Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E213987C88B111F086703C79DAE4EC9C.roa
File: E213987C88B111F086703C79DAE4EC9C.roa (raw, json)
Hash identifier: NGUD1TrldTCYyLmx/MFrvnpwl7McmtQPdv4mKe/qGKA=
Subject key identifier: EE:71:FF:DA:22:96:4B:3D:1C:13:72:08:2A:2E:B0:5A:1C:22:1C:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E213987C88B111F086703C79DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 10:36:44 +0000
ROA not before: Wed 03 Sep 2025 10:36:39 +0000
ROA not after: Thu 09 Oct 2025 10:36:39 +0000
asID: 200373
IP address blocks: 154.193.152.0/22 maxlen: 24
154.193.158.0/23 maxlen: 24
154.199.14.0/23 maxlen: 24
154.199.68.0/23 maxlen: 24
154.213.160.0/21 maxlen: 24
154.222.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105693 (0x19cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 10:36:39 2025 GMT
Not After : Oct 9 10:36:39 2025 GMT
Subject: CN=68b81a3b-4ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:8c:26:04:12:fb:72:c3:0e:d5:14:21:95:
33:8e:a8:fc:8c:6c:24:7e:f4:cd:9f:68:90:eb:11:
85:b8:5c:8d:e0:68:f8:1a:00:b7:98:08:86:00:14:
f6:da:a3:c3:61:68:11:b8:29:26:8b:ee:32:c4:fa:
d0:c4:3c:5f:b2:5a:33:e4:26:37:7b:19:90:28:ea:
6e:30:2f:e0:2e:eb:cb:07:2f:d6:cd:78:18:b5:4e:
8e:5f:c7:cb:9c:e7:d8:44:d6:da:b2:b6:97:39:ce:
22:59:7a:78:41:cc:6d:e8:36:65:c4:dd:73:96:9e:
d3:62:56:a1:27:dc:87:ee:b1:a8:cc:b7:d8:ee:b2:
a1:dd:0a:d1:8c:1a:b0:f5:a9:74:3a:d8:e0:cc:3b:
c8:b3:8b:95:52:d5:47:35:47:b2:00:55:7c:80:7e:
c7:6d:c9:e0:5e:47:ae:90:d4:b3:83:26:b6:d7:9a:
f0:69:68:f8:e7:eb:62:73:36:44:1c:55:e7:fa:43:
91:3d:e3:57:f5:40:45:c2:d7:60:2c:e6:78:93:96:
52:39:45:87:0b:e5:d0:7e:97:37:a4:1e:b1:7d:7e:
bd:66:cb:dd:eb:06:df:00:2b:bd:aa:b5:8a:2d:24:
4b:25:cf:c8:8a:08:e8:fd:30:51:54:31:73:98:6d:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:71:FF:DA:22:96:4B:3D:1C:13:72:08:2A:2E:B0:5A:1C:22:1C:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E213987C88B111F086703C79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.152.0/22
154.193.158.0/23
154.199.14.0/23
154.199.68.0/23
154.213.160.0/21
154.222.132.0/24
Signature Algorithm: sha256WithRSAEncryption
69:27:3d:1a:6d:28:1d:84:9a:b3:7c:ef:0f:4b:61:82:be:83:
f1:86:16:c1:8d:a8:ef:93:2d:a4:41:52:dd:b4:cc:2d:2e:0a:
4f:af:ee:91:5e:60:46:cf:10:60:5d:22:dd:44:97:af:53:7e:
17:31:e6:d4:e7:d9:ee:b0:bb:69:11:19:2e:c4:24:7a:9f:8b:
2d:da:0c:2c:41:d3:ca:83:cd:fa:af:20:f6:f9:36:96:15:4f:
c6:a6:2b:40:b3:11:6a:b3:6c:5f:3c:e7:00:62:9c:af:11:79:
59:60:d6:8a:d1:29:d3:78:b1:d5:54:e0:b4:40:e9:25:c6:88:
86:c1:8f:a6:9d:22:e6:82:a9:d5:cf:16:3f:27:65:69:b7:ed:
b2:a6:a2:c8:46:65:a7:b7:b2:3e:12:02:9e:7e:f3:83:9e:b2:
05:d9:ae:1c:a0:eb:3e:25:8a:07:84:ef:72:5f:d2:ff:cf:e3:
54:ed:0e:04:d8:93:9f:fb:11:5b:39:9e:9d:cd:0a:6a:e5:20:
1c:33:b4:39:cd:32:74:0c:9f:81:64:37:9b:a9:36:91:b2:7b:
8d:37:13:e1:87:d1:e5:f6:0d:d4:27:33:f6:d7:de:c4:bb:b6:
a8:9f:7b:e0:b1:9a:20:08:ee:fd:57:a4:07:83:72:f5:aa:ae:
9c:16:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:41:49 2025 by rpki-client