Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4480A808A5111F0B7615B8DDAE4EC9C.roa
File: B4480A808A5111F0B7615B8DDAE4EC9C.roa (raw, json)
Hash identifier: 9hb6qVPZdZnvagMNSDV5LYNSOjSXKQmntY1D8uC8wLU=
Subject key identifier: B1:11:25:8B:8B:6B:BE:96:92:33:01:2D:77:C0:BE:42:0B:78:59:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4480A808A5111F0B7615B8DDAE4EC9C.roa
Signing time: Fri 05 Sep 2025 12:13:17 +0000
ROA not before: Fri 05 Sep 2025 12:13:13 +0000
ROA not after: Fri 12 Dec 2025 12:13:13 +0000
asID: 54600
IP address blocks: 154.199.208.0/20 maxlen: 24
154.199.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 17 Sep 2025 00:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106026 (0x19e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 12:13:13 2025 GMT
Not After : Dec 12 12:13:13 2025 GMT
Subject: CN=68bad3dd-fc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:5e:d5:60:b2:35:72:a6:51:ba:cc:70:67:
43:48:8a:60:31:9d:9b:ac:27:d2:3d:b6:29:8d:9a:
ad:15:b2:d9:c7:ce:bc:fa:aa:99:46:ae:49:ac:f6:
c1:eb:59:8b:8a:15:d3:e6:e9:90:9f:cf:90:8c:7e:
1b:dd:95:97:0c:1d:6d:77:38:a0:b5:47:f4:23:9a:
a7:04:74:48:4f:df:05:8a:8b:58:f0:7a:c8:27:e6:
09:ca:b2:8f:20:2f:bb:a3:a2:19:c8:cf:44:7c:26:
7f:7f:45:a2:d5:79:19:4c:a5:29:b9:d3:6e:ed:22:
ca:19:28:db:ab:3b:b4:9b:90:ff:0f:ee:f0:b3:c6:
9c:1a:df:64:d3:84:60:0f:c7:ba:72:c6:04:de:1f:
ed:a0:45:ce:c4:25:9a:4e:8c:b2:bc:c5:5c:7d:98:
d0:d5:c5:6d:f2:80:a6:17:bf:ac:38:93:af:d2:82:
c2:3f:9e:28:1f:77:15:91:06:e4:b4:bb:0e:84:dc:
51:de:2c:49:0d:7c:a7:87:30:b2:d9:ca:c3:8f:06:
5d:8f:f1:89:9d:56:18:7f:f6:7e:e4:20:28:fb:eb:
a4:8c:b6:72:0a:fd:8c:d9:9d:74:8c:0a:8f:b9:13:
15:2a:1b:36:8a:0f:eb:2a:4d:46:cf:a2:cf:51:62:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:11:25:8B:8B:6B:BE:96:92:33:01:2D:77:C0:BE:42:0B:78:59:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4480A808A5111F0B7615B8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.208.0-154.199.255.255
Signature Algorithm: sha256WithRSAEncryption
64:7a:30:6b:34:9a:5f:b7:f2:ab:17:09:47:0c:bb:84:e7:0e:
2e:f3:11:cd:31:80:0a:b1:e0:48:ec:cb:08:ee:d8:6d:ae:81:
78:d4:0a:ea:a8:0f:3b:75:cb:d0:15:92:58:97:ed:fe:3c:21:
6e:2d:2b:4c:59:b6:e4:d4:09:61:91:f6:43:86:3b:84:31:ce:
51:98:7d:2d:e5:66:cd:c4:0f:21:1d:86:5a:ff:c1:e6:d7:5d:
d9:6f:16:f8:c9:24:27:3d:0b:49:56:14:d5:8f:60:70:f3:59:
b0:88:c2:81:71:07:0b:47:17:8d:0b:2f:88:3c:f1:c8:4a:57:
a4:29:b7:bc:41:3e:86:24:20:50:f3:4f:56:ac:a5:9a:a8:6f:
bf:14:a4:62:5a:0a:7f:ab:a8:de:d0:0a:4c:6e:bd:11:e1:f9:
6e:49:5a:dd:09:33:18:2f:8e:75:96:81:86:0c:5b:6e:33:4c:
3c:3b:7c:01:32:09:44:e1:c4:6c:37:5f:38:ae:31:65:25:35:
94:4a:92:32:3c:8a:09:27:b8:9b:3e:dd:1e:91:f5:be:05:af:
95:26:fd:df:78:12:58:ee:1b:3f:b5:c6:9a:66:6e:7d:b2:2e:
44:83:a0:f1:06:26:ab:74:33:1f:5d:a9:16:f3:f2:89:5a:71:
77:fc:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 04:59:28 2025 by rpki-client