Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB9E22CB35E11F0B138E0B0DAE4EC9C.roa
File: 0BB9E22CB35E11F0B138E0B0DAE4EC9C.roa (raw, json)
Hash identifier: VI8jCgS7AstX77vLAYxdIn5Q2f+LRL4/a9566Brg2LM=
Subject key identifier: E4:12:93:6C:41:9A:4E:13:3A:6A:43:A6:CB:6F:13:FD:87:09:4F:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A567
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB9E22CB35E11F0B138E0B0DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 17:54:56 +0000
ROA not before: Mon 27 Oct 2025 17:54:50 +0000
ROA not after: Mon 01 Dec 2025 17:54:50 +0000
asID: 62240
IP address blocks: 154.194.75.0/24 maxlen: 24
154.194.76.0/24 maxlen: 24
154.194.77.0/24 maxlen: 24
154.194.78.0/24 maxlen: 24
154.194.94.0/24 maxlen: 24
154.194.95.0/24 maxlen: 24
154.194.96.0/24 maxlen: 24
154.194.97.0/24 maxlen: 24
154.194.103.0/24 maxlen: 24
154.196.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107879 (0x1a567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 17:54:50 2025 GMT
Not After : Dec 1 17:54:50 2025 GMT
Subject: CN=68ffb1f0-765e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:44:1d:5f:86:97:87:dd:cb:bb:25:ba:4e:
55:dc:dc:c8:0c:6d:b9:51:b8:c8:ea:fe:d5:6b:c5:
42:3a:ee:db:38:41:da:b6:ec:2d:37:ea:f6:67:c8:
71:93:fd:63:7f:6c:77:17:2b:cd:60:ac:22:df:45:
d4:40:d7:d2:83:b7:28:0a:d9:16:18:4c:d1:77:ba:
5d:90:54:bb:05:fe:36:14:ac:82:d8:6b:20:1d:26:
03:82:63:80:6c:42:0a:92:48:a2:d9:1b:9d:a6:95:
5a:d8:3a:e3:25:3c:2f:5b:ed:ea:35:fc:54:4d:26:
0d:ba:dd:ac:19:8a:07:fd:d9:a5:aa:fc:ac:58:cc:
ff:cc:07:4a:a6:6d:2e:68:0e:73:ce:3d:f8:1d:0a:
73:4d:92:3f:e8:95:dc:83:80:65:75:9c:cb:84:a8:
93:8c:d2:ff:3e:f5:4f:87:97:7f:ab:d5:33:17:91:
5f:de:28:6d:47:fd:e2:af:33:a1:13:ea:da:a6:73:
3d:85:dd:72:96:cf:3b:22:fc:8a:7a:c1:71:9d:9c:
7b:12:47:19:10:f2:f5:5e:53:91:93:aa:06:1a:91:
53:9f:eb:72:f2:2e:13:25:9f:9b:fa:69:fe:14:0c:
a5:49:d0:40:76:5c:ce:c4:fb:b2:9b:38:f1:e0:94:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:12:93:6C:41:9A:4E:13:3A:6A:43:A6:CB:6F:13:FD:87:09:4F:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB9E22CB35E11F0B138E0B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.75.0-154.194.78.255
154.194.94.0-154.194.97.255
154.194.103.0/24
154.196.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c2:2e:ae:3e:22:26:56:23:10:51:ce:34:7a:a7:63:26:22:
73:eb:57:3a:09:17:ff:13:f7:8b:10:a9:72:de:8e:18:4b:ba:
3d:84:5c:23:ad:37:b1:ff:b3:96:eb:cd:ed:44:98:87:f2:23:
d7:7c:51:ba:59:91:cf:2a:09:62:da:cc:fa:ec:ff:41:a5:79:
32:78:0b:79:a8:5e:09:33:64:13:2a:28:d8:9f:96:42:f4:30:
37:cf:35:7f:61:cb:00:66:be:1d:9c:3a:dd:41:38:e9:c2:48:
18:1f:6b:ae:86:d8:8e:93:64:b1:29:e4:40:37:16:1b:3f:5b:
7a:72:01:49:a3:42:8b:4a:f4:14:19:68:56:83:23:7f:16:26:
28:64:b9:9d:45:a2:52:6f:b0:31:75:67:c9:0f:41:21:d0:0d:
36:c9:91:44:af:71:fb:13:f8:ed:d7:5e:a0:14:a2:f9:c2:bb:
c7:64:ff:2b:ce:72:ed:9a:b1:e0:f8:38:1b:4a:52:11:e5:43:
1f:de:6a:3e:a8:1e:16:a9:f3:80:96:42:e0:e9:42:6a:aa:6c:
cd:b8:af:48:20:01:15:16:32:45:d3:98:f6:34:5e:6a:92:c9:
2f:3c:19:d6:d3:89:47:ac:06:01:59:3c:b6:79:00:c0:43:a7:
a8:f6:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:01:26 2025 by rpki-client