Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B366F6CE7C1111F09320388DDAE4EC9C.roa
File: B366F6CE7C1111F09320388DDAE4EC9C.roa (raw, json)
Hash identifier: 99r9K91WVtZRNhXqyH6IFVVlqq2LzKEJ+V8J3iAb+7g=
Subject key identifier: 9C:81:58:F4:EE:F8:CA:C8:22:9B:15:96:65:51:2D:32:C4:57:D0:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019201
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B366F6CE7C1111F09320388DDAE4EC9C.roa
Signing time: Mon 18 Aug 2025 08:59:52 +0000
ROA not before: Mon 18 Aug 2025 08:59:47 +0000
ROA not after: Fri 19 Sep 2025 08:59:47 +0000
asID: 136501
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.199.0/24 maxlen: 24
154.92.206.0/24 maxlen: 24
154.92.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102913 (0x19201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 18 08:59:47 2025 GMT
Not After : Sep 19 08:59:47 2025 GMT
Subject: CN=68a2eb88-8779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:1b:3b:94:85:d1:10:b2:a6:7e:9f:bb:92:
9d:11:eb:3f:a1:ac:93:93:7b:d5:fb:93:d3:fc:fc:
01:af:1e:ba:da:5f:87:8e:be:67:cb:b5:60:9e:b1:
36:6e:69:35:93:36:e7:91:6c:ca:ca:ae:6f:bd:77:
28:86:11:dc:31:ec:66:7b:e5:6f:8e:3a:49:17:fa:
46:7a:a9:94:01:85:a0:5b:96:a6:1c:43:a0:cf:64:
f6:2c:f9:c3:f4:f2:f5:a8:ea:a8:3d:c6:3a:ff:4e:
ef:00:16:72:e8:40:a7:3e:d4:ff:4b:d0:82:e3:88:
d2:36:d4:f1:32:7f:e1:0f:6a:07:6d:1d:73:69:a1:
93:25:62:54:2e:b1:e2:44:37:f1:97:a9:30:cb:73:
23:7c:94:23:cd:c8:e9:c3:d3:5b:b3:21:f0:4e:45:
9b:13:c6:76:69:96:0b:e9:89:4b:ab:a7:81:5d:0f:
97:1c:71:8b:e4:da:93:33:f7:08:f9:5d:2a:57:69:
81:dd:e9:4f:48:cc:74:ba:d6:9a:45:68:f0:51:77:
9f:41:16:3a:45:79:06:5a:0b:27:d3:a3:b6:d5:e3:
db:28:44:85:5d:87:15:47:53:08:cd:82:c6:c4:ea:
8e:b8:2b:2d:6d:03:d9:d2:72:87:d4:00:f0:06:21:
b3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:81:58:F4:EE:F8:CA:C8:22:9B:15:96:65:51:2D:32:C4:57:D0:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B366F6CE7C1111F09320388DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0/21
154.92.206.0/24
154.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
be:3e:ca:bd:4f:6f:e0:6a:7d:6e:1e:4d:f0:0b:c4:68:a4:ff:
36:65:cf:8d:a0:06:d8:f0:bf:24:b1:ee:ce:d1:e3:7d:49:d1:
71:ea:dc:f8:ea:0f:d2:ff:d9:0e:7c:70:db:f9:44:78:6b:7c:
a7:ff:56:3a:2a:83:94:86:cf:b4:b3:b0:14:61:b7:ad:b5:ae:
3a:46:14:0b:7e:5a:5c:cc:75:2b:ef:3c:1b:ca:b7:85:59:98:
d4:cd:ef:c8:52:64:60:4e:34:33:ea:ed:42:03:3e:2a:6b:be:
bf:8f:ef:26:d9:90:df:fd:3b:a9:42:9b:bd:a5:d4:a2:c8:9d:
3d:39:c6:18:e8:96:08:f9:0f:22:c6:c6:15:f9:f2:79:a4:35:
6c:c5:a7:5c:fb:c7:f5:0b:32:6e:57:03:53:bb:35:26:6b:54:
b5:04:2a:ff:70:05:cf:c7:73:0c:af:5e:ab:e0:a3:5f:ee:09:
4a:92:d9:d2:f5:b6:59:c5:fb:c7:3f:c3:7d:8b:a4:0f:a1:b1:
1e:b8:32:d2:da:f8:1f:cd:14:1f:64:b9:91:cb:af:c3:47:89:
60:a5:40:65:32:d7:52:9e:22:b7:78:d7:0e:81:69:aa:96:df:
4b:11:16:ab:a7:d1:d2:ab:16:4f:ec:15:b9:43:4b:1a:36:cb:
1b:4f:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:56 2025 by rpki-client