b7:d6:be:fe:38:4a:d4:50:8a:
cf:80:9d:8a:89:cd:e0:95:28:41:7c:03:87:f3:d6:b9:26:2f:
26:82:eb:61:a1:22:9f:7b:0a:13:12:b0:36:ad:71:bb:34:e5:
01:51:d3:a6:7e:c9:e1:22:bb:f2:b7:ee:b3:63:e7:e7:b5:59:
21:51:79:bc:52:78:d3:e9:a6:a8:53:4b:d1:15:0b:9b:db:0b:
29:c2:dc:77:c7:dc:f1:ee:5a:b2:2f:0f:96:2e:d4:f0:2f:ee:
92:50:c2:cd:f9:90:91:72:cf:96:f1:fa:5e:c2:9e:4d:d5:b0:
2b:54:9e:83:f9:3d:cd:14:1b:e1:00:86:1a:66:8d:ea:7a:50:
6d:a2:a1:a0:35:b7:ea:77:8c:e1:cb:ba:3f:37:04:44:56:53:
0d:86:ac:40:ae:ca:a9:30:77:8c:af:6d:84:a0:12:12:4f:b5:
fa:1f:46:3c:37:73:54:7d:03:3c:7e:15:02:fd:4d:2d:d8:83:
bd:03:82:31:a4:e5:83:d3:59:3f:8d:68:42:a6:67:82:a2:35:
92:a2:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:29 2025 by rpki-client