Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F487C0AC842711F0982281E2DAE4EC9C.roa
File: F487C0AC842711F0982281E2DAE4EC9C.roa (raw, json)
Hash identifier: r4VMZ97Wep4hjsjSJTOXPHHUZRoSMbwXMXxYEDIiGaE=
Subject key identifier: 7E:CB:3D:4D:43:FB:2D:84:E9:38:83:C3:37:77:07:BE:5A:39:62:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F487C0AC842711F0982281E2DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 15:59:19 +0000
ROA not before: Thu 28 Aug 2025 15:59:14 +0000
ROA not after: Wed 01 Oct 2025 15:59:14 +0000
asID: 44559
IP address blocks: 154.203.216.0/24 maxlen: 24
154.203.218.0/24 maxlen: 24
154.203.219.0/24 maxlen: 24
154.203.220.0/24 maxlen: 24
154.203.221.0/24 maxlen: 24
154.203.222.0/24 maxlen: 24
154.203.223.0/24 maxlen: 24
154.203.224.0/24 maxlen: 24
154.203.225.0/24 maxlen: 24
154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.205.224.0/24 maxlen: 24
154.205.225.0/24 maxlen: 24
154.205.226.0/24 maxlen: 24
154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104954 (0x199fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 15:59:14 2025 GMT
Not After : Oct 1 15:59:14 2025 GMT
Subject: CN=68b07cd7-afbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:67:2f:bf:a9:7e:fb:c4:c7:d2:1a:3e:e5:
29:b3:d5:0b:c0:a4:6d:79:b9:af:7a:70:ab:ed:bd:
83:69:f7:51:bb:43:07:1d:0d:64:aa:cf:23:45:59:
d4:71:22:32:e2:d6:bf:54:ef:c1:38:41:c9:b9:a8:
9b:93:df:ee:fb:bf:b1:93:18:38:53:44:90:b4:81:
30:9b:43:3c:91:ff:8a:89:96:eb:9c:2c:d6:cf:0e:
68:bc:1f:72:ec:bb:51:e8:5c:ae:f1:50:c7:85:07:
fc:90:ee:6e:87:45:47:44:df:69:84:87:4e:7d:87:
ac:43:cc:02:3c:40:ad:1b:c1:41:19:68:fe:73:a6:
23:f8:fb:d0:96:88:c8:09:9f:04:55:39:69:bf:52:
5b:db:98:08:d2:71:40:c1:08:7e:d6:96:32:74:3d:
d8:26:42:95:2b:77:8c:a5:d2:73:12:ec:82:51:23:
1e:25:f6:07:8b:91:88:70:78:b3:4b:46:37:2f:4e:
5b:d3:85:d7:c3:3a:73:bc:68:02:d6:41:41:d9:87:
a5:ed:5d:5e:07:6e:20:6c:24:f2:37:0f:90:20:8c:
9c:18:24:63:54:28:e9:97:04:e3:58:77:21:80:76:
57:c8:eb:69:c9:63:96:b0:c9:3c:ea:25:9e:20:d3:
54:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CB:3D:4D:43:FB:2D:84:E9:38:83:C3:37:77:07:BE:5A:39:62:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F487C0AC842711F0982281E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.216.0/24
154.203.218.0-154.203.225.255
154.203.230.0/23
154.205.224.0-154.205.232.255
Signature Algorithm: sha256WithRSAEncryption
bf:88:4d:e3:f0:5a:06:20:ef:bc:03:1c:c9:1c:ad:00:41:64:
c4:56:ee:03:1b:ae:20:b3:c3:dd:e9:87:a4:ce:0b:7c:ff:01:
f0:8d:64:f4:43:93:f3:86:7a:03:76:37:cc:b0:05:fa:1c:31:
42:b2:f1:e5:79:22:6f:0e:30:d4:d4:05:90:1f:61:05:72:a3:
9e:28:ad:9a:f9:08:de:c6:00:7a:e1:79:27:91:9e:e6:71:49:
d8:2d:b8:fc:db:8b:27:3c:fa:eb:eb:50:77:7d:41:47:11:2e:
1c:7a:47:63:16:3a:4c:b4:7a:33:8f:1f:f3:80:a4:23:8f:c6:
66:bb:b5:60:6f:44:41:e5:07:1a:8d:91:63:e5:58:1e:ed:69:
03:60:92:49:07:e8:b9:85:a2:17:59:39:46:3e:d5:fb:38:31:
ae:5a:c5:2a:f2:ca:77:69:e3:b5:8e:7a:4c:b0:7b:bf:b2:22:
8e:0d:57:2f:62:dc:4c:05:e6:5f:52:93:de:49:f6:de:17:e5:
7f:57:2b:c1:6e:a3:92:1b:96:17:47:be:4d:9a:98:c3:85:e9:
ed:38:44:86:d7:82:68:14:df:1b:bd:a3:0b:25:64:e1:cd:7c:
1f:cd:d7:f0:d4:f3:06:d5:b6:2f:04:0b:10:59:72:f7:37:62:
af:f5:bb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:33 2025 by rpki-client