Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/865518AE841411F0BFD606E7DAE4EC9C.roa
File: 865518AE841411F0BFD606E7DAE4EC9C.roa (raw, json)
Hash identifier: +hYJnEkM09SFmmDxp9Gt3P/77u3n9uIjn7zfvUIv1OY=
Subject key identifier: EA:8B:4F:19:1B:80:00:FF:19:11:3C:53:C4:E8:4E:EB:53:2D:6B:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/865518AE841411F0BFD606E7DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 13:40:14 +0000
ROA not before: Thu 28 Aug 2025 13:40:09 +0000
ROA not after: Tue 30 Sep 2025 13:40:09 +0000
asID: 62240
IP address blocks: 154.194.80.0/24 maxlen: 24
154.194.81.0/24 maxlen: 24
154.194.83.0/24 maxlen: 24
154.194.84.0/24 maxlen: 24
154.194.85.0/24 maxlen: 24
154.194.118.0/24 maxlen: 24
154.195.121.0/24 maxlen: 24
154.195.122.0/24 maxlen: 24
154.195.123.0/24 maxlen: 24
154.195.125.0/24 maxlen: 24
154.195.127.0/24 maxlen: 24
154.195.128.0/24 maxlen: 24
154.195.129.0/24 maxlen: 24
154.195.130.0/24 maxlen: 24
154.195.131.0/24 maxlen: 24
154.195.132.0/24 maxlen: 24
154.195.133.0/24 maxlen: 24
154.195.134.0/24 maxlen: 24
154.195.135.0/24 maxlen: 24
154.196.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104922 (0x199da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 13:40:09 2025 GMT
Not After : Sep 30 13:40:09 2025 GMT
Subject: CN=68b05c3e-e5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8d:1e:44:f0:ef:99:00:7c:c4:aa:8d:f2:33:
0b:c1:2d:8a:01:90:c1:92:23:e1:a5:9d:df:dc:27:
8a:9d:7a:f8:66:67:ed:18:88:e3:4d:f9:2a:ef:f2:
9a:ab:92:43:ae:47:c7:3c:dd:82:9b:4a:33:52:39:
e2:40:90:0b:58:3a:1c:ab:49:64:a0:f4:5f:ca:a7:
22:5f:78:a2:2d:c4:1d:97:51:71:cf:d7:60:0a:69:
dd:dc:d6:d7:3d:23:0e:ed:ca:28:f9:5f:31:6f:52:
a6:eb:9f:4e:4c:76:87:29:66:f6:ae:26:6f:16:fa:
a0:e4:ea:27:35:af:df:7a:fe:35:b2:97:0f:6d:cd:
c5:f7:1a:e3:a6:3c:e5:80:79:c0:4d:2f:bc:7d:39:
34:fe:ad:14:7b:01:b6:5d:0c:e0:bb:a1:64:fa:32:
41:9c:e2:58:2e:16:b4:c3:73:79:47:1a:87:20:63:
fa:cf:71:14:2d:a0:10:d6:2e:26:ae:c3:f0:b4:94:
c3:02:04:67:b1:f6:74:0c:e7:ad:fd:bc:32:d2:9d:
f8:7d:26:7d:0c:df:fe:e8:dc:7f:3e:b0:5a:6d:81:
35:ca:cf:4a:a8:9d:89:7f:de:93:41:5a:ff:c3:42:
72:72:0f:30:16:ff:a2:4d:44:cd:3f:14:6e:a2:95:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8B:4F:19:1B:80:00:FF:19:11:3C:53:C4:E8:4E:EB:53:2D:6B:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/865518AE841411F0BFD606E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.80.0/23
154.194.83.0-154.194.85.255
154.194.118.0/24
154.195.121.0-154.195.123.255
154.195.125.0/24
154.195.127.0-154.195.135.255
154.196.88.0/24
Signature Algorithm: sha256WithRSAEncryption
90:83:76:dd:a0:a0:0c:92:ec:6a:79:3c:88:82:60:d5:ed:44:
7a:c3:3e:12:7d:cb:9d:b6:1d:86:9b:d1:ea:a2:e8:81:37:44:
13:ab:12:a8:7e:79:33:68:ff:9d:2d:3f:79:f0:26:66:d2:5d:
7e:b7:52:e9:5d:7a:aa:0f:69:c4:98:82:52:74:81:3c:cb:27:
26:c4:f5:ef:a2:b0:d0:c9:aa:89:b5:3c:63:3b:20:83:7a:df:
7b:17:f8:d4:54:84:0b:7c:ec:6b:f1:04:7a:ea:2d:db:20:5b:
10:ac:4f:a8:13:8d:51:9c:8e:db:a2:a9:cf:ac:a4:48:f5:ed:
54:88:fa:64:a4:03:b3:10:ce:ae:a8:95:07:ff:08:08:b4:d2:
6b:aa:a0:00:18:b9:77:c5:ed:7b:10:18:91:30:37:1a:ff:40:
9a:a3:aa:e8:46:55:3d:73:e7:47:a8:ef:79:75:42:4b:15:0a:
d5:5a:bc:a2:1f:68:42:30:2e:99:cd:62:ea:28:af:60:65:aa:
25:6c:64:86:dc:98:32:2c:a3:5c:3a:94:0c:ea:22:69:48:b9:
99:39:34:3c:b0:1a:75:08:ad:44:f1:89:58:bd:01:3d:fd:6d:
75:7c:88:26:c4:88:f5:84:db:d3:b2:8d:a6:36:d2:cd:72:66:
60:6f:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:21 2025 by rpki-client