Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E969922288EB11F0AB3BD3EADAE4EC9C.roa
File: E969922288EB11F0AB3BD3EADAE4EC9C.roa (raw, json)
Hash identifier: Yw6A3fAKnetqVtuEo0Et6Fm0Hk4tYZeqr95c3j1hO94=
Subject key identifier: DF:4C:BF:C3:FF:12:5D:EE:E2:08:47:8E:66:86:6F:E2:39:E3:DB:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E969922288EB11F0AB3BD3EADAE4EC9C.roa
Signing time: Wed 03 Sep 2025 17:32:07 +0000
ROA not before: Wed 03 Sep 2025 17:31:56 +0000
ROA not after: Wed 10 Sep 2025 17:31:56 +0000
asID: 46071
IP address blocks: 154.209.6.0/24 maxlen: 24
154.209.7.0/24 maxlen: 24
154.210.203.0/24 maxlen: 24
154.210.204.0/24 maxlen: 24
154.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105788 (0x19d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 17:31:56 2025 GMT
Not After : Sep 10 17:31:56 2025 GMT
Subject: CN=68b87b97-67ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:4e:0e:a1:a4:70:84:95:07:24:cb:0f:b0:
cf:2c:c1:ff:bc:db:2e:3d:85:ba:c5:7d:b5:48:86:
e4:55:b8:49:77:4b:3c:14:eb:82:a6:23:78:a4:58:
bd:7b:64:8f:8d:7c:73:ef:89:82:95:e7:44:a0:76:
88:21:47:bc:34:7a:1e:29:81:82:26:52:a5:32:7a:
bb:5a:46:e2:6f:6c:22:0d:9e:52:73:cf:05:33:2f:
06:78:26:df:ef:77:90:71:f8:ca:06:e4:b7:53:b9:
b7:a9:68:34:94:2c:09:c4:0c:09:3b:26:ba:1d:4f:
50:2e:35:53:6f:a9:25:7e:ed:dc:09:7a:88:72:c2:
11:3d:7e:77:03:50:bb:a6:f8:3e:20:94:2a:d7:5a:
2e:a3:46:ba:54:19:97:e0:c3:6a:0b:40:ad:ae:78:
9e:bc:af:bf:af:77:b7:6f:bd:90:e5:6d:6a:85:30:
b0:87:b7:5d:8f:70:3e:ec:8e:3b:08:9d:24:51:85:
31:c8:16:2e:ae:45:ef:ca:c0:81:c8:be:9f:82:a3:
be:38:07:96:26:ab:8e:2c:c7:5d:09:8f:76:6d:29:
e8:21:43:63:28:1d:fe:59:40:0a:9f:76:f4:c9:99:
92:6b:5c:52:b2:aa:7c:d1:c2:2d:bd:4a:a4:02:d3:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4C:BF:C3:FF:12:5D:EE:E2:08:47:8E:66:86:6F:E2:39:E3:DB:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E969922288EB11F0AB3BD3EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.6.0/23
154.210.203.0-154.210.204.255
154.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bf:1d:83:f1:5f:b0:72:0b:c4:8e:a1:91:6e:6a:fa:84:d7:
d3:c5:dc:60:ba:16:63:28:ec:63:fb:9f:52:d8:46:dc:87:9c:
12:3d:44:b0:28:0e:5e:82:29:f8:2e:1e:63:94:fc:9b:be:40:
4c:0b:eb:4c:cc:f5:3c:2a:93:3c:0f:9e:01:7b:36:5f:32:ea:
f8:4f:6f:02:13:37:6b:de:de:f6:20:83:e3:89:17:11:d5:59:
8f:f0:90:42:c0:ab:6d:93:bc:2c:e9:2d:70:73:64:9e:4a:0a:
1d:b2:a5:83:01:8a:83:10:e8:9e:35:f9:6b:53:23:0d:81:32:
08:16:c3:c4:64:2b:d8:7b:09:bb:4b:0e:77:d1:7b:3d:6b:7f:
a8:82:a7:03:ee:66:e9:02:cb:bb:57:aa:ab:6e:be:8a:d8:2b:
be:26:2d:49:b1:8d:31:dd:fd:c2:f8:10:4b:78:aa:99:45:63:
15:e0:44:9e:a5:8e:a6:de:a1:04:56:85:3a:6d:54:53:9f:12:
7e:b7:58:26:2c:30:7f:4f:15:14:7e:26:a5:74:b0:66:31:33:
18:cd:ee:8b:75:a8:f4:ad:1a:10:93:12:af:6d:61:05:b7:50:
c4:d0:b8:b9:e4:2d:7e:5a:88:3b:26:9c:f7:37:21:4e:8e:5c:
6e:55:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:12 2025 by rpki-client