Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C687606835F11F0878F68BEDAE4EC9C.roa
File: 8C687606835F11F0878F68BEDAE4EC9C.roa (raw, json)
Hash identifier: NSkylYY0zxB/NYAqaIJL9B4HgHKuvJwlIKR9T/AZUCg=
Subject key identifier: 01:2E:14:1D:BF:C0:23:4B:99:BA:C3:0F:0E:FB:56:D7:91:51:3D:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C687606835F11F0878F68BEDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 16:04:45 +0000
ROA not before: Wed 27 Aug 2025 16:04:40 +0000
ROA not after: Fri 17 Oct 2025 16:04:40 +0000
asID: 138915
IP address blocks: 154.206.64.0/24 maxlen: 24
154.206.65.0/24 maxlen: 24
154.206.66.0/24 maxlen: 24
154.206.67.0/24 maxlen: 24
154.206.68.0/23 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.72.0/23 maxlen: 24
154.206.74.0/23 maxlen: 24
154.206.76.0/23 maxlen: 24
154.206.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104658 (0x198d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 16:04:40 2025 GMT
Not After : Oct 17 16:04:40 2025 GMT
Subject: CN=68af2c9d-2623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:2c:03:e1:5e:cf:d9:62:1b:02:d4:da:d2:
c4:b3:56:8f:62:f0:40:d0:be:2a:87:01:83:35:78:
5f:68:02:c9:80:48:30:f6:00:6c:d0:03:7c:6b:96:
5e:d3:1a:2d:e4:3f:e6:7f:49:77:61:a0:e1:b5:2d:
95:7b:43:63:b1:96:e4:4f:5e:42:ea:b3:a1:a6:bb:
17:be:f9:6d:a1:50:6c:4d:5d:6a:b6:dc:66:66:ca:
cb:b9:ed:43:db:0d:ca:44:4d:ec:f4:8e:cb:28:c8:
72:66:80:76:31:3c:80:a7:ef:4c:47:39:65:c9:92:
4f:01:9e:73:b9:f4:0f:fe:e5:2c:10:4e:59:7f:49:
68:1c:5a:62:1c:b9:03:b9:08:b4:71:43:37:1f:ad:
d2:6b:4d:e4:83:86:c5:08:d0:ca:7f:15:2d:85:2d:
06:4f:93:06:3e:a4:bb:e8:3c:94:96:44:86:fa:4d:
28:95:02:e9:d5:3c:cf:a6:ea:19:a1:1e:74:73:88:
ee:23:d6:75:e7:8e:2d:19:bb:d7:95:2d:5f:81:ab:
a0:91:6e:be:b3:24:d3:0d:7f:64:28:3e:14:fd:5d:
38:8b:e4:d2:97:b3:11:67:23:d0:de:48:c6:a1:22:
ed:44:77:ab:3d:cc:48:5f:95:e4:98:fd:f2:96:e0:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:14:1D:BF:C0:23:4B:99:BA:C3:0F:0E:FB:56:D7:91:51:3D:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C687606835F11F0878F68BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0-154.206.77.255
154.206.92.0/23
Signature Algorithm: sha256WithRSAEncryption
05:fd:b3:a7:af:a0:14:b9:8b:13:19:0e:52:ed:e7:62:72:b6:
48:d5:c7:39:31:60:3c:31:af:bd:91:85:01:cc:3f:5d:6d:66:
2f:18:65:fe:0f:a2:df:d2:f2:46:f5:44:af:86:31:9a:30:62:
5d:f4:61:71:57:45:d0:26:57:fa:1d:c9:e8:af:e9:3d:48:b7:
9b:f1:8e:59:67:55:9f:36:57:dd:fc:c7:88:87:da:b8:47:5a:
b1:71:1e:25:c7:47:1d:19:80:e0:fb:c8:84:c2:10:b7:0e:ed:
28:4d:78:cd:d2:1a:79:91:43:08:34:28:ac:8f:ab:eb:b6:aa:
e1:c0:d9:2f:3d:96:de:4e:0a:fd:5d:25:e0:2b:fb:4f:35:4e:
27:6e:f9:04:aa:5e:fd:25:54:9b:fa:6b:67:64:06:b6:dc:55:
bc:d3:04:02:63:71:2f:f0:69:e5:fa:76:1f:fa:98:6e:70:b6:
28:5a:04:af:8f:e1:d8:6d:88:d1:b1:f6:61:67:89:d6:57:0b:
b0:24:8b:f3:4e:eb:6e:6f:ec:95:9c:a9:28:ba:f3:11:ef:3f:
a0:4e:79:12:58:5e:ee:c5:36:cb:a8:e4:f0:67:4c:c5:a4:45:
85:54:57:4d:08:77:7b:2e:4c:e3:85:b2:55:a4:d1:9a:12:35:
0e:54:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:42 2025 by rpki-client