Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCAAA21A825611F0809CC380DAE4EC9C.roa
File: DCAAA21A825611F0809CC380DAE4EC9C.roa (raw, json)
Hash identifier: Ok1EU9B8e0kfkZpbrarCtAFbqiuIWf8Wl9hgPjj6ozc=
Subject key identifier: DF:21:24:09:70:ED:89:EB:24:8A:7B:E9:9E:D2:1A:2B:04:FC:C1:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0197B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCAAA21A825611F0809CC380DAE4EC9C.roa
Signing time: Tue 26 Aug 2025 08:30:03 +0000
ROA not before: Tue 26 Aug 2025 08:29:57 +0000
ROA not after: Mon 29 Sep 2025 08:29:57 +0000
asID: 9304
IP address blocks: 154.203.241.0/24 maxlen: 24
154.203.242.0/24 maxlen: 24
154.208.76.0/22 maxlen: 24
154.208.84.0/22 maxlen: 24
154.212.144.0/23 maxlen: 24
154.212.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104368 (0x197b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 08:29:57 2025 GMT
Not After : Sep 29 08:29:57 2025 GMT
Subject: CN=68ad708b-fe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:1e:44:77:9a:33:dd:3d:a7:fa:95:d0:f2:
34:28:5a:1e:ce:11:84:8b:31:ab:10:f6:2a:63:3b:
1a:6b:ce:a3:6d:2f:01:fb:8d:ad:83:d5:09:e7:8f:
c2:1b:4c:1b:5b:83:9c:5c:d4:29:1c:3f:7a:62:af:
42:65:d1:8c:0b:d9:03:da:f7:bd:e4:ab:f2:1a:a6:
d0:d8:ee:85:cc:ca:3a:59:c3:00:4f:b8:6e:5d:5c:
a2:91:0c:ae:5a:9c:44:90:66:3b:39:21:24:a6:b4:
81:da:c6:fa:4a:f0:0e:90:1d:8b:e1:7c:79:d1:87:
66:e6:54:c2:29:44:e5:a5:83:09:44:28:ac:7c:91:
9d:f7:b0:83:29:9e:0b:e0:fd:f1:0d:10:59:9a:66:
a0:6b:b9:f1:32:8f:b1:4a:a5:d5:c0:60:6f:20:3f:
6d:a9:4e:70:e7:fe:59:2f:87:ed:76:81:91:67:c7:
37:f4:f1:e0:96:9e:00:ff:ba:09:7e:98:ee:63:2d:
d2:f2:3d:22:61:67:ef:b1:13:30:fb:0b:37:59:b3:
94:1d:88:80:15:76:a2:62:3e:da:74:05:46:1e:02:
24:d5:0c:08:7c:c5:8d:f6:05:29:6a:a8:c3:dd:21:
ce:2e:79:ed:51:8a:2b:98:18:16:14:b9:cc:d8:cd:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:21:24:09:70:ED:89:EB:24:8A:7B:E9:9E:D2:1A:2B:04:FC:C1:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCAAA21A825611F0809CC380DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.241.0-154.203.242.255
154.208.76.0/22
154.208.84.0/22
154.212.144.0/22
Signature Algorithm: sha256WithRSAEncryption
62:60:63:42:0f:ef:0e:93:f0:d8:0d:47:48:cb:b0:c7:7d:c1:
7e:b8:51:42:0f:c5:73:b9:cf:bf:0f:db:e8:30:da:fc:e6:dd:
85:1c:c6:36:66:f8:56:d2:5e:27:3e:85:89:ad:a1:db:dd:bc:
f1:c6:0b:5a:af:1f:31:9e:7f:94:5c:79:76:47:a9:76:51:ae:
6a:95:45:0c:cb:46:58:24:41:e6:b0:32:0d:dd:59:2a:5a:19:
db:22:40:a9:70:6a:83:57:6b:66:98:e1:b9:1e:68:f7:eb:6b:
90:4a:73:85:67:43:ff:34:2a:2d:03:b2:6f:f4:36:2f:5f:f8:
e6:85:85:16:9f:12:c5:5a:78:04:4d:99:44:87:aa:a8:2d:90:
c9:bc:f4:48:a4:dd:5c:d9:5d:a4:31:44:d3:88:0d:c6:f5:a4:
12:5a:06:b4:41:51:3e:66:22:0b:70:7f:75:1e:57:e9:6b:9c:
a6:ed:42:9e:4b:4c:82:ec:59:1c:ab:1b:6f:bf:eb:84:06:b3:
96:de:3d:2e:dc:49:ea:f1:14:1a:d0:50:4c:21:88:0c:df:0e:
ca:9b:c5:17:7f:df:fc:c7:39:e8:38:e5:8e:21:98:20:3e:8c:
fe:f3:ce:95:c8:ab:d7:cd:fb:83:9b:2b:57:d6:fc:91:03:5c:
ff:7e:57:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:41 2025 by rpki-client