Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B0D3E5AA4E511F0A961D3F3DAE4EC9C.roa
File: 0B0D3E5AA4E511F0A961D3F3DAE4EC9C.roa (raw, json)
Hash identifier: cLgogOuQTgI3+ijG6WDn6QrC3YdMFF9MX4Amow2gQbw=
Subject key identifier: 9E:AF:21:1B:A1:F9:10:57:52:40:0F:81:E4:55:EA:C2:AD:91:E6:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B0D3E5AA4E511F0A961D3F3DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 07:53:29 +0000
ROA not before: Thu 09 Oct 2025 07:53:24 +0000
ROA not after: Sun 07 Dec 2025 07:53:24 +0000
asID: 139646
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107246 (0x1a2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 07:53:24 2025 GMT
Not After : Dec 7 07:53:24 2025 GMT
Subject: CN=68e769f9-3b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:cf:54:cc:18:9a:7b:ca:d6:d2:b6:40:14:
79:d1:ca:b9:c5:40:bc:ef:52:84:b6:76:06:fb:88:
8d:bc:66:c7:77:9c:29:c7:95:ff:1c:3b:b0:a3:65:
fc:96:59:6b:73:ae:cc:e8:e5:b6:40:c1:82:9e:7c:
26:71:c8:24:15:64:a6:36:06:23:20:ca:33:c4:00:
3f:97:20:12:78:b8:9d:56:30:c0:2e:1a:42:6d:84:
bb:8f:6e:e8:ed:14:2d:d5:7d:58:13:c7:c7:ef:3f:
d4:05:93:f5:49:12:0f:9f:b2:00:49:01:21:4c:be:
e7:16:75:6c:40:a9:71:a4:ea:e2:42:62:38:c2:d7:
28:21:61:f4:e2:ca:70:42:37:57:bd:16:76:50:f3:
25:3b:58:d8:d5:f6:b9:2c:6d:b4:13:93:a0:5d:46:
69:02:61:a9:62:8a:59:3a:b6:66:7c:a1:56:5d:bb:
60:cd:92:8e:ac:31:f6:65:7b:57:8a:f4:fa:8b:23:
f6:57:64:be:06:1b:e2:f1:ab:af:80:0e:1f:db:20:
73:b3:af:08:24:ff:bf:bd:0e:83:1b:fb:bc:b0:6c:
e8:56:3a:4d:6c:a8:c7:81:f8:ae:80:ca:ac:1a:9a:
01:55:b7:ac:71:c8:0a:36:d1:ae:36:f2:7c:a0:2a:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AF:21:1B:A1:F9:10:57:52:40:0F:81:E4:55:EA:C2:AD:91:E6:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B0D3E5AA4E511F0A961D3F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a2:1f:58:e2:00:d0:da:65:fd:37:01:db:5f:6e:f4:d2:06:
89:31:87:72:5a:85:33:39:f3:a0:d4:69:05:82:1b:7c:cb:50:
bc:05:e2:b2:ed:dd:f8:ae:ba:64:5a:84:73:40:27:de:7a:fb:
54:72:48:7d:e5:a2:e9:ee:1e:e3:d0:a5:a8:e0:36:3e:57:6d:
4d:ab:db:52:67:57:31:83:5c:80:91:45:61:db:a9:e5:e7:8b:
df:62:61:56:cd:c2:51:47:d5:7c:62:94:fb:3c:dd:d8:e5:36:
43:b4:25:97:83:ac:95:0c:bd:64:95:9a:f0:38:ee:45:98:5e:
00:e5:75:3b:ad:53:d6:59:79:e7:f6:36:42:1c:12:20:25:4b:
4e:0a:bd:bf:a5:55:4c:13:4f:44:7e:2d:97:83:3c:71:64:78:
3a:01:e3:4f:a1:77:2d:b0:5c:9d:5a:15:cf:52:1b:f5:25:e0:
77:67:46:9a:f5:51:7e:fc:05:c9:05:32:fb:9f:81:4b:56:96:
07:73:88:1e:d8:90:fc:ec:a2:d0:3a:6e:70:f1:3c:96:79:34:
e8:cd:d8:aa:2c:a5:93:5c:7a:02:22:3e:bc:47:9d:48:f2:b7:
83:8f:ab:58:75:22:17:b9:a8:5d:bb:d1:bd:c9:c5:bb:67:6b:
95:9b:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:38 2025 by rpki-client