Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5248461879B911F0ADE862C1DAE4EC9C.roa
File: 5248461879B911F0ADE862C1DAE4EC9C.roa (raw, json)
Hash identifier: Lp4CTLJvNwBwZLkVe6Ti56hY/yvMnpr/0xy73yyUpbw=
Subject key identifier: 1E:71:40:59:C9:51:E8:1C:2C:25:6B:AA:57:D6:EB:BB:07:8C:3E:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5248461879B911F0ADE862C1DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 09:22:11 +0000
ROA not before: Fri 15 Aug 2025 09:22:04 +0000
ROA not after: Thu 18 Sep 2025 09:22:04 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102866 (0x191d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 09:22:04 2025 GMT
Not After : Sep 18 09:22:04 2025 GMT
Subject: CN=689efc43-e093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:3b:76:d5:44:0a:90:89:9c:a5:66:90:a9:
b3:90:1c:f6:b3:5d:4d:b3:fa:86:77:54:c4:2f:19:
c5:bb:63:e1:33:69:dc:de:98:bd:8a:a5:a6:3b:7e:
08:04:6e:72:75:14:69:ba:70:e9:37:54:58:b0:18:
fa:67:9f:3e:ad:98:de:62:20:9c:4a:15:ca:8f:f1:
93:eb:82:d0:4f:68:5b:39:7b:1e:6b:d0:f5:1c:86:
96:1f:01:09:65:c7:9f:58:7c:9c:d1:7e:e1:71:db:
2d:48:ea:eb:72:d5:12:92:34:ff:d2:53:42:ea:00:
47:32:cb:74:0f:e0:22:3c:6e:a9:a2:7f:b2:9e:72:
71:c7:57:18:11:01:3a:5e:03:a4:26:73:85:1b:be:
9f:84:7b:6c:fc:4e:d8:fd:e3:60:81:1e:a2:d1:34:
c6:9b:35:00:90:74:06:1e:3e:34:15:c8:01:ed:e3:
20:f1:a0:15:d9:0a:83:55:e6:fd:fa:05:59:06:2a:
56:be:2f:c4:84:49:a9:66:43:25:dd:0d:71:3e:3c:
9f:9e:9e:3e:24:75:9f:43:ee:19:b7:40:ce:0e:d9:
55:ce:e9:80:5e:d7:6a:03:40:ea:ac:85:93:1e:ac:
a0:b8:db:f4:79:2a:a9:a3:29:63:24:65:b3:b3:06:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:71:40:59:C9:51:E8:1C:2C:25:6B:AA:57:D6:EB:BB:07:8C:3E:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5248461879B911F0ADE862C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
154.209.160.0/19
154.214.64.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
bc:6c:85:0d:73:ba:50:95:af:76:8d:3c:36:7a:20:21:56:c3:
0c:e0:19:f1:fa:67:28:0f:97:0d:18:df:96:35:c8:62:1c:be:
38:15:a5:d9:29:db:1b:97:37:09:31:0d:30:82:8a:d5:66:16:
61:ea:27:b9:0e:08:d5:30:87:fd:a5:84:73:e9:79:a9:0e:f0:
be:57:b3:79:74:dd:c3:43:2f:4b:c5:ee:fd:e9:b2:b8:39:3e:
38:32:35:7e:9b:7a:35:e2:28:c7:7c:2a:98:6b:f3:fe:33:0b:
a3:b7:33:aa:31:8c:80:1b:f9:7f:8d:5a:dc:85:93:ec:fc:e5:
df:0f:9f:c3:e3:c9:a4:f9:e6:19:cc:72:0c:79:10:05:f6:45:
1e:d1:a5:31:d1:41:65:0d:8e:4d:e2:59:95:f3:c3:a3:e8:52:
70:4e:87:b0:fe:a4:9f:88:40:55:78:8d:9a:7a:b1:09:d5:9f:
75:d9:01:35:97:67:1a:a2:ed:67:06:16:ce:a2:c9:ca:00:68:
66:f1:fa:0a:b3:b7:24:cf:7d:f8:7b:7a:ad:da:35:e6:3f:a8:
db:c7:0f:ee:9e:dc:1c:f0:d5:e6:04:e6:0a:0f:e0:e3:db:a4:
17:f9:07:94:6d:84:2c:ea:a5:a6:3f:df:90:79:43:81:5b:64:
d7:5b:7f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:10:34 2025 by rpki-client