Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F829070835011F0A4BF94DEDAE4EC9C.roa
File: 7F829070835011F0A4BF94DEDAE4EC9C.roa (raw, json)
Hash identifier: 6aFD96NbRLgaj3IWV72sbvvWthawRht3bnLzkTSjusU=
Subject key identifier: B1:86:32:1F:66:19:1E:46:19:E8:0E:04:31:57:D5:D7:44:72:E2:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F829070835011F0A4BF94DEDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 14:17:01 +0000
ROA not before: Wed 27 Aug 2025 14:16:56 +0000
ROA not after: Mon 03 Nov 2025 14:16:56 +0000
asID: 63139
IP address blocks: 154.93.73.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.75.0/24 maxlen: 24
154.93.76.0/24 maxlen: 24
154.93.77.0/24 maxlen: 24
154.93.78.0/24 maxlen: 24
154.93.79.0/24 maxlen: 24
154.93.80.0/24 maxlen: 24
154.93.81.0/24 maxlen: 24
154.93.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104637 (0x198bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 14:16:56 2025 GMT
Not After : Nov 3 14:16:56 2025 GMT
Subject: CN=68af135d-f829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:b3:d8:66:6b:d9:57:36:29:a3:73:66:3f:
57:24:a5:2b:b2:e6:49:25:4b:23:5d:c0:01:f3:1e:
39:1d:4b:20:2e:3a:9f:59:6c:67:72:50:c4:0f:a1:
5c:b9:3c:07:bf:bd:15:9f:43:98:ee:08:dc:8c:1f:
23:b7:f5:16:e4:da:f6:97:70:6d:a1:77:9a:f6:69:
f3:fc:a8:84:fa:89:be:63:b9:41:67:46:b5:60:e9:
23:e7:46:c4:0e:90:84:cb:e4:e9:88:a7:a8:9f:c7:
9c:ad:2f:7e:92:32:13:24:46:75:dc:49:e6:cd:09:
04:2d:6b:fd:aa:99:4e:24:3f:c2:22:41:f4:38:96:
4f:d0:8a:20:3c:1f:f5:4c:d4:03:b8:3d:f6:61:13:
89:4b:ff:29:2f:35:fb:ff:61:45:7c:ad:c7:35:8e:
a5:fa:98:46:c4:fe:ff:9c:6d:b7:ad:f2:50:3c:ec:
e5:94:be:37:ce:b7:ef:ed:42:64:b8:20:95:ff:98:
da:36:75:8f:0e:fe:35:e4:c1:3e:2a:a2:d2:2e:de:
7c:c5:9a:b2:6a:54:3d:56:7e:24:db:bf:76:4a:02:
6b:5b:b0:0d:b1:75:fc:e4:5a:01:9c:c6:f0:f6:a6:
b3:29:26:58:d7:b4:f7:0a:d7:2c:0b:28:95:cf:15:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:86:32:1F:66:19:1E:46:19:E8:0E:04:31:57:D5:D7:44:72:E2:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F829070835011F0A4BF94DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.73.0-154.93.82.255
Signature Algorithm: sha256WithRSAEncryption
7c:c6:ab:19:6f:e4:06:c9:ca:f9:ac:8c:38:72:89:0e:6e:c0:
ee:0c:a3:8d:d7:99:14:85:6b:91:fb:87:6d:5b:9d:60:e0:de:
c6:2c:1d:ed:69:ed:63:7a:7d:ef:68:8c:76:75:cb:49:2a:ad:
d6:77:44:aa:09:3e:59:2f:d2:f4:86:4e:18:79:4b:06:11:a7:
32:87:6f:4c:3d:85:df:f3:f1:e5:63:62:e2:5f:b4:b7:0b:ca:
3b:da:c1:69:21:68:1a:7c:55:5a:31:c5:36:30:1a:cf:bf:a7:
69:48:a5:d7:c2:7f:c5:0f:49:cf:bd:04:9b:5d:5c:17:dc:19:
dd:03:d7:d2:92:f3:d1:0f:3e:61:40:fa:81:16:b4:80:01:48:
2d:9d:33:62:79:28:5e:62:7d:4d:01:d3:57:69:63:f1:f0:5a:
70:6b:34:43:e6:89:95:d9:36:3c:74:0a:89:0f:a1:a9:4c:8b:
80:92:d6:6c:2f:59:84:5d:4e:36:e9:c3:24:eb:ab:b2:03:96:
19:99:55:9e:66:c1:af:5c:f4:47:da:1f:b0:1c:a7:01:5b:14:
3e:c4:d6:8c:22:7f:9a:a6:0a:da:dc:b0:aa:9f:4c:dd:fe:06:
77:6e:53:61:11:b6:a4:2a:11:fe:cd:49:a4:4f:aa:8f:51:0f:
36:8b:45:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:29 2025 by rpki-client