Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66AAAE52802111F092DD8AABDAE4EC9C.roa
File: 66AAAE52802111F092DD8AABDAE4EC9C.roa (raw, json)
Hash identifier: DT3NDCKq1unskkEH7XSIc1LzGQsRCgLupWeABL5MfNI=
Subject key identifier: 55:AA:44:23:A9:B9:83:2E:69:60:F1:17:58:39:2B:4C:78:CB:1E:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0195BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66AAAE52802111F092DD8AABDAE4EC9C.roa
Signing time: Sat 23 Aug 2025 13:02:20 +0000
ROA not before: Sat 23 Aug 2025 13:02:15 +0000
ROA not after: Mon 29 Sep 2025 13:02:15 +0000
asID: 134365
IP address blocks: 154.198.40.0/24 maxlen: 24
154.198.41.0/24 maxlen: 24
154.198.42.0/24 maxlen: 24
154.198.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103868 (0x195bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 13:02:15 2025 GMT
Not After : Sep 29 13:02:15 2025 GMT
Subject: CN=68a9bbdc-5ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:ea:6b:c3:3e:d2:7f:a3:98:8d:7e:d3:f3:
24:dd:3e:9a:b6:e2:f1:8a:41:0f:1a:14:e9:57:f6:
57:8d:49:25:c3:1b:32:50:af:04:33:82:3f:0e:5d:
e3:1b:37:83:0d:07:1e:36:bc:97:37:29:c1:7d:7f:
bf:36:f5:78:db:93:bf:d9:c6:0c:8b:ff:1b:e9:8d:
45:32:10:df:ec:95:5e:ab:42:a9:2c:f8:48:d7:5c:
1c:2a:50:a5:d8:55:72:5a:d0:5e:bc:cb:54:0c:4f:
93:ca:cf:9f:c3:9b:48:10:be:81:7b:3f:8b:da:31:
e2:97:57:82:57:c6:a7:78:2b:27:74:5d:e3:39:1d:
4b:f4:a5:c7:fb:85:05:87:69:85:2a:6e:13:92:7b:
74:e8:80:33:c8:d7:9e:60:b0:2d:8e:ee:3d:9c:0a:
83:2e:a8:1d:fc:07:aa:b8:da:51:ba:f2:5a:19:1b:
51:5e:d4:59:88:df:97:06:5b:68:7d:62:f7:51:8a:
68:34:e3:88:06:ad:c8:a0:66:f1:5b:03:80:e5:6b:
d3:39:58:3b:60:f8:d9:df:21:dd:97:da:f6:92:48:
e3:c3:65:91:e6:22:c7:09:d2:58:71:25:99:c5:d1:
f0:0b:4f:dc:e4:a2:c0:d9:55:37:79:6f:4f:4b:e9:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AA:44:23:A9:B9:83:2E:69:60:F1:17:58:39:2B:4C:78:CB:1E:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66AAAE52802111F092DD8AABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:1e:2f:85:16:02:a2:cc:70:55:94:66:a2:c3:f4:f6:75:e2:
8a:48:03:ee:a9:b1:11:90:39:01:f1:8e:c8:cc:ad:b1:9e:38:
8a:ba:66:84:8e:9d:f8:a5:02:37:f0:8d:ae:eb:90:bc:31:c3:
a8:00:21:d0:6d:a5:2c:a4:87:82:a4:68:82:3a:cd:c1:24:3b:
ab:58:0a:27:4f:70:ed:ed:48:40:6a:86:41:71:d5:e0:6a:20:
96:6a:30:77:16:72:a5:50:0c:ee:32:f5:6d:05:b3:6f:f4:78:
48:16:14:58:91:ef:83:e9:19:28:cf:68:fe:b7:07:47:e3:3b:
c0:1f:e7:85:fa:c1:ed:aa:53:90:35:a8:3c:67:b1:9a:d8:66:
d3:a0:a9:6c:8f:df:e3:50:ed:b6:55:e9:2a:ba:1f:43:0b:f0:
8c:a6:1e:f8:49:c5:9e:98:a6:18:55:f4:ba:ec:90:8f:fd:a7:
bc:ab:13:15:0a:86:b3:74:df:8e:92:aa:02:0e:93:c2:2f:5e:
90:e1:49:94:37:54:91:b8:2a:92:b4:f3:b0:2a:66:5a:dd:ea:
48:a9:2e:93:8c:78:cd:7e:37:ca:89:f1:cd:38:b0:9c:4e:a2:
75:6a:67:4e:c8:39:b6:bc:b6:60:14:8b:2d:a5:ff:65:71:50:
a0:da:5f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:40 2025 by rpki-client