Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F117049687D311F0851BDADEDAE4EC9C.roa
File: F117049687D311F0851BDADEDAE4EC9C.roa (raw, json)
Hash identifier: Ai8thRxoO1FTUdoVziPLmz8oYlv8iWgAlza2qlvTfw8=
Subject key identifier: F6:5D:30:84:36:1E:F0:0F:A9:D0:F7:A4:A4:01:18:6A:08:35:7A:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019BD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F117049687D311F0851BDADEDAE4EC9C.roa
Signing time: Tue 02 Sep 2025 08:08:00 +0000
ROA not before: Tue 02 Sep 2025 08:07:55 +0000
ROA not after: Tue 07 Oct 2025 08:07:55 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105426 (0x19bd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 08:07:55 2025 GMT
Not After : Oct 7 08:07:55 2025 GMT
Subject: CN=68b6a5e0-0871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:03:94:68:50:d5:7b:58:c5:9e:6e:02:5c:
3a:ab:b5:5e:e3:64:40:54:f9:99:39:ec:4d:de:2c:
0d:c1:d4:4d:c5:19:dc:15:b8:37:10:33:45:f0:cb:
0c:e3:44:78:2e:8a:ff:c2:40:84:95:db:7e:48:08:
cf:91:ca:f8:ba:eb:6f:33:49:22:ea:9d:81:59:06:
68:f6:f5:0a:84:92:12:85:ec:81:b6:65:3c:b4:53:
0f:8a:95:31:67:ca:5d:2f:1b:5e:a7:15:2c:d0:2e:
e9:6d:19:a3:bd:0a:f7:3a:9c:10:ed:fd:4c:c0:df:
6d:24:d2:71:14:db:8d:25:d9:f3:01:00:c3:f6:e5:
82:f2:a9:25:2b:b7:d0:6f:fc:a3:bf:41:5d:c0:15:
99:9a:ad:57:57:04:12:8a:8f:dc:67:27:d7:21:aa:
03:6c:e2:09:8f:3f:a5:a4:04:6c:06:29:36:e1:1e:
d3:75:38:1f:26:53:c1:da:f1:af:df:12:63:bb:e7:
5c:b9:f3:70:92:e5:4b:f6:eb:48:04:0e:59:97:20:
ea:18:5b:70:8f:e1:f4:85:34:90:97:90:4f:b7:42:
b9:70:d1:9b:1b:01:33:af:a4:9b:9c:19:5d:f3:45:
27:09:67:a2:ed:9c:bb:64:2c:53:a8:c1:41:89:9a:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5D:30:84:36:1E:F0:0F:A9:D0:F7:A4:A4:01:18:6A:08:35:7A:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F117049687D311F0851BDADEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
154.197.116.0/24
154.197.124.0/24
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8c:ae:dc:b5:04:f5:04:91:7b:22:cc:f6:bc:4f:8e:75:d3:
de:37:92:84:a9:7c:a6:b5:e3:cb:09:c1:02:5c:ab:bf:e2:a3:
f2:44:77:bc:0c:64:c0:00:fa:d2:cb:90:1b:06:e3:da:96:ac:
ee:a5:6c:3d:e0:4e:06:81:3b:92:a1:06:2b:ee:13:e1:28:a3:
73:a7:c5:78:ba:09:c5:a1:74:80:b7:01:6d:70:3b:24:2d:a0:
c8:89:5d:0d:ba:8a:f8:8d:3e:ed:b4:02:e2:38:41:d2:e7:03:
9b:12:b7:d9:e5:80:16:5a:21:ec:d1:53:ea:19:89:e8:a1:90:
63:51:d6:27:a3:51:86:4e:31:21:04:ca:cd:38:d4:18:80:6a:
9f:52:89:18:ae:6c:70:b9:fe:7b:fd:70:c3:81:1c:44:fc:9d:
a9:be:eb:b2:26:81:b9:10:d7:7a:15:72:d1:d9:c3:91:53:1f:
6a:19:d7:88:e7:36:da:93:f4:e8:36:e4:86:7e:24:60:a4:f7:
a7:db:80:25:e4:69:d2:3a:9a:cc:c9:57:e1:00:c6:16:ee:c0:
4e:0c:2b:b9:2c:38:9b:fc:85:54:f1:79:f7:eb:30:0f:35:e9:
5f:95:ca:69:cc:bc:51:8e:f0:e9:27:8f:80:a8:45:2b:72:1d:
4f:08:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:33 2025 by rpki-client