Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/402A8D9A7E9311F093ECB7F3DAE4EC9C.roa
File: 402A8D9A7E9311F093ECB7F3DAE4EC9C.roa (raw, json)
Hash identifier: VFbLneGU95mV1/qGlSISMUtHkq4NHx0dAt6EcV++6xE=
Subject key identifier: E9:CB:0E:58:4D:D1:A6:35:7F:20:08:FE:A7:6C:8F:2D:5B:B6:1B:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019374
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/402A8D9A7E9311F093ECB7F3DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 13:32:15 +0000
ROA not before: Thu 21 Aug 2025 13:32:10 +0000
ROA not after: Sat 27 Sep 2025 13:32:10 +0000
asID: 214143
IP address blocks: 154.223.248.0/21 maxlen: 24
154.223.248.0/22 maxlen: 24
154.223.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103284 (0x19374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 13:32:10 2025 GMT
Not After : Sep 27 13:32:10 2025 GMT
Subject: CN=68a71fdf-2874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:ad:e1:f9:16:98:f4:7b:bc:6e:8b:b8:c4:
f9:23:19:05:db:49:d6:5d:5e:81:49:65:9c:18:b8:
3c:97:b7:19:a7:88:46:ae:9b:7f:c2:0f:31:24:77:
58:c6:fd:d5:9f:55:b9:d7:12:c7:c8:b5:05:47:34:
44:36:ea:69:94:03:e8:91:fa:84:23:6d:cc:32:cb:
cf:55:c0:5e:54:a4:e4:31:a4:93:fa:54:31:02:9f:
de:86:e5:3a:2f:ca:c1:af:5d:8e:c5:89:86:44:8a:
c4:3d:79:45:a6:0d:62:10:59:64:59:af:cc:05:0f:
7a:07:8a:f5:42:ec:21:ce:8f:16:ac:d8:dd:99:7e:
22:a0:04:e5:eb:2b:f8:9b:25:a8:93:b5:1f:1c:f4:
58:a0:1b:1f:13:aa:23:9a:32:ee:0c:5e:24:f3:24:
4f:4d:f7:ab:08:bb:45:dd:9d:24:08:73:c8:bb:a7:
ca:54:46:93:da:59:b9:2d:18:2f:18:57:cb:74:0f:
a5:43:31:c1:27:89:33:43:c8:ed:af:d6:70:c7:2f:
78:a7:f0:8b:2d:1d:f6:88:be:e3:ab:25:84:48:4c:
9c:4d:ee:ab:a8:c1:de:0c:5b:e7:e9:2b:f8:0c:36:
96:9c:65:45:ba:cc:ae:22:a3:84:9e:96:f3:5d:74:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CB:0E:58:4D:D1:A6:35:7F:20:08:FE:A7:6C:8F:2D:5B:B6:1B:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/402A8D9A7E9311F093ECB7F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:04:23:eb:c9:23:a2:be:35:59:cc:8e:d4:31:b1:a5:77:e5:
6a:ec:7c:4f:51:1b:8c:8f:16:42:71:4d:c6:8c:39:95:eb:da:
22:c6:30:ea:46:e8:dd:7e:e8:81:1a:43:ac:a0:3d:5b:fa:2e:
f7:ff:c2:82:d2:27:dd:1f:d8:f5:c2:9d:1a:87:4e:40:56:c2:
d7:2d:61:ec:c6:f0:67:de:44:12:4f:95:53:6e:c7:78:5a:30:
e8:ec:21:26:37:ba:e5:31:f9:96:b2:65:7a:a1:9c:5d:25:77:
71:a7:2b:16:91:24:5b:36:f2:5e:1a:25:e4:f4:f0:fd:e8:cd:
28:77:d9:0e:60:d3:50:d1:1b:17:18:9a:c9:e3:0c:2f:c6:fb:
80:6e:11:dd:d5:5b:4f:a5:1f:e0:f9:79:ca:6e:6a:8f:c6:e7:
87:28:32:d0:d8:f9:30:d0:65:5b:c3:be:b5:c5:54:c7:ba:97:
d3:ec:a0:89:fe:6a:9c:5c:f6:44:dc:71:94:d5:f6:07:e1:2b:
22:22:25:3d:b0:8d:af:d9:01:81:67:04:c7:56:fe:1f:3d:a9:
17:a4:49:99:0c:01:cf:f9:e1:fa:d4:ca:23:4d:a3:8b:81:27:
cc:84:8c:ae:78:5a:5e:99:74:c4:68:3b:4b:79:38:5b:ab:93:
da:c1:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:12 2025 by rpki-client