Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF19A9A863511F08560D0D0DAE4EC9C.roa
File: DFF19A9A863511F08560D0D0DAE4EC9C.roa (raw, json)
Hash identifier: iOZqWM4tbYu0FY9+Tu6yHzgO96ydZoQsbcKZIuZ9uP8=
Subject key identifier: C2:AC:01:78:3A:AB:8E:83:8E:63:C6:BF:88:6F:E6:15:07:9F:28:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF19A9A863511F08560D0D0DAE4EC9C.roa
Signing time: Sun 31 Aug 2025 06:44:00 +0000
ROA not before: Sun 31 Aug 2025 06:43:55 +0000
ROA not after: Sun 07 Sep 2025 06:43:55 +0000
asID: 54801
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105075 (0x19a73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 31 06:43:55 2025 GMT
Not After : Sep 7 06:43:55 2025 GMT
Subject: CN=68b3ef30-0783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:18:de:57:92:6b:b1:79:35:07:3d:ba:ae:52:
6b:a3:9b:be:c5:76:bf:62:ba:74:0c:b1:0e:27:c6:
d1:e4:9a:9d:16:54:6d:40:3a:2f:b7:7a:62:44:be:
82:18:d3:db:d5:9e:00:c7:d1:ab:e7:10:6b:c3:d5:
97:6c:5e:34:ff:7e:8a:e5:19:ef:41:90:c8:4e:36:
b3:85:19:71:56:b0:03:fb:8d:46:b1:18:bb:8b:72:
66:d8:bc:76:db:56:36:94:79:ad:c8:c7:5e:d2:a9:
f7:a1:e1:09:57:07:94:93:30:9e:7c:c4:43:7c:0e:
59:cc:df:c9:2b:f5:d7:57:fd:5a:41:d4:53:90:fd:
e9:44:c3:ad:75:5c:a3:43:64:f4:61:ae:68:a1:25:
91:24:55:b2:e7:43:aa:80:f0:93:00:fb:0f:07:30:
3c:4b:49:28:36:be:81:9e:62:a3:96:74:8a:d2:3d:
f0:a3:b9:26:d3:76:25:e7:3d:25:31:fd:38:94:6f:
08:db:39:7c:36:6b:7d:d6:1d:a5:e9:6c:0c:e5:d7:
04:3b:85:46:8b:1e:10:5e:ff:12:cf:53:cc:16:89:
6d:32:e2:c6:ab:92:28:fc:fe:9f:af:6e:0d:ba:cc:
de:3b:ec:1a:8c:9d:33:cb:2d:36:64:ab:62:6f:6c:
17:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AC:01:78:3A:AB:8E:83:8E:63:C6:BF:88:6F:E6:15:07:9F:28:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF19A9A863511F08560D0D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0/22
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:69:0d:66:7d:6c:68:b6:b4:f4:4b:ee:cf:16:de:e9:26:44:
9f:a6:91:c4:42:b2:42:55:11:ae:24:9a:67:47:47:c0:0a:cc:
95:79:95:3d:6d:3a:3d:31:1d:cb:33:dd:06:5e:9d:20:c5:57:
5a:0c:6d:8b:95:9d:5a:40:59:aa:82:3e:91:76:0b:7b:f9:01:
90:53:60:bc:9b:89:e1:1c:86:fb:60:4e:d7:cd:d1:5b:78:21:
b1:a9:65:b3:52:5d:b8:dd:4d:ad:03:94:da:47:36:0e:3b:8f:
1b:fb:c7:b1:fa:7a:b7:ef:96:fc:53:dd:ec:36:ae:c9:fb:8f:
0d:dc:b7:bf:6a:98:7b:ee:70:93:90:a0:e6:a2:76:eb:49:d3:
f5:56:34:86:87:a7:60:56:cc:88:84:1a:18:c7:02:b3:f2:b7:
0f:f1:b8:a0:a1:84:68:f2:26:61:d9:6a:10:dd:d8:0c:65:5a:
14:36:19:d6:8e:01:87:8b:6e:92:48:f7:70:5f:da:4d:c6:fb:
36:84:a1:65:9f:0a:6a:19:97:4e:b6:51:01:e5:b6:94:85:6e:
ef:16:25:e1:70:93:c7:13:dc:fc:d6:e7:e5:cc:2d:56:8b:93:
1d:77:93:8a:5c:9b:0f:fe:0d:b9:6a:08:f7:d1:1e:64:90:a9:
d5:de:1a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:39 2025 by rpki-client