Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/641FD1B6889C11F0937DA8ECDAE4EC9C.roa
File: 641FD1B6889C11F0937DA8ECDAE4EC9C.roa (raw, json)
Hash identifier: TdN642mT1oQRXsSaKymbaLRBZn4oPMoTibZcNf+W1nk=
Subject key identifier: 8E:B9:A8:96:65:22:7E:A7:BF:3C:B9:F7:1F:EB:35:32:4A:59:9B:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/641FD1B6889C11F0937DA8ECDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 08:02:53 +0000
ROA not before: Wed 03 Sep 2025 08:02:48 +0000
ROA not after: Sat 27 Dec 2025 08:02:48 +0000
asID: 18013
IP address blocks: 154.84.32.0/21 maxlen: 24
154.84.40.0/21 maxlen: 24
154.84.48.0/21 maxlen: 24
154.84.56.0/21 maxlen: 24
154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105647 (0x19caf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 08:02:48 2025 GMT
Not After : Dec 27 08:02:48 2025 GMT
Subject: CN=68b7f62d-a6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:98:ed:e8:dc:77:fa:6d:82:b1:b8:59:bb:
30:ea:b6:62:96:b6:c4:2e:e5:67:5c:13:1f:1c:83:
67:67:4a:b5:7d:47:90:e1:2e:c6:b2:46:91:e5:77:
eb:cc:f3:2c:a5:f2:cf:fe:34:b5:a7:2d:2a:d0:dd:
ee:51:bb:b5:c8:e1:52:34:d1:22:e9:f6:bc:83:1f:
01:96:a6:4b:87:1e:5d:b0:83:07:ab:d1:f1:dc:92:
ca:4e:db:c7:e0:31:d1:ae:46:7d:44:78:7e:20:62:
ae:27:67:c4:40:e6:1a:99:e9:06:d3:1b:94:ba:82:
f8:f5:6c:4f:c6:1f:d7:e7:a5:ae:db:79:f2:e0:55:
d1:b5:55:74:ee:ff:f6:d8:ef:f9:1b:8c:a1:93:07:
76:dd:15:36:29:2d:0e:9c:d7:fa:13:bb:13:5c:5c:
ee:2b:d6:dd:ea:46:81:d8:29:58:30:e6:e8:96:fb:
78:0d:6f:5d:36:2a:d4:b2:d6:ee:9f:a3:58:93:c9:
58:79:cf:52:7e:ef:25:b2:7e:9f:11:ac:56:fc:29:
89:46:ac:51:93:7a:05:2f:a1:39:75:4a:e2:d6:43:
94:50:d8:fc:10:c0:78:85:12:08:ea:40:94:6c:7e:
0d:a2:c3:45:6c:df:83:29:1d:93:92:fe:e1:9a:6c:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B9:A8:96:65:22:7E:A7:BF:3C:B9:F7:1F:EB:35:32:4A:59:9B:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/641FD1B6889C11F0937DA8ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.32.0/19
154.89.144.0-154.89.191.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b6:1c:83:49:5d:ec:df:66:1b:62:86:2d:de:f6:44:ee:f0:
1d:9e:25:c8:08:63:58:e6:ea:60:73:ea:1f:fb:b4:f2:10:75:
51:4f:93:da:b4:36:06:dd:24:af:22:6d:ab:f1:84:ed:74:f5:
99:d8:aa:52:98:80:57:25:39:87:9b:96:25:b8:3e:b8:b3:e2:
d6:78:4b:22:92:c9:23:3e:e4:27:db:89:3a:8b:53:41:95:80:
92:b4:75:bb:09:8f:46:ea:71:82:77:14:1c:bf:4c:c1:9c:c1:
18:29:65:9d:f9:6a:ba:f7:09:d0:35:2d:64:fa:dc:4b:f2:70:
0f:ac:2e:04:b2:f8:b2:81:3b:c6:db:24:9c:ca:6d:9d:66:bc:
61:8b:e7:8e:c0:af:8b:0a:30:60:98:95:3a:d9:09:be:69:c0:
2c:6b:0f:69:84:9e:c8:53:b4:cf:20:8e:cf:23:58:75:31:96:
bf:62:d5:b9:22:88:5d:e5:7e:d6:49:7a:49:e7:72:84:bc:1a:
69:7c:81:8b:23:f6:0b:18:f0:fb:75:da:3d:e5:7d:e1:1c:08:
30:cb:00:40:1d:0e:1a:f4:d5:20:16:f0:d6:85:51:96:69:6a:
4f:2d:11:df:59:f6:f9:0b:64:1a:c3:13:c3:45:03:12:8b:82:
9c:28:7a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:16 2025 by rpki-client