Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB9AD7E667B511F0920905E2DAE4EC9C.roa
File: FB9AD7E667B511F0920905E2DAE4EC9C.roa (raw, json)
Hash identifier: X/gE0dNBfDHJZ3oOSeavvRFztha4fZFM9Dwpl3oC744=
Subject key identifier: AE:68:8D:16:A6:03:A7:0C:5D:FB:E9:B6:34:D1:50:69:4F:4E:E4:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB9AD7E667B511F0920905E2DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 11:12:56 +0000
ROA not before: Wed 23 Jul 2025 11:12:51 +0000
ROA not after: Wed 03 Sep 2025 11:12:51 +0000
asID: 203020
IP address blocks: 154.200.110.0/24 maxlen: 24
154.200.188.0/24 maxlen: 24
154.200.213.0/24 maxlen: 24
154.200.220.0/24 maxlen: 24
154.200.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102170 (0x18f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 11:12:51 2025 GMT
Not After : Sep 3 11:12:51 2025 GMT
Subject: CN=6880c3b8-dd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:9b:35:8f:a7:ff:2f:c6:15:9f:50:c4:21:
37:ff:b2:32:01:5e:5d:c5:2f:f2:47:96:c7:14:df:
cb:3d:43:96:50:f0:47:f5:9e:88:a4:b8:76:26:db:
65:75:75:74:93:5b:74:9d:48:29:69:88:dd:f0:99:
94:57:4f:18:12:1d:54:16:66:be:71:e3:ae:b4:ff:
7f:3b:cb:45:30:94:da:0b:53:3a:88:ab:f1:67:ba:
2b:95:0b:60:63:49:f1:40:88:a9:a9:05:44:cc:ae:
2b:54:e0:f1:9d:62:77:79:79:b8:c1:f1:94:49:13:
61:e8:58:0e:f3:58:08:95:63:9c:71:2f:95:94:de:
49:82:ba:ef:17:16:e7:84:58:58:b9:93:1e:38:c1:
0f:49:bf:6c:ba:d3:d6:fd:b6:0d:ac:45:28:36:de:
bd:02:77:2e:b9:48:3a:21:64:39:97:77:98:3c:a2:
a3:8f:b5:4e:a9:66:5c:11:e1:0e:6b:53:47:b7:d8:
68:f7:5f:91:e9:94:f4:4d:89:39:6b:e9:34:62:c4:
93:d4:c3:78:d5:76:33:e5:cd:4c:f3:b8:db:2d:1e:
49:e0:73:2a:57:2d:21:5c:a5:5c:37:d3:8d:7b:a3:
73:e0:35:08:8e:5b:87:88:a3:c2:98:5c:9b:70:57:
0e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:68:8D:16:A6:03:A7:0C:5D:FB:E9:B6:34:D1:50:69:4F:4E:E4:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB9AD7E667B511F0920905E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.110.0/24
154.200.188.0/24
154.200.213.0/24
154.200.220.0/24
154.200.245.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:92:71:24:27:d3:8b:cc:84:18:21:1c:6b:68:4e:ea:62:cf:
6b:b0:90:e1:e7:96:1e:7c:2c:96:7c:f9:64:3e:61:19:90:c0:
a7:a2:e3:ce:aa:ac:00:45:97:51:16:c9:77:bd:28:8d:0e:65:
57:32:bb:0e:e7:84:15:1b:ce:e6:0c:3f:c6:fd:6d:74:ac:76:
aa:a1:f8:81:48:3a:6e:1a:28:be:22:80:04:8a:cc:4d:13:67:
f9:8e:70:88:e8:3d:d0:19:8b:74:f6:d5:0a:fd:73:3a:aa:17:
33:48:89:a1:6f:9c:9b:71:df:1e:51:d0:78:9b:64:2a:3f:69:
e2:88:05:28:4e:27:78:c0:96:33:e4:f1:24:f2:e7:4a:fa:ef:
0b:bd:3c:11:87:79:23:1f:09:d0:7d:aa:d9:7c:c1:07:94:fc:
cd:36:36:c0:e8:1f:16:cf:18:ac:c8:bf:e9:e7:5f:c3:73:db:
b4:17:50:5d:17:78:d4:11:e5:cd:4e:68:ce:46:bf:8c:28:74:
7b:d2:56:67:7d:ac:64:e0:0d:77:fd:ea:cf:e5:d4:be:26:2d:
26:67:6c:ec:01:5e:2f:65:81:ee:db:f8:11:3e:d2:02:bc:08:
50:75:a0:89:4c:dc:ff:00:65:51:00:c8:81:c9:f9:c7:ce:59:
f2:9a:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:10 2025 by rpki-client