Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E05AA24E7C1511F0BCEECCA8DAE4EC9C.roa
File: E05AA24E7C1511F0BCEECCA8DAE4EC9C.roa (raw, json)
Hash identifier: P/dRM2j277KDPf6CWyjneKjtQE/SFekCEeUk0DyJtSw=
Subject key identifier: 5D:B9:EB:C2:28:F0:1D:4B:7C:DF:70:42:05:73:E1:C8:65:82:17:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019207
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E05AA24E7C1511F0BCEECCA8DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 09:29:45 +0000
ROA not before: Mon 18 Aug 2025 09:29:39 +0000
ROA not after: Fri 19 Sep 2025 09:29:39 +0000
asID: 9304
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.200.0/24 maxlen: 24
154.92.201.0/24 maxlen: 24
154.92.202.0/24 maxlen: 24
154.92.203.0/24 maxlen: 24
154.92.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102919 (0x19207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 18 09:29:39 2025 GMT
Not After : Sep 19 09:29:39 2025 GMT
Subject: CN=68a2f289-b5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:b2:2b:93:b7:3d:89:88:42:7a:78:31:a9:
43:97:ad:41:8f:04:ec:df:35:c2:9d:a0:25:f2:7a:
4c:a9:d4:83:f8:9a:8b:95:40:19:09:7f:4d:d5:c1:
78:fa:73:1f:77:44:1e:cf:81:3d:6e:bd:fa:cc:5b:
56:63:da:15:85:d5:b0:d7:6b:29:c3:b4:0f:7e:26:
d9:ca:db:3c:6f:23:74:cf:ae:62:7f:18:14:3f:9f:
9d:4d:4f:ee:3d:07:6d:b8:4b:01:7d:6b:85:3b:52:
e9:73:8b:d7:06:f3:1a:7a:6b:ad:71:69:51:e2:80:
4d:12:cd:2c:09:88:cf:fa:6d:dc:47:c3:04:fd:1f:
c9:43:20:02:b2:bd:d2:cc:18:44:d3:ea:e4:2c:bd:
07:cf:8c:e9:4e:08:c3:6d:02:54:51:bf:12:1a:a1:
63:b8:13:10:db:7b:8d:14:7b:61:ef:d9:39:89:8d:
14:60:98:f5:67:89:ab:c4:52:ec:1f:39:0a:be:31:
f6:89:5c:69:7f:d4:d6:3c:dc:d0:60:61:e9:d3:82:
aa:b0:67:f8:da:4b:17:e6:bf:53:34:99:de:86:26:
b6:65:7e:d4:e8:3e:0f:b8:ca:f9:4f:b7:14:98:ef:
b3:22:42:fb:40:c9:fa:66:c1:b5:d2:a4:d3:7f:3a:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B9:EB:C2:28:F0:1D:4B:7C:DF:70:42:05:73:E1:C8:65:82:17:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E05AA24E7C1511F0BCEECCA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.196.255
154.92.200.0-154.92.204.255
Signature Algorithm: sha256WithRSAEncryption
59:ad:5b:be:ef:15:92:52:d7:1a:ea:d5:96:56:fe:d7:7c:3a:
72:22:10:fa:e7:dd:a2:ad:ae:a7:09:b6:9d:e6:77:69:35:22:
bf:1a:3b:e4:b2:c0:d1:96:4e:0f:2e:72:35:d6:1e:d7:31:f8:
a1:34:37:18:2b:f3:bf:a8:50:58:20:7f:fb:d2:7e:ba:3c:a0:
74:45:2c:bd:0f:e1:37:3c:5b:1e:ba:7f:91:0f:7c:3d:86:d9:
59:d0:b6:61:e6:b6:2a:68:1e:b8:59:56:d7:a5:5e:76:92:f0:
89:1e:4f:88:59:96:f7:e9:aa:a4:9d:57:38:58:e5:88:ae:4b:
d3:e6:5f:54:42:90:99:12:6f:32:5d:f4:e6:0b:1c:5d:c2:15:
31:73:5b:1f:fe:ec:9c:c7:9b:f5:71:63:db:2b:72:73:8d:67:
ce:d0:16:48:7b:8a:ff:e9:46:a4:6d:cd:ca:d1:39:5b:98:fe:
8c:e6:ee:25:6a:dc:2d:fa:da:ec:63:38:37:89:10:ec:90:30:
f2:61:72:27:16:cd:5d:4d:e8:96:1c:00:52:59:0d:4f:dd:85:
db:4e:8b:1f:7b:ae:6c:0e:4a:ec:f2:2e:e2:33:ad:15:81:b3:
e0:49:89:0b:84:17:10:b2:e6:60:67:4b:74:d2:34:09:c9:59:
2a:12:bb:2f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:55:13 2025 by rpki-client