Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3290B1E870D11F08F23EACEDAE4EC9C.roa
File: B3290B1E870D11F08F23EACEDAE4EC9C.roa (raw, json)
Hash identifier: fL32UPuIg3AFQzQ1akRQ99kWy8blF20cugxT/DU0qww=
Subject key identifier: 31:29:20:AB:2B:0F:51:E5:49:FB:34:23:C7:31:72:47:17:2C:0E:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3290B1E870D11F08F23EACEDAE4EC9C.roa
Signing time: Mon 01 Sep 2025 08:28:56 +0000
ROA not before: Mon 01 Sep 2025 08:28:50 +0000
ROA not after: Tue 09 Sep 2025 08:28:50 +0000
asID: 45194
IP address blocks: 154.84.200.0/24 maxlen: 24
154.84.201.0/24 maxlen: 24
154.84.202.0/24 maxlen: 24
154.84.203.0/24 maxlen: 24
154.84.204.0/24 maxlen: 24
154.84.205.0/24 maxlen: 24
154.84.206.0/24 maxlen: 24
154.84.207.0/24 maxlen: 24
154.84.208.0/24 maxlen: 24
154.84.213.0/24 maxlen: 24
154.84.214.0/24 maxlen: 24
154.84.215.0/24 maxlen: 24
154.84.216.0/24 maxlen: 24
154.84.217.0/24 maxlen: 24
154.84.218.0/24 maxlen: 24
154.84.219.0/24 maxlen: 24
154.84.220.0/24 maxlen: 24
154.84.221.0/24 maxlen: 24
154.84.222.0/24 maxlen: 24
154.84.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105279 (0x19b3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 08:28:50 2025 GMT
Not After : Sep 9 08:28:50 2025 GMT
Subject: CN=68b55948-8762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2e:22:eb:22:bd:fa:46:d2:81:9e:3a:62:e1:
90:a1:d0:6a:7e:2d:25:c4:23:0d:41:ba:17:76:83:
01:5d:68:2a:8a:d1:f6:da:6b:db:1c:d4:a3:78:a6:
31:d8:85:71:5b:01:0b:e3:b9:8d:80:ad:d5:14:31:
b1:a4:9b:1d:e5:57:3f:4d:70:5a:27:91:67:b5:d7:
db:8a:4c:50:f3:92:13:f3:86:1d:67:aa:6b:c0:c8:
c3:02:52:25:bd:49:69:b6:ab:8f:85:4c:11:b1:b1:
a9:dc:5a:df:76:01:14:a4:72:c3:90:bd:ca:55:62:
3a:46:75:29:59:b7:42:11:b8:c0:33:7f:6c:86:66:
4d:2a:0c:f2:a7:7b:9e:9e:7a:00:22:63:bc:4f:74:
e9:cd:ff:2d:1f:fb:6f:f3:b2:c1:2f:fd:45:d5:e2:
2e:4b:94:f2:a4:e2:09:b7:bc:47:5d:06:a6:bf:45:
ba:41:19:63:fc:cb:d8:0c:7a:4f:3e:9a:80:09:26:
a8:59:96:15:cb:a0:4a:f6:e2:e2:f6:a6:8a:6c:fc:
2d:f3:c1:a6:60:1f:e6:7f:d0:11:ac:ed:19:c8:7d:
d5:6d:23:c2:39:cc:b8:61:af:31:e5:3f:4e:66:ff:
a1:3b:65:e4:3c:99:61:95:6e:a6:84:bc:fd:fc:f3:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:29:20:AB:2B:0F:51:E5:49:FB:34:23:C7:31:72:47:17:2C:0E:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3290B1E870D11F08F23EACEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.200.0-154.84.208.255
154.84.213.0-154.84.222.255
154.84.224.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:bb:a1:f4:32:ff:0a:d1:b4:18:74:1f:f1:13:6f:bb:5b:22:
5d:d8:38:f2:72:70:f8:2e:07:de:7b:d0:16:16:44:b3:e9:8b:
4a:da:5f:5d:0a:66:15:54:c7:6a:78:b7:a3:e0:5b:cb:3d:ff:
27:3c:bf:2e:76:45:5c:f0:df:81:2b:7c:24:8a:0e:33:ac:ca:
96:49:43:1f:ab:b8:3d:0e:90:fc:ad:e5:1c:97:ae:e3:31:46:
39:b5:5d:4e:cd:ab:08:1b:c6:52:e4:77:48:9e:a3:2b:f3:70:
f9:ff:0a:a3:4d:42:36:d3:10:34:b9:15:d0:5c:68:5b:dd:9a:
58:dc:ef:c1:ff:77:9d:f9:05:1e:2e:bb:b8:88:19:74:4d:ee:
39:54:84:c9:04:87:d0:35:ae:fa:95:32:d3:05:d0:55:61:d3:
e0:2f:51:9f:71:b3:81:27:9f:47:5b:11:0c:ac:55:df:66:27:
b8:48:61:94:94:8d:f6:c7:b1:2a:23:e7:2a:32:37:38:7d:f3:
b8:e0:64:c3:b4:9b:b1:ef:ec:76:d3:97:36:92:41:3a:b3:58:
03:33:e6:36:57:8b:a3:e5:b4:96:bb:ad:db:95:b1:15:90:a1:
af:f4:2d:03:91:ad:8f:87:fe:02:31:a4:86:9d:d1:9d:ca:1c:
3e:b2:3c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:32 2025 by rpki-client