Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9721C70837711F0AA1AE9D8DAE4EC9C.roa
File: B9721C70837711F0AA1AE9D8DAE4EC9C.roa (raw, json)
Hash identifier: 36TDh01EpwNNN3P7cVoxEMm/QJQdoBBufrVWsqoEYMc=
Subject key identifier: FE:DC:19:69:A9:C6:95:72:BD:3D:50:33:7F:60:13:07:A3:75:CC:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9721C70837711F0AA1AE9D8DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 18:57:49 +0000
ROA not before: Wed 27 Aug 2025 18:57:43 +0000
ROA not after: Mon 03 Nov 2025 18:57:43 +0000
asID: 63139
IP address blocks: 154.94.101.0/24 maxlen: 24
154.94.102.0/24 maxlen: 24
154.94.103.0/24 maxlen: 24
154.94.104.0/24 maxlen: 24
154.94.105.0/24 maxlen: 24
154.94.106.0/24 maxlen: 24
154.94.107.0/24 maxlen: 24
154.94.108.0/24 maxlen: 24
154.94.109.0/24 maxlen: 24
154.94.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104695 (0x198f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 18:57:43 2025 GMT
Not After : Nov 3 18:57:43 2025 GMT
Subject: CN=68af552d-e325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:32:26:29:d4:df:69:7c:94:d4:03:fa:ac:
76:13:3d:66:89:b8:c7:38:c9:6a:98:df:87:c0:81:
e9:b6:57:9b:04:70:2e:bf:f5:4f:ce:72:69:ae:42:
c2:3f:c8:71:7f:e3:65:0c:ba:90:f8:d6:b7:bf:8d:
42:30:3f:30:8e:ea:c5:28:00:19:7c:16:ea:ca:ec:
5d:ae:3a:18:bd:8f:15:19:4d:50:01:1a:55:e3:ca:
40:96:89:d0:be:4c:c1:64:ba:1c:0b:c3:93:82:38:
6b:c9:ff:e8:70:b7:7d:ec:c6:82:f9:19:34:13:0d:
2a:82:bd:85:a8:1e:eb:f7:30:14:13:61:d6:d4:62:
ac:a5:2f:ce:00:91:6c:8d:04:74:33:59:3b:51:19:
dd:47:e7:4a:ea:64:4c:59:5a:11:21:b0:bd:03:d0:
69:13:64:93:2c:ad:70:ba:44:48:2d:6b:85:0f:24:
8d:68:c7:36:91:f7:d8:b2:0c:55:cb:51:a4:f8:aa:
57:3d:48:75:c8:89:16:01:f2:cb:fc:1d:54:94:40:
8e:70:a2:41:e9:d5:66:84:da:83:ff:95:b1:30:44:
ce:6e:a4:72:2e:70:7a:71:9c:cb:38:e9:08:02:54:
bb:fc:4b:96:4c:5a:d0:08:7e:3f:c2:a6:25:33:0c:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DC:19:69:A9:C6:95:72:BD:3D:50:33:7F:60:13:07:A3:75:CC:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9721C70837711F0AA1AE9D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.101.0-154.94.110.255
Signature Algorithm: sha256WithRSAEncryption
6e:72:f4:89:df:e3:71:3f:c8:3f:77:16:91:42:79:12:8d:41:
3a:48:46:ec:69:dd:00:d1:84:45:dd:d7:6c:b6:b8:3a:c1:69:
07:d8:51:5d:f6:6a:b5:a5:d2:af:f4:da:84:89:7a:5f:09:8c:
dc:a7:43:ba:1d:b0:f2:81:ff:d1:21:bb:5a:09:55:52:ec:7d:
03:08:78:b7:14:b6:46:bc:18:db:ef:07:d0:db:fc:fd:5c:52:
ae:e8:11:6c:e5:19:a5:27:4f:13:6f:ef:c9:97:bc:c3:eb:db:
e9:c1:02:0c:9c:02:9a:c0:1c:1e:46:6d:0e:ec:f4:7d:fe:2d:
47:74:c6:98:bb:9d:6f:5a:51:2e:bd:59:7a:7a:e0:b9:72:de:
c8:e5:75:df:ad:40:c4:71:78:43:e0:87:d5:0b:72:bc:88:c3:
4f:e0:91:0e:65:cd:c9:da:78:3c:2b:75:84:81:2d:d4:ec:77:
cd:4e:24:ad:b1:48:d6:fc:5f:da:f7:cd:2b:67:bc:33:92:06:
4c:e1:ae:30:10:83:f3:69:64:c6:55:21:90:f8:f4:6a:4e:e3:
7c:82:90:f2:ad:9f:2b:2b:3d:31:a0:0f:56:91:2e:ca:1d:02:
e6:ee:b0:5c:51:c8:d8:f7:a1:d5:9b:92:f0:a9:29:5a:55:37:
90:08:e5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:03 2025 by rpki-client