Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B06F4AF6833811F0A776ACC4DAE4EC9C.roa
File: B06F4AF6833811F0A776ACC4DAE4EC9C.roa (raw, json)
Hash identifier: wBR9c63tZR5WzBAwfy7gVboqqm59+JGliQf1FTlgX9c=
Subject key identifier: 9D:AC:16:CA:58:EB:5A:29:9D:F9:CB:78:55:DC:BD:2B:B0:10:71:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019875
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B06F4AF6833811F0A776ACC4DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 11:26:35 +0000
ROA not before: Wed 27 Aug 2025 11:26:31 +0000
ROA not after: Sat 04 Oct 2025 11:26:31 +0000
asID: 18779
IP address blocks: 154.203.51.0/24 maxlen: 24
154.203.52.0/22 maxlen: 24
154.203.56.0/22 maxlen: 24
154.203.60.0/23 maxlen: 24
154.203.62.0/24 maxlen: 24
154.206.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104565 (0x19875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 11:26:31 2025 GMT
Not After : Oct 4 11:26:31 2025 GMT
Subject: CN=68aeeb6b-7f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:ae:21:8f:8e:96:ca:87:88:97:d6:0b:8f:
7f:ab:35:0d:41:d0:85:d5:8b:92:4a:7b:a6:8c:a2:
64:64:08:6a:56:ff:e3:60:1c:e5:10:3c:99:8f:f4:
ee:4d:40:6c:b9:71:55:c0:21:66:23:3a:d3:a2:f8:
a2:87:01:4c:a0:c0:a9:9b:c4:17:8c:db:b5:14:72:
eb:af:5e:03:27:e4:c4:05:de:07:e0:ba:00:ba:29:
21:08:2b:52:dd:ef:af:ce:9f:b6:53:29:fe:6e:83:
5e:34:49:89:fe:b8:46:c8:84:b1:2e:d5:fc:87:4d:
e1:7e:38:a7:e5:17:46:eb:85:d0:2c:33:a1:c2:73:
43:8a:1c:3a:1a:34:c2:53:15:d2:41:2c:2a:1f:88:
91:58:46:3f:dd:c5:dc:fb:ca:42:db:dd:71:e0:c0:
03:33:53:2f:95:98:56:3d:a3:67:ff:83:a4:bc:f5:
71:81:2d:2b:62:55:d5:f4:54:4e:a3:d6:c7:2b:7e:
d6:3d:e5:10:7c:d7:96:9b:e7:03:38:2b:d1:33:75:
bc:e7:ab:93:40:4b:db:c2:6e:2d:3b:4c:e3:1c:ba:
33:53:6f:d4:a0:d3:92:aa:e6:84:b9:38:dc:7f:1f:
a2:1c:f1:bc:70:78:77:40:cb:bb:c0:e0:18:d6:9a:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AC:16:CA:58:EB:5A:29:9D:F9:CB:78:55:DC:BD:2B:B0:10:71:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B06F4AF6833811F0A776ACC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.51.0-154.203.62.255
154.206.20.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d7:ce:46:05:69:1c:f6:58:a7:28:52:42:59:f1:a1:9d:50:
30:b5:ea:0b:a3:a9:e2:31:ab:8d:46:be:a3:1e:53:ea:70:16:
94:1e:6a:ca:ff:64:75:9b:0f:7d:a2:76:b9:ef:34:eb:31:19:
1c:15:c9:f8:cb:d7:4d:c6:65:8a:d2:c2:4b:be:af:c2:e4:85:
06:e3:c6:53:8b:8f:ee:ed:9e:da:cc:cb:cb:b6:c2:25:3f:ec:
ef:21:6b:85:aa:9a:7d:7b:c7:33:51:dc:a2:14:66:33:5e:9d:
61:73:5a:5c:87:c8:1b:c2:f5:de:94:bb:71:26:b5:fe:ac:f3:
19:ce:52:f0:dc:2b:67:72:23:32:8f:77:2c:8e:75:51:e5:12:
57:eb:60:9b:e8:f3:3d:31:33:a8:8f:76:f6:a0:98:1e:bc:76:
c3:dd:0d:c6:4e:5b:ac:86:25:94:40:cc:be:99:25:f3:b9:a9:
09:ac:da:c5:0e:6b:8a:a3:ae:21:a0:3e:4c:15:1d:17:a3:a3:
c4:a5:2d:55:c2:ee:94:54:8f:a6:ed:a2:92:cc:ee:77:dc:de:
03:84:30:e3:3a:86:57:ce:e6:97:cf:c3:dc:09:d5:80:df:c4:
31:87:5f:3d:c1:a3:f6:b6:25:39:05:ef:36:8b:8d:b6:37:c7:
25:80:3d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:37 2025 by rpki-client