Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EF97938841F11F09BFEC8ACDAE4EC9C.roa
File: 6EF97938841F11F09BFEC8ACDAE4EC9C.roa (raw, json)
Hash identifier: j68t8OMqS8J4VOoP4EkZo5dFWDtLiB1ssf5CFVu1ix4=
Subject key identifier: B9:69:3B:15:39:32:45:FB:A5:18:10:4C:AD:72:7D:ED:12:5E:69:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EF97938841F11F09BFEC8ACDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 14:58:19 +0000
ROA not before: Thu 28 Aug 2025 14:58:14 +0000
ROA not after: Wed 01 Oct 2025 14:58:14 +0000
asID: 202656
IP address blocks: 154.200.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104940 (0x199ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 14:58:14 2025 GMT
Not After : Oct 1 14:58:14 2025 GMT
Subject: CN=68b06e8b-a727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:b0:fc:ef:25:dc:29:c3:8b:64:1a:49:94:
2f:e1:c9:77:ec:ba:ae:00:fb:e2:bb:16:51:d4:a8:
01:fc:78:da:b0:f4:6f:20:09:d0:48:53:c0:57:f1:
6c:61:fc:ff:00:32:01:5a:2a:05:5f:af:4a:47:f6:
04:06:71:5a:87:39:7b:28:c6:be:81:fd:43:ee:09:
a0:cc:49:bf:15:86:8f:f4:dc:dc:f4:04:7b:49:44:
ff:b7:e2:26:ee:1d:47:7f:2f:88:8e:75:06:4a:6f:
91:0a:ca:9b:16:a6:41:ab:ea:46:b7:47:12:9f:06:
d8:ec:d4:06:63:95:1c:47:a1:45:13:83:93:45:76:
fe:9d:13:fa:3c:2e:67:48:65:eb:f5:da:7d:77:00:
df:5f:99:df:1a:b4:85:16:38:ab:52:66:4f:ff:0e:
ad:17:69:56:e8:14:03:21:b8:a1:6e:c1:db:79:92:
57:57:c0:e6:b5:54:0b:0e:3f:29:85:2e:f1:23:6f:
fc:11:34:09:c2:9c:80:de:49:e8:7e:3c:ba:e7:15:
be:a1:32:31:c4:e6:0c:87:a6:e9:02:bd:29:fc:ad:
f0:ca:ce:b5:e8:fd:7e:18:f4:40:53:6c:3f:a9:86:
5d:29:9a:5c:e2:b7:e4:cd:25:e9:97:93:c0:b2:6c:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:69:3B:15:39:32:45:FB:A5:18:10:4C:AD:72:7D:ED:12:5E:69:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EF97938841F11F09BFEC8ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.227.0/24
Signature Algorithm: sha256WithRSAEncryption
39:96:70:ac:89:75:6f:85:fe:d7:c4:bb:e0:fa:81:1b:25:72:
17:8e:cf:dc:f1:e7:19:ba:40:c8:34:d4:3b:75:7d:c3:85:e4:
7f:55:79:ff:6c:99:1b:9a:97:9b:99:06:30:09:07:4c:19:be:
54:34:6f:b5:0c:7f:f2:1f:c0:88:a1:92:e4:0f:62:3e:b7:87:
3f:85:a1:63:c8:3c:b5:fe:25:49:d7:30:57:9c:e9:1f:98:eb:
d6:a0:94:a6:42:da:24:4b:ac:f6:2a:21:3a:6a:f4:cf:79:4a:
ea:f0:d7:a3:34:59:f1:82:af:a7:85:84:c6:44:89:42:ed:19:
bc:b5:94:ac:40:95:6d:bb:36:4f:99:29:0e:a2:4a:98:f3:62:
3e:4f:0b:ee:a0:79:43:98:3b:2a:77:d0:c4:b7:07:23:ba:85:
37:53:75:cb:06:fa:15:35:ad:df:c1:b7:14:65:23:26:5c:00:
0d:37:51:eb:7e:e6:c4:78:f5:0e:74:94:93:57:a0:4c:20:0a:
63:76:d1:52:6f:18:d9:ee:e3:d9:bc:df:2e:8c:5e:0a:b5:2a:
b1:e2:8f:5f:36:a7:db:ed:d7:42:54:2e:26:73:33:2c:db:20:
30:87:a3:22:7b:8f:5c:57:48:55:32:29:90:55:61:9c:d0:6c:
2c:34:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:36:59 2025 by rpki-client