Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A5CC5C8889711F0B558F3CDDAE4EC9C.roa
File: 8A5CC5C8889711F0B558F3CDDAE4EC9C.roa (raw, json)
Hash identifier: Vjc9uX3iIsSOmQX5KJBMVwcIBWPf2pCKAWddLF7I9qE=
Subject key identifier: 7A:44:B1:80:26:AA:91:6A:E9:03:45:30:3F:C1:68:DF:2A:7E:7E:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019C9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A5CC5C8889711F0B558F3CDDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 07:28:09 +0000
ROA not before: Wed 03 Sep 2025 07:28:05 +0000
ROA not after: Mon 01 Dec 2025 07:28:05 +0000
asID: 399077
IP address blocks: 154.91.97.0/24 maxlen: 24
154.91.98.0/24 maxlen: 24
154.91.99.0/24 maxlen: 24
154.91.100.0/24 maxlen: 24
154.91.101.0/24 maxlen: 24
154.91.102.0/24 maxlen: 24
154.91.103.0/24 maxlen: 24
154.91.104.0/24 maxlen: 24
154.91.105.0/24 maxlen: 24
154.91.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105630 (0x19c9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 07:28:05 2025 GMT
Not After : Dec 1 07:28:05 2025 GMT
Subject: CN=68b7ee09-ab84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:7a:81:24:48:05:21:38:bf:dd:ff:08:18:
ef:45:0b:3f:51:87:0c:ac:7a:9b:cc:96:c5:4c:5d:
e9:94:19:02:e7:d5:3f:c1:91:9c:8e:15:dc:96:57:
43:e7:56:fe:eb:e6:68:de:b7:4a:3f:45:21:64:25:
ed:7b:43:7c:d7:33:31:6a:16:60:c5:36:5b:07:03:
2e:d3:fa:d9:19:bc:d9:bc:33:5e:57:02:d3:e5:c0:
65:bf:17:8b:5d:5f:f0:93:b5:f1:8d:d5:8c:f0:c8:
c1:2b:55:56:c2:d5:98:5f:f5:42:a3:df:4b:05:2a:
fd:85:36:63:5d:03:4d:15:15:27:2f:9c:cd:85:a4:
f9:2b:67:e0:9d:59:23:f3:2a:6c:50:16:b4:42:c4:
13:48:c6:55:ce:cb:b4:2e:92:3d:54:29:82:5d:39:
78:03:fe:b9:7c:d5:2b:6e:73:48:fd:f6:d5:aa:5a:
31:bb:52:21:27:2a:df:5a:9e:b5:27:aa:24:1a:52:
50:86:e5:1a:f7:da:bf:62:b5:6e:a5:f4:35:2f:c7:
24:a3:de:18:0b:2d:04:9e:2f:bb:f9:1c:00:d8:11:
3c:d2:a0:69:7c:5a:41:00:65:9f:5a:7f:62:d5:53:
5e:dc:70:7c:d9:ca:35:f9:78:05:f5:55:28:5d:9e:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:44:B1:80:26:AA:91:6A:E9:03:45:30:3F:C1:68:DF:2A:7E:7E:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A5CC5C8889711F0B558F3CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.97.0-154.91.106.255
Signature Algorithm: sha256WithRSAEncryption
9f:a4:ec:10:64:b5:ce:02:8f:d9:ea:1d:f1:ac:c5:6d:fb:8c:
dc:ff:a1:30:0c:e7:8a:ae:ac:02:d2:d9:cd:c2:74:12:0a:ca:
79:8d:60:fc:fd:be:53:02:5a:3c:69:09:4f:85:28:9f:ee:26:
3b:8f:58:ba:49:85:d4:57:2a:d9:3d:8a:06:e9:e2:ca:15:1c:
79:3e:e2:5c:52:32:a3:bb:9e:70:2f:e8:0c:53:aa:67:7b:46:
43:f0:bd:c5:f8:3f:fd:61:ff:94:2d:41:44:5d:53:64:ed:33:
a7:6e:ed:d0:24:73:12:f2:d7:99:33:e0:8b:e8:3e:7c:09:58:
e1:28:13:8f:b5:85:af:e7:c1:78:f0:3b:75:56:1a:db:60:31:
8c:6a:39:2b:6e:69:ea:2d:fd:ea:eb:8b:fe:65:d9:61:e2:8d:
c6:2d:9e:06:3a:19:27:42:b6:4d:10:24:58:4f:0b:86:ff:24:
53:53:bc:80:b4:8a:7f:7c:35:c1:eb:f6:6e:a2:e2:f5:02:e0:
80:0e:7d:2d:c5:e0:94:3c:eb:19:38:65:3b:a8:c9:a0:09:66:
0b:7c:3b:d5:c6:a8:95:3c:91:dc:d1:90:f1:45:08:a0:ba:fa:
0e:23:3e:3c:f1:b5:59:45:c2:4d:e5:32:dc:14:ed:03:13:25:
82:6c:8e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:48:27 2025 by rpki-client