Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E794DFBE8CA711F0B00E85B3DAE4EC9C.roa
File: E794DFBE8CA711F0B00E85B3DAE4EC9C.roa (raw, json)
Hash identifier: TTHo7733vl71uPzxEk8Gr/pDTO5+r4Bs5waGiWe9vz0=
Subject key identifier: 46:BD:BB:3C:4E:08:ED:29:36:B8:3A:07:D7:0E:5A:2C:A2:46:1B:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019EC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E794DFBE8CA711F0B00E85B3DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 11:35:22 +0000
ROA not before: Mon 08 Sep 2025 11:35:18 +0000
ROA not after: Mon 27 Oct 2025 11:35:18 +0000
asID: 142032
IP address blocks: 154.219.96.0/19 maxlen: 24
154.222.16.0/20 maxlen: 24
154.222.16.0/21 maxlen: 24
154.222.16.0/22 maxlen: 24
154.222.20.0/22 maxlen: 24
154.222.24.0/21 maxlen: 24
154.222.24.0/22 maxlen: 24
154.222.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106183 (0x19ec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 11:35:18 2025 GMT
Not After : Oct 27 11:35:18 2025 GMT
Subject: CN=68bebf7a-6e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:7d:02:8b:8f:b7:82:1e:ae:db:ec:91:63:
f3:3f:c0:21:9f:b4:79:87:53:28:8b:e9:b7:c6:66:
98:ce:00:9b:1e:c8:ad:3d:5d:92:b2:9f:58:00:ce:
85:b2:09:a0:68:9b:c6:db:24:e6:0f:69:e8:93:92:
a3:c6:1c:37:5d:9d:ec:2a:8e:c6:71:dd:87:64:db:
96:09:c5:a7:ec:ad:cf:13:41:73:0c:11:f0:96:ee:
6f:de:67:86:26:f5:08:83:9d:67:85:7e:fc:a7:45:
db:8e:79:c6:9a:52:73:9b:56:4e:90:03:b0:14:4d:
60:11:2e:58:63:e5:c2:d3:cf:79:93:d7:a1:79:bd:
29:e9:d8:ef:27:41:09:08:1b:3e:c0:0d:97:c4:43:
d5:ba:4b:51:18:88:10:50:1d:7f:c2:c3:c9:80:b7:
0c:14:7f:2d:7c:90:38:cf:18:ab:7a:e9:6b:a9:35:
16:d8:5b:bb:51:1d:d3:69:b8:64:a9:66:cb:15:09:
4c:03:24:11:ac:4a:cb:a7:9c:1d:f6:b5:53:a6:da:
0b:bc:05:18:53:8a:e2:c2:4d:8c:42:42:b2:8a:25:
d6:dc:c7:96:21:d1:08:15:3b:fc:a3:d9:bb:6d:db:
09:ce:4e:cf:e4:93:53:df:ef:1d:70:28:ff:ac:0a:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BD:BB:3C:4E:08:ED:29:36:B8:3A:07:D7:0E:5A:2C:A2:46:1B:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E794DFBE8CA711F0B00E85B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:09:8a:7c:d3:9f:13:b6:66:28:f7:23:d1:cf:83:e0:a5:7c:
4d:4f:ab:79:a2:a2:3b:f3:28:0f:e5:13:ca:c3:23:3f:a2:56:
78:63:5e:3b:ca:86:0a:8d:c2:dd:ab:00:86:a1:97:3e:2d:bf:
f8:85:51:a1:57:f4:a3:7d:eb:3e:1b:7b:67:42:4b:eb:10:60:
91:51:e3:12:05:f5:b2:30:cb:0c:90:93:d3:3b:f5:36:6c:f9:
52:6f:97:ed:97:12:d6:5c:88:f3:20:0b:01:0d:f8:d4:9b:e6:
ab:87:44:c6:e1:d8:0b:84:11:6b:43:46:65:98:63:88:ce:bf:
96:0a:20:08:00:38:e5:be:39:27:07:d8:c1:8b:1d:30:6c:9c:
e1:cd:df:87:cb:b0:30:a7:fa:c8:71:82:1b:10:af:77:cc:a7:
9c:dd:f6:9f:12:7e:58:ef:32:e2:26:42:d0:03:f5:b5:d0:8f:
28:71:04:dd:ff:ae:70:b7:2f:e4:5f:19:e5:aa:a8:1a:1e:7b:
d8:ff:96:7b:2b:99:ec:1d:66:87:a4:c3:1e:a9:89:09:5c:11:
e0:f9:df:bc:00:0a:83:49:26:f5:a3:d3:4f:2d:0d:8c:0d:bf:
46:08:57:7e:dd:bc:69:6d:a9:ae:f3:ab:8b:4b:d3:42:4e:42:
7d:73:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:06 2025 by rpki-client