Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06FBF8F66F9311F0B2C53A98DAE4EC9C.roa
File: 06FBF8F66F9311F0B2C53A98DAE4EC9C.roa (raw, json)
Hash identifier: t5VVOR0hDbiVXxMJAhEivJ12YzMouH+r+6aArQpBMvY=
Subject key identifier: 3C:89:35:BC:48:AE:F0:A9:64:01:62:54:13:74:4C:D2:C1:00:86:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01902A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06FBF8F66F9311F0B2C53A98DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 11:22:52 +0000
ROA not before: Sat 02 Aug 2025 11:22:47 +0000
ROA not after: Sat 06 Sep 2025 11:22:47 +0000
asID: 141883
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.214.32.0/19 maxlen: 24
154.215.0.0/24 maxlen: 24
154.216.128.0/18 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102442 (0x1902a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:22:47 2025 GMT
Not After : Sep 6 11:22:47 2025 GMT
Subject: CN=688df50c-9c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:0d:82:7e:d6:4c:50:7c:17:19:eb:97:f5:
f6:e1:6c:30:8f:31:de:ab:37:f1:d6:a5:e2:08:67:
e1:c6:59:6e:2a:0f:a5:93:9d:40:dd:db:fc:0b:5c:
68:c6:fe:7c:e2:13:6a:b1:7e:c7:ee:71:f1:f4:88:
89:34:14:9e:2f:42:cf:1b:27:ee:bc:a6:84:60:57:
56:f5:6b:fd:3e:cb:18:e9:db:f3:30:6f:02:bd:0b:
1c:f8:30:91:b0:65:52:df:8f:e3:b2:ef:1e:2c:17:
2e:a1:2e:23:0c:56:f5:f6:d7:c2:a3:da:59:18:8b:
b7:5b:e7:d5:91:a1:67:0c:d8:ea:01:1c:2b:52:56:
4b:15:14:90:e8:ff:34:8d:0b:fe:74:af:1b:d6:bb:
d7:76:12:a0:10:0b:49:fa:74:1d:17:e1:20:ca:a9:
87:d6:32:6e:e8:a0:e7:ad:2f:98:ce:d0:35:ec:a4:
6a:31:cb:76:64:dd:c6:c1:d4:31:fa:bf:60:90:66:
55:75:35:f6:50:51:36:fb:9c:8a:9f:5b:a0:d7:ee:
40:3f:7d:b2:8b:cf:4e:da:45:99:26:1c:e0:5d:8d:
b1:57:99:18:94:96:9c:37:3a:31:42:6a:52:ed:0c:
97:db:34:b2:c5:5e:51:fe:18:6a:88:81:f2:62:14:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:89:35:BC:48:AE:F0:A9:64:01:62:54:13:74:4C:D2:C1:00:86:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06FBF8F66F9311F0B2C53A98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.214.32.0/19
154.215.0.0/24
154.216.128.0/18
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:fb:35:a2:0d:50:e6:6a:de:b9:01:54:60:74:be:29:90:9d:
6e:fa:09:08:8b:85:1f:51:46:47:e6:a8:05:5b:59:de:a7:fa:
7b:08:d4:72:c4:4e:d3:d3:c9:2e:de:1c:f1:53:03:04:e7:82:
f8:68:e0:14:ca:41:ef:13:84:f0:41:9d:d9:5e:54:41:08:5a:
a5:1a:cc:69:17:47:dd:87:03:fc:f3:fa:3e:b4:04:b0:c9:a0:
13:b0:c4:85:47:a9:c0:39:d1:48:71:ec:6a:56:7f:68:6a:85:
16:2d:f4:54:56:b6:2d:bf:af:38:85:98:6c:92:cc:b2:54:17:
b0:49:c6:e4:16:77:ea:11:8e:8c:4b:7d:5a:52:f0:18:8e:ce:
e7:f5:67:82:e6:d7:2a:d9:ae:fb:fe:29:5f:e9:f1:ca:0e:de:
c3:82:c9:21:cd:06:5a:82:b1:4a:31:6e:c1:04:04:3e:2e:a6:
98:e2:b9:c4:e6:2b:b2:fa:bb:e4:5e:42:9c:ac:7b:51:96:83:
f9:13:91:37:ed:b1:7e:38:95:99:5f:cd:82:31:08:b2:1d:62:
e5:9d:e7:f6:91:d6:6a:bf:9d:28:f8:5f:c2:a3:1c:d4:e2:db:
9d:a4:51:9c:71:a0:5a:fa:ea:b8:fd:99:5b:0b:bb:16:9e:34:
0a:4f:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:58 2025 by rpki-client