Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6431D0E0889811F0B3319FD2DAE4EC9C.roa
File: 6431D0E0889811F0B3319FD2DAE4EC9C.roa (raw, json)
Hash identifier: MI4paBXzLugSmqQEqe2jAPwfpIwsvqVqIfmyBxqrk7g=
Subject key identifier: 68:F8:00:F6:06:9B:09:57:82:5A:05:5E:8B:85:A0:70:28:56:15:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6431D0E0889811F0B3319FD2DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 07:34:15 +0000
ROA not before: Wed 03 Sep 2025 07:34:10 +0000
ROA not after: Mon 01 Dec 2025 07:34:10 +0000
asID: 399077
IP address blocks: 154.91.87.0/24 maxlen: 24
154.91.88.0/24 maxlen: 24
154.91.89.0/24 maxlen: 24
154.91.90.0/24 maxlen: 24
154.91.91.0/24 maxlen: 24
154.91.92.0/24 maxlen: 24
154.91.93.0/24 maxlen: 24
154.91.94.0/24 maxlen: 24
154.91.95.0/24 maxlen: 24
154.91.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105634 (0x19ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 07:34:10 2025 GMT
Not After : Dec 1 07:34:10 2025 GMT
Subject: CN=68b7ef77-c57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:d9:c8:93:6a:7b:75:ae:ff:ba:2f:e5:4d:
5a:02:a4:1f:46:57:4f:60:32:5f:39:c8:3f:91:2c:
1b:ee:7f:10:e2:7f:e3:9e:e9:90:2c:d3:a0:c9:af:
46:41:eb:a6:41:e5:a3:8d:14:46:13:cf:c6:c5:28:
a1:f5:d5:ca:99:78:00:2c:9d:20:42:ac:dd:09:9c:
2b:5a:f2:84:d3:f6:e9:f8:bc:d3:51:9b:b2:df:e6:
12:de:17:7f:5e:8f:cb:2d:a3:d4:37:d9:f8:70:4c:
fb:d2:8c:0a:dc:52:9a:1f:bd:ed:da:b5:9c:ee:72:
d3:18:9b:2e:3c:51:2a:c6:3f:9f:a7:7c:7e:38:ce:
c5:77:7d:fe:80:23:56:79:dd:51:a7:15:b9:55:7f:
81:fb:29:56:19:79:8b:26:25:d6:04:aa:55:3e:bc:
c5:65:21:62:c6:4e:6f:51:6e:19:69:bf:1f:53:8c:
8c:47:4a:60:92:8c:ca:0f:b8:e3:8f:23:30:a7:ce:
c5:60:07:49:d7:13:9f:a2:87:68:b1:0c:e4:58:15:
a7:64:61:d7:69:fc:66:33:7e:45:90:50:37:af:59:
9a:01:8b:12:6f:fc:e0:a8:63:a1:bd:a3:78:71:2e:
5e:8f:5b:0b:6c:02:51:43:5b:af:e8:27:73:0c:1f:
b1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F8:00:F6:06:9B:09:57:82:5A:05:5E:8B:85:A0:70:28:56:15:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6431D0E0889811F0B3319FD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.87.0-154.91.96.255
Signature Algorithm: sha256WithRSAEncryption
81:54:3a:1d:e0:9f:67:c9:e0:20:9b:68:95:f2:2f:7c:df:2b:
f4:d4:60:c1:3b:89:93:22:a8:cb:c9:34:6d:76:42:75:fa:16:
b5:64:56:6e:62:2d:88:bf:9d:5e:b5:ea:4c:4c:e2:28:97:14:
36:f3:ab:b5:95:8f:c5:a2:2a:d1:a5:17:e8:ae:41:12:4e:35:
e3:5f:29:5f:ec:60:40:46:35:f4:fc:ae:2f:84:12:7f:df:e1:
11:e8:2b:93:1e:b9:8c:a4:90:4e:58:cd:f4:c9:01:1e:15:43:
a6:e8:da:3b:bf:b0:e7:da:35:ee:b4:46:1c:1b:df:c6:72:7d:
ac:07:4e:2a:bb:b8:5f:b0:28:dd:01:f2:ab:27:4e:1e:ac:fa:
69:c0:96:6d:c6:f1:6c:2e:2f:9a:14:4d:07:a6:8d:98:53:7a:
98:08:96:50:e9:4f:f0:0c:3b:63:60:c2:7e:7f:92:59:c9:04:
39:c7:6d:69:50:95:02:01:07:0f:a7:b7:02:a0:14:f5:87:de:
52:6b:55:45:d1:92:81:9b:0e:79:fe:fb:39:7a:59:d6:c8:7d:
58:0e:03:a3:e4:9e:0c:2f:bb:2e:52:d1:bb:97:05:b5:77:d8:
7c:98:8d:e7:48:81:19:d7:62:41:58:7c:c4:5d:78:a8:27:6f:
c9:94:f5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:36 2025 by rpki-client