Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC3441A2832C11F0ACD9EB78DAE4EC9C.roa
File: DC3441A2832C11F0ACD9EB78DAE4EC9C.roa (raw, json)
Hash identifier: +Zl+ZjDDcCHtRXakKVTs3UZ45d8OxzfLwVg4K746TO0=
Subject key identifier: D7:2D:27:1F:E7:F4:ED:2B:96:31:88:47:8B:30:A6:7F:FD:B9:E4:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019865
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC3441A2832C11F0ACD9EB78DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 10:01:55 +0000
ROA not before: Wed 27 Aug 2025 10:01:50 +0000
ROA not after: Wed 01 Oct 2025 10:01:50 +0000
asID: 395793
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.200.55.0/24 maxlen: 24
154.200.56.0/22 maxlen: 24
154.200.56.0/24 maxlen: 24
154.200.57.0/24 maxlen: 24
154.200.58.0/24 maxlen: 24
154.200.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104549 (0x19865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 10:01:50 2025 GMT
Not After : Oct 1 10:01:50 2025 GMT
Subject: CN=68aed793-8bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:61:db:02:61:23:d3:58:94:f2:be:c4:5b:
68:0d:33:12:09:cf:5e:9a:39:d9:bf:f4:71:f5:30:
3f:71:0f:31:8a:09:a6:f4:64:96:4e:2e:1f:94:54:
d9:bb:42:58:6f:da:7d:3c:6c:f7:e9:40:19:53:bb:
22:7e:84:bb:56:a0:44:42:41:89:0a:06:dc:92:2a:
d5:fb:3d:1a:a0:35:06:99:9b:b1:d0:81:8e:92:e1:
35:d6:88:7c:70:b9:7c:85:19:84:90:81:d1:c4:b6:
37:09:61:22:54:d0:c0:d6:2f:6b:34:c4:6b:74:d3:
68:df:c1:bc:cc:03:f8:7b:c4:f8:40:d4:a1:1b:99:
c0:57:4e:7c:4b:50:41:7e:fd:a3:ad:bb:a8:69:8a:
d7:04:09:da:29:d0:38:a7:92:df:fd:d2:48:52:9a:
16:45:91:fc:f5:2d:2a:f3:af:bb:23:c0:1e:3c:70:
fe:cc:6d:47:17:44:35:17:fa:33:f2:4a:a8:d3:a1:
30:3e:7f:17:95:c7:91:bc:ed:c5:97:1f:5b:6d:34:
30:25:46:1c:04:4f:3c:06:fe:7e:00:62:23:86:dc:
b4:9b:2e:ea:7b:6b:e6:9a:94:7d:99:7d:61:fd:ba:
0a:c4:34:3f:8f:aa:59:70:73:1b:9b:8d:69:c5:4e:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:27:1F:E7:F4:ED:2B:96:31:88:47:8B:30:A6:7F:FD:B9:E4:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC3441A2832C11F0ACD9EB78DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
154.200.55.0-154.200.59.255
Signature Algorithm: sha256WithRSAEncryption
ad:ba:3e:22:06:cc:9b:d0:7f:90:06:b0:77:b3:68:2f:24:c7:
d3:30:50:1c:a3:40:da:34:4c:d8:ba:90:a9:96:15:5b:1e:40:
97:5e:92:a1:0b:d1:13:28:38:3c:f0:63:32:61:40:6b:b3:10:
14:b6:1e:8a:fe:80:27:f6:9e:ca:6e:fb:07:64:cd:59:4b:e4:
28:0d:51:eb:4b:0a:53:42:8b:00:cd:db:f4:52:b9:41:b8:4d:
6d:1c:bd:aa:26:0d:04:13:e0:d0:bd:8b:f8:2d:ab:4e:0d:7f:
8e:a9:72:ed:3f:2b:55:69:a1:45:d7:ff:70:80:ef:87:b4:e6:
d5:b1:45:06:35:fe:dd:0c:43:a1:44:c5:b4:67:a3:e4:6a:c4:
97:8a:31:14:f8:b8:eb:4a:f2:a6:46:ba:83:c0:ff:f3:e6:4f:
a8:45:e8:20:6d:2d:84:9d:2a:57:82:d2:05:a8:f0:30:4e:3e:
1e:9d:2f:77:93:8d:02:9a:9b:cb:f5:6e:24:23:0d:68:35:be:
30:93:55:75:9d:2c:d2:47:2b:30:4b:c6:23:e1:0b:3c:18:a6:
b0:46:a5:41:67:68:8f:ff:48:8e:a0:36:73:09:7f:2b:e7:b6:
82:f5:cd:68:4a:97:18:58:a8:df:eb:df:25:90:44:e1:f5:48:
6d:43:4c:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:40 2025 by rpki-client