Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD3E67F2833E11F0BA30DEEADAE4EC9C.roa
File: BD3E67F2833E11F0BA30DEEADAE4EC9C.roa (raw, json)
Hash identifier: RpvO0x7S9hIdOreUiPaQghA2wSaO3Lb00ggOQ6U2z40=
Subject key identifier: E3:63:4C:33:FB:AE:37:D0:86:B4:C5:D2:B4:37:FA:38:C5:8A:70:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01987B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD3E67F2833E11F0BA30DEEADAE4EC9C.roa
Signing time: Wed 27 Aug 2025 12:09:54 +0000
ROA not before: Wed 27 Aug 2025 12:09:46 +0000
ROA not after: Fri 10 Oct 2025 12:09:46 +0000
asID: 138915
IP address blocks: 154.93.42.0/23 maxlen: 24
154.93.44.0/24 maxlen: 24
154.93.45.0/24 maxlen: 24
154.93.46.0/24 maxlen: 24
154.93.48.0/24 maxlen: 24
154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104571 (0x1987b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 12:09:46 2025 GMT
Not After : Oct 10 12:09:46 2025 GMT
Subject: CN=68aef592-3d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:89:93:6c:b2:39:2b:0a:5d:65:75:91:f3:58:
79:ee:ad:53:80:68:93:23:29:85:33:73:25:d4:a0:
c5:cd:68:df:7d:c0:fb:16:3f:a0:ba:f8:f4:5a:6c:
5d:6f:32:91:3e:9e:77:41:1a:9b:c1:85:be:dc:3e:
b4:98:df:e8:3b:06:cc:ea:b3:48:5c:ab:38:be:73:
2e:3f:98:30:bb:80:49:62:06:4f:f9:27:3f:61:79:
bd:df:de:23:23:29:32:ac:f3:02:a8:27:ee:1d:ff:
1d:a1:e9:f1:c4:6c:90:90:b8:5c:46:0f:34:4d:34:
a4:53:3f:7d:f8:72:98:86:6d:a6:36:7e:9e:87:de:
df:4f:8a:2c:a7:a1:c6:72:ae:aa:86:c2:ad:a5:d1:
c3:1f:87:02:30:88:82:e4:e9:40:00:62:5e:be:88:
d2:07:e1:47:d7:bc:bc:5a:ad:bc:49:45:52:76:4f:
d9:f1:62:16:e3:a5:66:d9:83:0a:ef:0a:75:65:67:
36:5d:98:bf:f2:9b:5a:be:1a:11:0e:5b:85:94:c5:
b4:85:48:1b:91:1f:3d:02:09:73:6e:bf:23:4a:d1:
a0:c6:8e:78:c9:53:68:68:40:98:f1:fb:35:b3:e3:
c9:0e:64:dc:27:48:2b:c8:a7:28:af:66:ef:2f:3c:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:63:4C:33:FB:AE:37:D0:86:B4:C5:D2:B4:37:FA:38:C5:8A:70:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD3E67F2833E11F0BA30DEEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.42.0-154.93.46.255
154.93.48.0/24
154.95.72.0/22
154.95.96.0/21
154.95.112.0/22
154.95.120.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:43:71:0f:78:1c:b8:6d:12:e9:d0:56:24:58:83:ae:41:1a:
ff:a5:90:8e:5e:fa:96:61:2e:b9:68:f1:05:67:f4:3d:88:75:
0d:78:7f:47:07:ad:cf:47:bf:8c:e4:a8:dc:ef:83:66:b6:c6:
ad:0f:d1:97:d7:be:81:9a:59:e7:4b:48:6a:28:e9:0b:71:03:
13:b2:c1:f7:05:19:a8:b8:16:46:36:3d:da:03:62:b5:14:24:
be:f1:c3:ae:f7:ac:9d:20:01:8a:c7:0e:d9:c5:18:5f:f7:56:
aa:c2:84:21:45:c9:58:f8:ed:64:a7:49:70:5e:51:5a:ba:dd:
5c:69:6c:88:52:5c:1c:ec:39:93:c0:36:77:77:b5:43:39:3c:
b1:cd:d9:3f:da:69:15:30:d5:29:f9:0c:c0:ee:b7:30:c3:fb:
c6:9c:d2:fd:91:76:30:c4:6a:fb:33:f7:04:2d:ef:4c:21:cb:
01:19:ff:c5:06:33:29:a4:2c:d0:fd:bb:42:91:a8:96:71:9b:
44:1b:02:06:bd:1f:b4:c7:db:44:55:28:95:bf:60:4c:a2:3a:
d0:80:89:7c:27:d5:28:e8:69:54:b1:7b:ae:b5:e7:6b:aa:4f:
ca:1a:8e:7f:01:49:57:b8:19:97:c0:a5:26:10:49:53:51:93:
58:59:af:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:40 2025 by rpki-client