Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8D38C528A5311F08444669ADAE4EC9C.roa
File: C8D38C528A5311F08444669ADAE4EC9C.roa (raw, json)
Hash identifier: E2vk5G10eJzPcPzpg0pXKKlPweUUEGMeA2E/nMe0Dfc=
Subject key identifier: B3:46:1F:C6:76:03:12:1F:67:44:69:65:5F:80:B7:AB:44:DD:9C:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8D38C528A5311F08444669ADAE4EC9C.roa
Signing time: Fri 05 Sep 2025 12:28:11 +0000
ROA not before: Fri 05 Sep 2025 12:28:06 +0000
ROA not after: Fri 12 Dec 2025 12:28:06 +0000
asID: 398823
IP address blocks: 154.199.208.0/20 maxlen: 24
154.199.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Sep 2025 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106030 (0x19e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 12:28:06 2025 GMT
Not After : Dec 12 12:28:06 2025 GMT
Subject: CN=68bad75b-f282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:db:c3:f2:43:10:6c:2f:d7:28:43:7f:ab:
b2:78:40:a0:37:09:42:7b:02:7b:a5:7b:ed:e7:40:
a8:60:4d:c1:4f:33:f2:b9:5d:5a:7f:79:b1:92:3a:
5e:67:9a:b4:35:f5:e7:97:2b:19:29:fb:0e:8d:e7:
ea:bf:f7:da:fd:70:af:54:ea:ba:89:91:83:36:c2:
fb:28:d5:8c:4c:00:c5:64:1e:ff:2f:d8:01:f3:82:
ef:ed:80:d3:0d:75:41:76:31:02:5f:54:7f:4b:f2:
59:b2:93:48:f8:27:11:8a:39:0b:12:04:a9:e4:ce:
f5:12:12:f5:1b:1b:c5:13:4d:c1:39:8e:74:02:0b:
04:c2:8e:54:b5:c6:1b:42:70:04:df:8b:9f:b1:6c:
0d:0a:59:11:6f:a1:a3:78:97:1b:31:21:c9:c4:6b:
72:7f:55:06:6e:8d:ee:af:e4:23:8e:4c:3b:3d:ee:
ba:6a:f2:d7:22:f8:af:77:54:f4:94:b9:34:5c:cb:
bb:63:3f:22:2a:00:0e:c8:91:46:9d:29:60:65:66:
7b:93:ad:c1:5f:56:9e:16:04:9e:04:3b:ef:ea:cd:
38:c1:25:40:fe:b4:c7:39:dd:38:75:70:37:f6:a8:
e9:6d:aa:f3:89:71:6d:63:bf:99:9a:67:81:46:fe:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:46:1F:C6:76:03:12:1F:67:44:69:65:5F:80:B7:AB:44:DD:9C:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8D38C528A5311F08444669ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.208.0-154.199.255.255
Signature Algorithm: sha256WithRSAEncryption
8e:25:b7:82:3f:7c:a2:fc:11:11:8c:46:e9:2c:57:26:f1:3e:
d4:73:91:7a:05:ed:f1:4d:97:76:ba:61:0f:ae:2c:f9:fa:6e:
b3:2d:95:e2:79:a7:7b:9f:0f:23:aa:39:91:51:39:01:3e:c4:
e8:55:6c:a1:94:d2:ef:ee:ce:5c:d3:ef:e0:55:c1:45:a6:43:
c0:77:38:b4:59:14:0b:3c:c2:26:84:f3:fc:06:24:81:40:78:
84:8e:b0:14:81:5d:d8:67:7b:4c:df:6a:1f:f2:1e:ea:96:42:
c1:a7:0c:98:57:68:bd:c0:a5:5d:74:ac:58:aa:4d:40:39:72:
09:e1:78:c7:90:29:c1:b6:45:73:d0:33:86:ff:76:e6:f6:9b:
d6:6c:8d:c2:d6:a1:8f:62:a5:a0:2b:8f:b0:fc:32:78:e3:cc:
0a:bc:4b:ff:ad:a7:ce:5a:fc:cf:3b:65:f8:d5:e1:c7:64:30:
ae:da:28:bd:e6:4a:d5:f4:35:07:56:09:9d:d3:5a:4f:a0:48:
86:96:71:bb:9b:4e:78:13:29:a8:0e:35:78:d0:10:6d:07:c0:
a6:38:a7:d9:f8:44:6f:1c:81:46:9c:21:74:8b:b0:83:4b:8b:
0f:dd:2f:75:06:06:d7:7c:38:ba:41:36:e0:94:11:e3:aa:ae:
bc:21:99:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:03:15 2025 by rpki-client