Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ADE67AE6FF611F0B2F80D97DAE4EC9C.roa
File: 8ADE67AE6FF611F0B2F80D97DAE4EC9C.roa (raw, json)
Hash identifier: AYgul71Q/vv4YezCieYyD3syQVd3IcMppwpYqC7SbWE=
Subject key identifier: 87:F0:6E:D3:3B:6F:9B:89:2D:ED:40:28:B6:4D:40:CA:94:8A:A0:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019092
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ADE67AE6FF611F0B2F80D97DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 23:15:13 +0000
ROA not before: Sat 02 Aug 2025 23:15:09 +0000
ROA not after: Mon 13 Oct 2025 23:15:09 +0000
asID: 25818
IP address blocks: 154.91.204.0/22 maxlen: 24
154.91.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102546 (0x19092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 23:15:09 2025 GMT
Not After : Oct 13 23:15:09 2025 GMT
Subject: CN=688e9c01-7233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:d2:11:0f:f4:02:a9:e7:b5:2b:e0:f1:ae:
86:b1:61:31:3b:35:79:c2:16:5b:e7:d4:15:39:c3:
39:77:95:cc:b7:47:b8:6c:14:f4:31:ff:47:45:ac:
51:b0:59:b4:98:3e:d9:42:0d:ec:bf:be:1a:f5:b9:
a7:65:78:09:a3:88:52:11:a2:2d:7d:06:fa:d8:89:
29:6f:f4:7a:94:33:71:71:91:61:d8:9a:98:7e:22:
32:15:75:79:77:b0:3e:b6:57:f4:47:36:a2:18:b8:
d5:3b:33:41:bf:35:ee:05:c7:cb:dc:67:7a:c5:0e:
1e:83:67:ac:0d:15:a6:1e:1e:73:c7:35:86:9d:5f:
69:6c:ed:a6:d1:f0:ef:7d:3a:17:22:cd:6e:68:44:
a8:62:65:8f:85:db:4b:62:28:18:66:78:9b:1e:93:
ed:95:4e:7a:1d:57:4d:8f:5d:0d:9d:d8:f7:03:d6:
d4:1c:d7:b6:bb:c6:d5:94:0b:1a:c0:e4:60:3c:93:
e8:1a:d4:68:5d:b7:3a:80:29:b1:65:ea:d4:ad:a1:
c8:ae:98:a8:a3:69:d2:e4:98:4a:20:06:e8:a3:18:
42:74:71:47:37:3b:9b:08:79:a9:61:10:ef:be:4d:
95:21:33:46:82:1c:2d:72:40:00:a6:d7:81:1b:98:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F0:6E:D3:3B:6F:9B:89:2D:ED:40:28:B6:4D:40:CA:94:8A:A0:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ADE67AE6FF611F0B2F80D97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0-154.91.223.255
Signature Algorithm: sha256WithRSAEncryption
b7:43:cd:d4:0d:ab:ee:ab:2a:2e:28:d5:00:19:09:54:e5:23:
fc:08:b6:d4:cb:cf:f4:7e:a0:8f:b4:ce:6a:3b:34:f1:c8:f8:
7a:7e:5a:ca:52:43:ef:1d:fd:6e:d1:b2:1d:7e:8f:0c:33:d6:
31:49:6c:17:cc:12:53:04:16:9e:e6:95:22:0d:2d:68:65:ef:
ec:6d:10:b5:45:20:6e:67:20:b1:bb:ee:88:06:53:07:82:93:
d7:9e:51:05:df:b5:2c:c9:5f:be:c3:45:f0:d2:75:ca:fa:78:
68:e9:e8:79:91:47:b6:2d:9d:fd:95:3d:14:e4:61:eb:08:11:
a2:f5:cd:dc:63:66:75:a4:3f:cd:69:23:5c:68:a5:c8:da:2b:
04:1c:c6:bf:75:b8:7f:d5:87:f6:d1:f3:6e:74:fb:e4:bc:7a:
75:be:b9:7c:bc:a1:f9:97:66:04:c0:ea:a3:f1:d6:0d:5a:cc:
0b:ba:24:f3:7b:3a:11:36:6c:65:d0:96:eb:8b:40:c5:8c:d3:
6b:c0:22:f6:64:ca:e8:90:b2:bb:14:54:cc:94:cc:35:be:87:
6a:82:f5:92:71:b1:ed:32:0c:2f:96:9d:b8:00:b4:be:0d:d7:
0d:44:ea:0c:59:44:8f:9d:bb:82:e0:66:ed:23:46:4c:00:de:
6f:2b:36:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:01 2025 by rpki-client