Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6226BC48D5511F0B044BFA2DAE4EC9C.roa
File: F6226BC48D5511F0B044BFA2DAE4EC9C.roa (raw, json)
Hash identifier: uNMHgCHo3DZQTGb4YSMYrGQHfLx5O7n/KfQ38/Kjgko=
Subject key identifier: 88:3D:A2:CE:65:1C:EC:7A:6C:6A:E9:E0:E1:E0:6B:1B:D4:17:46:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6226BC48D5511F0B044BFA2DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 08:21:19 +0000
ROA not before: Tue 09 Sep 2025 08:21:14 +0000
ROA not after: Mon 13 Oct 2025 08:21:14 +0000
asID: 209242
IP address blocks: 154.219.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106249 (0x19f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 9 08:21:14 2025 GMT
Not After : Oct 13 08:21:14 2025 GMT
Subject: CN=68bfe37f-5841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:a7:44:cc:dd:0b:96:64:d5:21:65:e5:03:
8e:de:19:ee:64:48:3f:54:8e:13:d7:b9:e9:ef:c9:
90:99:b7:df:28:20:2b:c3:54:06:fe:90:7d:6e:b0:
1b:65:6f:b5:d2:a0:ff:47:34:cc:cf:bf:b6:1a:66:
54:7e:61:b4:80:77:8e:74:a7:08:bc:5f:a2:88:78:
93:d6:9f:1e:b6:0e:e3:c6:70:9a:3d:f2:e1:f4:ff:
20:5b:b4:1d:69:1a:e7:b8:5a:a2:12:ac:a1:e6:01:
ad:fd:6b:d6:20:5a:b9:5d:3e:ff:a3:20:be:5f:c8:
42:a7:d8:d1:83:e4:d2:c7:f6:99:2a:c9:8f:67:d7:
a1:d2:61:7a:20:af:a5:b2:07:22:d7:56:40:c5:a1:
14:3f:62:81:a7:00:c9:24:cc:04:50:e5:c5:c8:f4:
69:15:76:f5:bc:f5:33:f6:ba:73:72:a8:70:5b:ea:
f6:c0:4e:12:50:30:20:28:5d:f3:e6:7b:ed:c9:d3:
33:e7:4e:bd:f8:fd:27:56:5c:4a:2a:a2:e7:48:8a:
6e:60:78:c9:0b:ac:9b:2a:41:5c:41:08:a6:ac:ae:
3e:02:51:f0:64:88:c6:0f:80:dd:aa:e3:4e:15:2e:
4a:6a:d3:48:39:79:61:a1:76:1a:26:38:c2:39:ca:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3D:A2:CE:65:1C:EC:7A:6C:6A:E9:E0:E1:E0:6B:1B:D4:17:46:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6226BC48D5511F0B044BFA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.2.0/24
Signature Algorithm: sha256WithRSAEncryption
05:77:02:c8:e3:7f:fe:f5:6e:1b:de:0e:45:e9:bc:33:fa:ff:
af:d4:f6:65:3c:a9:eb:72:38:9d:60:4f:cd:1c:2b:3f:21:02:
ca:bf:50:8e:c5:87:18:2d:c7:81:4f:33:9a:c9:89:08:20:96:
a2:49:e0:2b:60:d6:61:8b:8c:d2:0f:5b:46:8f:98:28:c7:ef:
7b:1c:d0:72:71:c2:63:61:67:f0:65:03:cc:ac:91:ef:ab:2c:
3d:44:2c:f3:49:00:66:93:75:83:16:2d:ab:b7:15:c5:b1:62:
6a:08:2f:9b:ac:26:3c:e7:21:a1:4e:47:87:38:74:13:f2:e8:
7c:6d:ad:8c:9b:70:67:26:c6:23:b1:c8:8e:c7:35:d0:c4:bf:
1f:2b:37:2b:de:f3:b1:e3:df:be:c9:86:10:b1:87:ee:8a:88:
d0:9d:34:40:04:e2:c9:b9:3b:56:2a:c7:a4:22:73:77:ae:08:
ee:fb:2b:b7:6e:54:50:2a:8d:b1:c5:1a:4f:4d:32:29:75:65:
bc:83:8d:2f:ac:ee:46:3c:92:ea:aa:d4:d1:4c:58:ca:7c:a9:
f6:a5:bf:d5:76:b3:03:8d:2a:aa:50:73:18:36:bf:63:b9:81:
92:bb:21:c2:53:e9:a7:77:5a:5e:04:be:a4:5f:60:b6:35:5b:
da:ce:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:49:24 2025 by rpki-client