Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F40E9736832811F082BCE7DEDAE4EC9C.roa
File: F40E9736832811F082BCE7DEDAE4EC9C.roa (raw, json)
Hash identifier: oBxUJYb66iTvSFKACgF/6S8vyIDiwHGD3uMh3qzw08Q=
Subject key identifier: 19:83:E5:B7:5A:54:EF:84:B5:8C:FA:9C:5B:AD:74:10:6C:82:C7:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01985D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F40E9736832811F082BCE7DEDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 09:33:57 +0000
ROA not before: Wed 27 Aug 2025 09:33:51 +0000
ROA not after: Wed 01 Oct 2025 09:33:51 +0000
asID: 203020
IP address blocks: 154.195.32.0/19 maxlen: 24
154.198.128.0/19 maxlen: 24
154.212.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104541 (0x1985d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 09:33:51 2025 GMT
Not After : Oct 1 09:33:51 2025 GMT
Subject: CN=68aed105-3dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:23:b8:57:35:a3:74:21:df:66:ac:9e:dc:
e5:4c:16:3d:1e:c3:aa:d7:c3:7f:24:33:cb:af:3a:
70:41:cd:76:1c:62:95:20:5b:9a:84:87:ae:be:ea:
f0:8f:3b:66:47:65:fd:98:2c:32:fc:26:18:4d:1c:
26:aa:8b:25:ce:88:27:59:7f:99:f5:cf:dc:79:03:
cb:87:b2:46:ae:0b:ac:44:6c:26:b3:97:2e:78:d3:
ad:7e:b5:67:3c:f3:7a:3f:ff:f6:94:de:3a:e7:5c:
d1:bb:53:13:82:0f:6f:97:88:3d:9b:45:8a:c2:08:
72:24:78:6c:aa:39:29:97:c9:7f:0b:9b:80:49:d2:
bd:46:e5:54:79:fa:d9:63:a9:11:54:f6:48:00:6f:
a7:2c:ec:a8:35:92:cc:20:8e:a4:aa:bd:8b:21:59:
79:0d:36:e4:f1:fe:43:b9:27:82:06:ed:19:52:7d:
2a:c6:30:c6:5f:44:d4:1c:a9:07:cc:2b:52:b3:a6:
35:67:f2:b5:68:d5:6b:7e:dd:f3:db:39:3b:84:df:
53:32:d1:26:f2:ac:36:ba:cf:f7:95:6c:fe:61:bf:
8d:f4:84:6c:d6:91:60:92:b5:1f:ce:78:69:5b:5e:
09:7b:3e:67:04:f6:e5:cb:85:bb:c4:0a:94:13:ed:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:83:E5:B7:5A:54:EF:84:B5:8C:FA:9C:5B:AD:74:10:6C:82:C7:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F40E9736832811F082BCE7DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.32.0/19
154.198.128.0/19
154.212.32.0/19
Signature Algorithm: sha256WithRSAEncryption
16:23:e3:48:ac:09:55:12:ac:72:4e:3c:e1:26:15:d7:68:2d:
92:73:aa:36:f8:9e:15:76:84:98:ee:bb:92:27:56:3e:d4:69:
e9:50:ef:3c:5c:e8:ec:0a:fc:9d:50:7a:d0:99:8c:da:7f:08:
b8:b3:51:a8:b2:0d:3f:99:e0:50:2b:8b:89:f3:8e:3f:0d:6d:
70:06:31:46:b4:95:5a:95:bb:4e:a1:fe:94:95:27:f1:d3:06:
c5:d2:51:62:45:76:ff:c5:03:8e:20:91:53:d9:9f:86:64:bb:
e6:0d:8c:0e:01:fd:ff:2a:d6:ed:f2:cb:e9:34:2a:80:5a:4e:
2a:20:3c:3c:af:11:5c:89:c8:2e:95:98:ea:b3:16:a5:9f:ac:
54:34:ed:98:8a:3b:c2:3d:3b:fe:73:e7:e1:7e:ef:b9:58:02:
f0:d5:c8:61:38:96:f4:13:f9:56:65:e1:1c:f7:1b:a8:4f:55:
bd:85:0a:5d:0e:cb:47:8b:04:7f:64:3e:7d:41:2e:50:28:32:
8d:b0:ac:24:65:06:0d:a1:b9:39:af:75:a9:e8:0e:2a:03:67:
88:14:fb:1f:c0:1d:55:3f:6e:21:b6:83:a1:d6:26:c4:29:69:
d0:5f:6a:27:44:f5:1c:dc:79:92:d2:88:2e:8d:cf:0e:e5:e4:
fc:ac:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:45 2025 by rpki-client