Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF1A3B8840D11F0BBE03DB9DAE4EC9C.roa
File: 8DF1A3B8840D11F0BBE03DB9DAE4EC9C.roa (raw, json)
Hash identifier: YyT6TSfg8R80zVjLoClSSiH1BuDnHovkqEkBSdS2wDM=
Subject key identifier: 91:36:2E:A1:AF:C2:80:B4:38:BF:B5:AD:82:C6:92:04:26:01:3C:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF1A3B8840D11F0BBE03DB9DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 12:50:20 +0000
ROA not before: Thu 28 Aug 2025 12:50:02 +0000
ROA not after: Tue 09 Sep 2025 12:50:02 +0000
asID: 61461
IP address blocks: 154.216.192.0/18 maxlen: 24
154.218.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104883 (0x199b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 12:50:02 2025 GMT
Not After : Sep 9 12:50:02 2025 GMT
Subject: CN=68b0508c-ce14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f1:44:24:1e:b8:19:25:ad:60:82:ac:6b:eb:
be:97:ea:80:f4:5a:14:54:cf:1b:be:cb:3d:af:4c:
20:d9:b7:4a:19:76:4e:36:d0:75:44:aa:65:68:d0:
fc:1a:80:37:cd:bd:c6:cc:af:94:ab:18:9a:91:1c:
2a:06:3e:23:97:5d:7f:6d:96:9f:6e:de:bf:06:45:
f2:16:d5:de:85:7e:21:66:f0:14:8c:11:64:9b:e5:
78:61:80:a8:c2:02:31:2b:c4:bb:bd:7b:19:d1:d5:
c9:ed:e4:62:47:b5:9c:82:d1:40:a1:1e:e2:00:4b:
37:23:18:74:e5:72:d6:d9:d2:5f:be:a5:13:bc:a9:
86:6a:00:6f:48:b9:c4:ff:ee:e5:06:cd:b8:d4:b6:
4e:45:46:b5:7b:4d:4d:2b:8f:b6:2b:ec:b9:88:b3:
03:94:04:66:c7:11:7c:f1:66:49:1b:c6:48:3f:31:
db:fb:53:c7:f5:e3:2f:30:93:19:3b:d6:42:a6:f9:
60:23:87:bf:cd:d9:cc:07:2f:6a:81:2b:42:fb:0b:
de:e9:c9:39:32:b0:be:c3:98:02:e8:38:8c:43:2f:
d6:65:60:8f:2e:98:7f:fd:86:35:3d:ad:06:d2:9e:
da:5d:48:37:b8:a6:f3:ef:ca:30:08:ee:6e:d7:e7:
51:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:36:2E:A1:AF:C2:80:B4:38:BF:B5:AD:82:C6:92:04:26:01:3C:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF1A3B8840D11F0BBE03DB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/18
154.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
48:af:11:9f:02:ea:3d:ff:73:ed:6b:39:eb:b4:7d:07:2d:b2:
a3:d4:d2:cc:ce:f1:08:9b:e8:d3:8c:b7:fc:36:ab:02:e5:70:
ad:a8:8d:05:47:d3:0e:13:7d:29:90:64:41:93:11:85:94:21:
06:8d:1d:cb:d2:6b:24:bb:07:21:6a:fc:08:6b:44:83:90:84:
c8:1e:3c:c6:aa:3e:a6:df:f5:c2:99:b9:57:00:17:16:5a:14:
79:94:da:33:7e:b0:9c:c2:28:c5:0a:78:31:9e:72:4d:1c:22:
df:a7:d5:b9:93:4c:63:43:07:5e:83:53:9f:18:e7:ac:4f:21:
e2:f9:eb:fe:ac:02:b2:5a:03:52:e5:e7:08:47:de:fa:9e:ad:
ad:f1:e1:78:6d:86:50:38:97:77:44:ea:c6:31:e4:a2:e9:f2:
89:61:cf:6e:79:1c:57:59:8e:7e:90:7a:72:14:85:3b:17:03:
d7:ae:33:dc:9e:2d:8c:8f:e7:75:a2:79:28:2f:96:18:03:7c:
c6:50:f6:12:fd:86:5e:1d:3a:3d:72:1a:75:47:31:4c:6a:9d:
43:d2:09:bc:ce:4b:17:c0:59:28:7c:87:8b:77:86:0e:b5:b4:
c8:ce:7b:95:60:6c:58:d0:87:bb:5b:79:55:13:27:93:77:64:
1e:46:de:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:37 2025 by rpki-client