Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69C856A843811F08B7458D0DAE4EC9C.roa
File: F69C856A843811F08B7458D0DAE4EC9C.roa (raw, json)
Hash identifier: zF0rQnmU4KTEsH6DjFaRAa+6YmFq60ytoQgrNHSqmO8=
Subject key identifier: 8E:22:35:C6:15:8C:CF:09:53:C5:2A:4A:7C:93:7C:9F:AE:E7:68:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69C856A843811F08B7458D0DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 18:01:04 +0000
ROA not before: Thu 28 Aug 2025 18:00:59 +0000
ROA not after: Mon 06 Oct 2025 18:00:59 +0000
asID: 202656
IP address blocks: 154.219.217.0/24 maxlen: 24
154.219.218.0/24 maxlen: 24
154.219.219.0/24 maxlen: 24
154.219.220.0/24 maxlen: 24
154.219.221.0/24 maxlen: 24
154.219.223.0/24 maxlen: 24
154.219.224.0/24 maxlen: 24
154.219.225.0/24 maxlen: 24
154.219.226.0/24 maxlen: 24
154.219.227.0/24 maxlen: 24
154.219.228.0/24 maxlen: 24
154.219.229.0/24 maxlen: 24
154.219.231.0/24 maxlen: 24
154.219.233.0/24 maxlen: 24
154.219.234.0/24 maxlen: 24
154.219.235.0/24 maxlen: 24
154.219.236.0/24 maxlen: 24
154.219.249.0/24 maxlen: 24
154.221.52.0/24 maxlen: 24
154.222.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104978 (0x19a12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 18:00:59 2025 GMT
Not After : Oct 6 18:00:59 2025 GMT
Subject: CN=68b09960-9efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:82:9a:b2:63:2c:6c:df:aa:e3:fe:a5:6b:
5b:f2:db:10:91:9e:09:c9:e6:01:5b:57:54:27:89:
dc:42:39:07:e5:d5:51:fd:04:00:6b:e6:ce:f3:ab:
92:44:af:7c:f7:9b:3c:14:c2:47:ff:5c:c0:bf:4b:
a9:75:9f:f1:de:6f:12:b6:92:72:c5:96:c0:52:dd:
08:51:a1:95:d4:64:0f:bc:f2:b1:8a:1d:0c:ae:35:
58:ef:3c:fe:45:9f:d5:f4:d1:bd:61:90:43:93:b2:
f8:da:1b:39:77:f1:dd:a0:06:4f:08:48:51:8a:88:
e5:ad:74:76:09:d3:1c:f0:56:20:43:81:4f:41:c7:
22:96:bd:5d:f1:84:bf:d0:fd:b2:60:ae:c4:6c:8a:
22:e2:6f:0a:41:92:fe:fa:41:45:36:73:40:3c:ce:
b3:3c:cd:92:07:20:bc:b3:bf:dc:99:82:30:4b:6d:
75:66:86:79:a8:1a:26:bd:62:33:25:90:20:14:e5:
19:e4:1a:a4:80:ac:0a:fe:e4:84:57:8c:25:df:7e:
fc:22:7e:a4:0c:e3:00:05:f0:67:4f:cd:ff:f1:3a:
ef:99:5d:ec:dc:9b:e6:50:0c:4a:a5:7e:3f:a2:df:
c0:ac:90:8f:ce:5f:a6:79:46:22:ff:68:56:a7:50:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:35:C6:15:8C:CF:09:53:C5:2A:4A:7C:93:7C:9F:AE:E7:68:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69C856A843811F08B7458D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.217.0-154.219.221.255
154.219.223.0-154.219.229.255
154.219.231.0/24
154.219.233.0-154.219.236.255
154.219.249.0/24
154.221.52.0/24
154.222.197.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0c:ed:65:4c:59:9b:22:e0:8b:0a:64:30:c7:61:92:e8:17:
5d:a7:ec:20:90:a3:58:7f:86:81:a5:1d:7a:fd:77:9c:aa:d8:
e9:19:a7:f0:1d:7e:cd:cd:22:eb:9e:01:da:ff:c7:f9:54:9f:
56:17:0f:c0:02:73:26:74:94:1e:56:3f:61:67:40:0d:e5:ba:
45:1f:d3:59:56:df:ab:e9:35:ec:52:56:d9:2a:31:58:41:ba:
fa:22:63:bf:ae:d5:a4:6e:39:d4:7b:98:8a:8e:6c:fc:09:69:
d1:38:36:37:37:65:9b:51:b4:02:cb:c2:50:5a:99:cc:93:02:
52:89:64:80:bd:ff:6c:e8:0c:2b:b5:92:ad:a2:bf:b4:0a:2d:
04:24:67:bc:29:f5:37:76:85:65:50:c0:a3:1a:9f:74:c9:08:
13:d4:98:f7:74:bf:86:76:c9:98:87:f3:d3:05:6b:6a:1d:dd:
dd:df:3a:7e:db:f5:ec:08:52:4f:7c:af:e2:62:58:73:36:ab:
db:d9:91:c2:8c:b8:37:33:ec:e1:79:cb:a2:f9:e4:61:c4:cf:
e2:b7:01:8b:2d:35:dd:9b:fc:6a:c8:4c:c2:e9:f0:b3:89:78:
72:0f:87:81:37:f8:3c:80:f3:70:06:7a:34:1f:cc:ef:c5:fa:
38:38:df:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:36:58 2025 by rpki-client