Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3DFD686801F11F09AAE8AA2DAE4EC9C.roa
File: B3DFD686801F11F09AAE8AA2DAE4EC9C.roa (raw, json)
Hash identifier: DChN9Ygexx1HLj09LFwQv1cnDzXGtVnrR7Q149faLUU=
Subject key identifier: FB:64:74:4D:0C:8C:20:AE:1F:6C:31:6D:AE:BF:1C:50:1F:F5:4E:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0195B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3DFD686801F11F09AAE8AA2DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 12:50:10 +0000
ROA not before: Sat 23 Aug 2025 12:50:06 +0000
ROA not after: Mon 29 Sep 2025 12:50:06 +0000
asID: 135983
IP address blocks: 154.200.32.0/24 maxlen: 24
154.200.33.0/24 maxlen: 24
154.200.35.0/24 maxlen: 24
154.200.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Aug 2025 00:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103864 (0x195b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 12:50:06 2025 GMT
Not After : Sep 29 12:50:06 2025 GMT
Subject: CN=68a9b902-0d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:f3:29:d6:0e:c3:38:68:b6:b4:89:12:5d:
ec:db:1d:16:94:9c:20:8d:18:9a:9a:a8:b7:ee:9a:
07:f7:52:84:3a:9c:8b:97:8a:a5:a3:c5:3e:22:05:
df:60:b0:25:f8:b4:de:0a:3f:92:bd:26:44:41:b2:
08:6d:54:eb:26:65:ed:c6:52:aa:b9:77:42:7b:db:
33:c7:6e:8c:fd:13:84:83:67:f5:ae:55:15:41:98:
b5:d2:19:c1:76:a0:97:f2:91:98:98:a8:52:9b:f0:
57:4c:b7:fb:7c:25:ef:83:9c:0d:65:7d:28:9b:83:
bb:33:8a:be:81:ed:ed:10:f8:ef:96:d9:6a:00:24:
8e:bc:16:61:26:d7:87:77:e0:9c:51:81:11:a8:c9:
08:0f:23:7d:90:12:30:18:56:53:f6:a3:67:2e:75:
0d:97:f2:06:5c:84:32:42:25:d4:7b:d5:05:cf:b8:
ce:46:a9:14:43:59:1d:bb:af:16:4b:79:b2:12:9a:
02:ef:80:75:4a:0e:83:67:24:51:94:8d:ec:a5:3a:
21:a2:70:9d:94:01:50:9f:d7:5d:b3:ff:7e:ca:fc:
8c:14:51:57:11:61:a8:32:44:6a:13:8b:5b:03:5c:
e2:42:26:c0:ed:7d:16:dd:b5:7d:a2:9f:e7:8f:7a:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:64:74:4D:0C:8C:20:AE:1F:6C:31:6D:AE:BF:1C:50:1F:F5:4E:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3DFD686801F11F09AAE8AA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.32.0/23
154.200.35.0-154.200.36.255
Signature Algorithm: sha256WithRSAEncryption
4a:7b:04:0a:85:77:1c:6e:5a:01:74:cd:ff:ee:65:68:00:ac:
19:dd:f4:16:7c:c7:16:20:a3:2c:e3:e6:4d:6b:0b:03:96:af:
6e:16:ef:c4:8e:df:d7:91:43:f3:0a:59:8f:1e:f3:d6:d8:0b:
e9:6e:9f:da:e3:47:4c:cf:ed:c2:3a:5d:e8:c8:1c:a3:7f:9f:
40:86:53:e2:c3:75:be:95:42:a7:04:bb:9d:2c:01:4c:97:a7:
ed:c6:a0:fc:43:5f:79:57:9b:06:65:cb:a0:3b:6b:23:8b:2f:
4c:f8:32:60:42:21:61:74:91:ca:4a:ef:3f:39:07:90:c1:49:
ed:5b:6a:c7:c8:69:3d:c9:c2:b4:94:17:87:9b:68:15:79:68:
6f:0b:bb:29:13:02:4e:81:ea:32:5b:ff:b3:9b:74:87:0b:19:
b8:88:5d:c0:35:fa:c7:b4:50:8e:84:5d:18:13:64:80:1f:96:
5a:01:dc:83:80:f4:ec:5c:07:31:4f:75:fa:05:73:ee:ba:cd:
ee:66:e6:3c:69:c8:7d:df:f6:56:e0:13:41:4f:16:6e:fe:a0:
35:6b:26:69:cb:b5:39:76:ad:1d:80:06:68:7f:46:58:06:fe:
62:ef:2d:21:4e:61:61:61:58:94:b8:24:73:d2:a9:58:05:03:
00:c2:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:15 2025 by rpki-client