Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD92B0A8843A11F08CE131DBDAE4EC9C.roa
File: BD92B0A8843A11F08CE131DBDAE4EC9C.roa (raw, json)
Hash identifier: lLsSG9eC53gLi9VAmqY7BeDeNtFuTCbHzbjvlg0Xowg=
Subject key identifier: F8:3C:64:3A:08:B4:E8:8E:72:7D:BF:6D:E7:4C:AA:10:D4:34:0B:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD92B0A8843A11F08CE131DBDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 18:13:47 +0000
ROA not before: Thu 28 Aug 2025 18:13:43 +0000
ROA not after: Mon 06 Oct 2025 18:13:43 +0000
asID: 202656
IP address blocks: 154.222.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104982 (0x19a16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 18:13:43 2025 GMT
Not After : Oct 6 18:13:43 2025 GMT
Subject: CN=68b09c5b-e9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:f6:82:70:e6:cd:23:f6:5d:a0:53:89:78:
a8:f7:ef:ed:37:0e:ea:b5:2b:9e:1e:ed:5b:15:f4:
31:43:66:c1:b7:84:2b:5d:e8:fe:f9:a0:bf:8b:5d:
0c:b7:48:fb:21:fe:fc:74:46:bf:dd:5c:0e:a9:85:
d8:cd:e0:96:e5:49:13:a7:d4:14:46:f2:16:2a:db:
0d:f2:20:b0:a9:a5:a7:ef:da:c7:72:58:77:c3:e0:
23:cb:9c:b7:d3:8c:92:f7:66:2d:ec:62:6b:1e:2d:
06:cf:9f:8d:8b:3c:5e:fa:b8:e2:a3:59:31:28:72:
4c:48:30:8e:ee:d2:b2:59:07:82:e4:82:3f:ee:a6:
9b:a8:dd:4d:9b:9d:f5:51:25:3e:4e:84:d9:e8:33:
8e:62:b7:af:6d:7e:8f:2e:f4:51:b9:72:cd:06:31:
7f:10:77:b7:44:f8:04:3f:95:92:6e:99:89:7d:41:
e9:1f:e7:85:a0:69:8d:90:b4:05:36:3c:57:9f:f3:
78:f2:8b:6e:02:21:8e:c1:f9:eb:7a:45:0c:58:04:
cb:d6:7e:21:e8:2c:2b:f0:52:84:04:b2:73:7d:6c:
07:3f:9c:cb:2d:bb:00:98:60:bb:3b:86:44:63:e4:
d2:6d:6a:b8:05:d9:6e:c1:03:9c:3d:0a:65:6c:10:
dc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3C:64:3A:08:B4:E8:8E:72:7D:BF:6D:E7:4C:AA:10:D4:34:0B:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD92B0A8843A11F08CE131DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:42:91:e2:c3:7f:de:43:71:ba:79:f9:4b:63:dc:4f:95:36:
4b:d4:ca:d3:2e:a0:f3:80:77:fc:07:c2:b8:86:1e:1d:f0:99:
e6:a7:5f:49:0c:1d:ae:1d:85:4b:17:68:46:da:44:16:6b:11:
fb:cf:28:ff:71:6b:29:b0:bb:83:15:02:0e:68:f5:32:69:62:
7e:a5:ee:ab:03:76:88:66:f8:09:f1:4b:6d:1f:4d:d2:e2:13:
ff:c7:41:a1:89:88:d9:75:f0:6d:d7:20:e0:c7:9e:a4:d1:5b:
18:4a:33:e8:f8:73:ff:ce:e1:bd:ca:a9:a2:ac:5b:43:98:51:
80:8f:27:40:4c:0d:a2:c6:bf:a9:53:4d:0c:6a:b4:1b:11:09:
90:8f:df:06:fd:e8:df:c6:f4:30:ae:d7:bf:90:82:db:63:a8:
e6:05:ca:82:38:89:00:50:33:69:16:cc:6d:07:9b:22:c1:30:
de:be:c7:ba:57:38:c8:65:dc:6e:7a:be:e9:10:4e:9e:32:74:
25:16:58:87:05:d5:8b:61:6c:e0:8f:5d:44:18:59:e6:56:61:
c0:24:ee:ba:b6:f0:a4:3b:28:59:bc:5e:83:d9:34:cc:35:55:
29:3a:00:ed:ce:e1:81:f0:43:a3:79:fe:1b:9e:f8:61:17:8d:
ea:3e:b4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:22 2025 by rpki-client