Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1539215CA4F211F0964E3DC9DAE4EC9C.roa
File: 1539215CA4F211F0964E3DC9DAE4EC9C.roa (raw, json)
Hash identifier: e5z8FPTXb/K8Zv40ERHDVoj2QrfSsDyXAeHr5DKoALk=
Subject key identifier: 44:25:2F:08:F1:8E:B7:D1:60:76:DB:75:2C:DC:ED:0E:BD:DA:89:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A306
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1539215CA4F211F0964E3DC9DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 09:26:50 +0000
ROA not before: Thu 09 Oct 2025 09:26:45 +0000
ROA not after: Sun 16 Nov 2025 09:26:45 +0000
asID: 22773
IP address blocks: 154.198.29.0/24 maxlen: 24
154.213.207.0/24 maxlen: 24
154.213.208.0/24 maxlen: 24
154.213.209.0/24 maxlen: 24
154.213.210.0/24 maxlen: 24
154.213.213.0/24 maxlen: 24
154.213.214.0/24 maxlen: 24
154.213.215.0/24 maxlen: 24
154.213.216.0/24 maxlen: 24
154.213.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107270 (0x1a306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 09:26:45 2025 GMT
Not After : Nov 16 09:26:45 2025 GMT
Subject: CN=68e77fda-bf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:08:94:48:6c:31:76:96:b6:05:f7:23:24:
70:fb:22:27:85:ca:79:69:cf:4e:47:57:6d:de:e4:
35:a2:bc:23:a2:72:eb:41:46:08:6c:cf:0a:0b:ac:
06:80:a2:e6:4d:54:f5:14:5a:65:5a:b4:ef:34:59:
6d:9f:87:0d:a2:f4:8e:30:97:d7:d5:dd:af:2f:58:
4f:2a:c4:73:4b:30:8c:c4:b3:35:02:4c:2b:c7:7a:
30:b4:7d:53:b7:39:4f:a4:72:52:dd:25:63:c5:2b:
86:2b:cd:3b:a4:91:4e:dd:29:e0:22:fc:2a:8e:86:
c6:fe:6b:ea:d1:e5:c5:2b:ae:f9:a2:9c:74:19:0d:
2e:13:91:2d:68:9c:9f:23:5f:c2:17:15:12:d1:90:
11:7a:ba:0b:47:01:92:55:b5:8b:93:75:c8:a6:d7:
9e:12:d6:b8:46:8a:f7:66:0d:ad:53:71:61:4c:f3:
ac:81:ff:90:fb:6e:ae:7c:04:74:9a:b7:02:2b:98:
c3:7f:05:f9:93:67:3e:15:88:d0:06:aa:4d:cc:cd:
bf:4d:2f:88:d8:bd:19:23:06:8e:51:38:a1:04:f1:
0a:99:1e:a0:27:2c:3e:32:1d:a5:3d:eb:6c:07:66:
2d:b1:ea:3b:36:31:59:de:e3:46:26:e4:b2:61:22:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:25:2F:08:F1:8E:B7:D1:60:76:DB:75:2C:DC:ED:0E:BD:DA:89:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1539215CA4F211F0964E3DC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.29.0/24
154.213.207.0-154.213.210.255
154.213.213.0-154.213.217.255
Signature Algorithm: sha256WithRSAEncryption
80:b6:32:0f:6d:f8:ac:87:27:0c:4f:dd:80:40:4a:d2:67:e9:
a6:a5:57:cf:3e:3a:5c:b3:c4:01:81:d7:ea:6a:1c:df:a6:57:
fd:6a:fe:b2:96:3b:a2:46:22:1c:6d:04:e8:6b:2b:d2:08:bb:
57:7e:c0:97:c4:29:50:39:80:ba:63:40:40:66:78:3f:fe:10:
62:3a:53:98:7f:76:10:2a:a9:f9:f4:39:e3:b9:08:37:b0:2c:
00:48:bb:e7:14:14:f9:fc:53:94:74:cd:a9:c8:39:93:80:e7:
95:03:5f:e4:81:d0:60:f5:f6:97:2d:9e:bd:cc:0d:1e:03:8e:
c0:46:d0:e1:3c:64:74:8b:51:07:17:90:00:22:ac:db:ae:85:
59:85:d8:d2:13:6a:85:10:c8:ec:bb:5e:5e:ec:fa:b4:fa:4f:
dd:78:9e:9f:9e:08:36:46:81:67:02:5f:ad:f4:fb:ff:ba:42:
4f:86:17:02:d1:bd:fd:c9:ca:a6:db:2c:35:6c:bb:5d:a5:8f:
45:9d:b3:8a:29:0d:77:57:28:82:65:f7:0a:19:6e:fe:df:c6:
d8:5a:0c:e9:4d:9b:ab:c3:c5:cc:94:08:fc:eb:2d:ca:81:d9:
6d:02:e6:49:49:de:fd:f4:da:1d:bc:42:63:a8:50:c6:01:b2:
a2:45:0b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:47 2025 by rpki-client