Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA39BA447E6911F0898A86E6DAE4EC9C.roa
File: CA39BA447E6911F0898A86E6DAE4EC9C.roa (raw, json)
Hash identifier: xXkmZ+NtZITOEn31c/+0Sa4J4mnWPrRgTkrO2Lg9S0M=
Subject key identifier: EC:91:44:65:BF:B9:E0:D3:6A:4E:04:79:15:D6:80:6A:1C:60:3D:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0192F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA39BA447E6911F0898A86E6DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 08:35:28 +0000
ROA not before: Thu 21 Aug 2025 08:35:23 +0000
ROA not after: Wed 05 Nov 2025 08:35:23 +0000
asID: 150750
IP address blocks: 154.208.41.0/24 maxlen: 24
154.208.42.0/24 maxlen: 24
154.208.43.0/24 maxlen: 24
154.208.44.0/24 maxlen: 24
154.208.45.0/24 maxlen: 24
154.208.46.0/24 maxlen: 24
154.208.47.0/24 maxlen: 24
154.208.48.0/24 maxlen: 24
154.208.49.0/24 maxlen: 24
154.208.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103152 (0x192f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 08:35:23 2025 GMT
Not After : Nov 5 08:35:23 2025 GMT
Subject: CN=68a6da50-8b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:ce:55:56:83:53:5f:2a:c1:92:10:a0:3b:
8a:d2:9f:97:e2:7f:0d:6b:d2:25:82:9c:52:1a:e6:
0a:70:e0:f1:37:7d:e6:b9:09:0c:85:d8:0a:06:08:
e4:f2:e7:e0:b6:44:14:51:75:88:6e:dc:90:f4:8b:
77:38:61:72:d0:a0:92:c8:65:24:a4:06:19:22:49:
f1:4d:f7:98:a6:81:db:9b:8f:63:bc:5d:02:18:cd:
e8:37:bf:b7:4a:7a:de:f1:f3:32:ca:1b:61:3f:ea:
1f:b8:a1:20:1b:6a:7f:7f:f2:2d:98:4b:12:80:cd:
f4:21:03:b4:eb:ea:ee:e7:1a:54:ed:f1:0f:b3:6e:
45:97:70:c6:6b:d4:80:d4:fa:71:c0:f2:73:8c:fd:
51:0d:a5:ea:b5:5a:b5:a4:57:b1:5b:71:b1:40:79:
c0:05:0f:2e:87:f2:5b:78:bc:34:20:5b:34:4e:1c:
57:01:b8:62:1d:3a:44:f6:3f:7d:7e:7b:0c:09:b0:
73:b8:01:9e:68:36:50:c1:21:1d:52:d3:3a:29:5b:
df:a9:ae:9b:bb:08:6f:47:de:b2:52:c5:e7:d9:a5:
51:f7:13:65:66:39:39:7c:8d:ce:3d:4b:e0:a1:b1:
f8:77:22:10:22:d0:2a:18:55:c0:fe:a0:55:ad:c0:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:91:44:65:BF:B9:E0:D3:6A:4E:04:79:15:D6:80:6A:1C:60:3D:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA39BA447E6911F0898A86E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.41.0-154.208.50.255
Signature Algorithm: sha256WithRSAEncryption
66:3d:71:2c:fe:5b:2c:8c:08:16:df:9f:62:e5:45:95:bb:ff:
2c:cf:c7:85:86:29:4b:ea:61:50:75:1c:cf:3c:d0:f6:08:75:
d8:d7:84:97:13:a2:48:fc:88:05:8f:e3:c5:17:21:f2:39:d5:
b0:8f:b3:cf:3d:6d:e8:90:ea:1f:76:79:79:ce:0a:45:f6:24:
06:96:4d:0d:b0:dd:7a:8d:c6:e2:dd:54:36:b6:3e:78:65:d3:
31:06:c8:45:05:89:56:c3:3a:75:cf:95:92:37:f5:67:ac:f3:
38:9d:c9:8d:68:f4:a5:98:be:9c:0f:7b:1d:5a:cf:90:45:66:
ff:2d:5e:ff:82:de:82:e4:36:8f:91:11:6c:82:7f:72:4b:1b:
72:d8:29:74:c7:86:83:6a:94:dc:b2:2e:d4:3b:d5:e0:44:9a:
a3:95:0a:38:d8:91:fc:85:89:d2:67:db:b6:57:a0:40:6c:ed:
71:b1:78:b8:74:bd:d2:dc:61:fd:bc:f7:6d:ef:d0:af:66:4c:
0f:1f:2b:42:80:f2:88:68:93:19:c7:ca:dc:4e:53:96:5b:ad:
15:52:2d:28:0f:5c:e1:d2:cd:2b:fa:6f:a0:4a:f3:84:85:8b:
2e:0b:ac:b8:bf:67:0e:dc:3b:36:0f:9e:a3:c5:85:12:40:9a:
de:d3:c6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:53 2025 by rpki-client