Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/159835108CA711F0889029ADDAE4EC9C.roa
File: 159835108CA711F0889029ADDAE4EC9C.roa (raw, json)
Hash identifier: K6Yq2uTv2fJMnRoTmMt4MK7sEkm6bVBvvI1W5h9TLGE=
Subject key identifier: 59:6A:97:22:B0:FA:45:34:6A:E5:86:57:4F:B1:F8:A5:FA:0C:6A:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019EC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/159835108CA711F0889029ADDAE4EC9C.roa
Signing time: Mon 08 Sep 2025 11:29:30 +0000
ROA not before: Mon 08 Sep 2025 11:29:24 +0000
ROA not after: Mon 27 Oct 2025 11:29:24 +0000
asID: 137899
IP address blocks: 154.219.96.0/19 maxlen: 24
154.222.16.0/20 maxlen: 24
154.222.16.0/21 maxlen: 24
154.222.16.0/22 maxlen: 24
154.222.20.0/22 maxlen: 24
154.222.24.0/21 maxlen: 24
154.222.24.0/22 maxlen: 24
154.222.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106181 (0x19ec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 11:29:24 2025 GMT
Not After : Oct 27 11:29:24 2025 GMT
Subject: CN=68bebe1a-5fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:57:c2:e5:b0:90:9f:57:a9:0a:2d:a8:c7:
9f:e3:b0:9a:87:0c:50:6b:93:e8:8a:7d:ba:40:e5:
20:e9:10:43:7c:40:73:c7:7d:c3:c8:ac:d5:4d:42:
d0:6a:46:8c:1e:5a:2d:22:9d:ed:46:d8:a6:b0:75:
0f:c1:5c:0c:6b:da:3f:58:d1:3c:31:c7:35:37:17:
26:ab:01:3a:cc:52:c1:59:bb:56:df:ff:b0:fa:14:
8f:70:b4:92:e2:e3:e0:f0:2e:f2:03:62:a1:af:57:
cb:3b:30:93:e4:90:3b:59:09:52:9a:e4:3d:fb:a3:
4a:f2:73:87:1e:d6:df:30:39:3b:4e:bc:c3:b5:f5:
23:90:36:b0:be:00:0d:62:ee:81:80:69:36:ea:34:
72:f8:2a:b7:45:0d:04:f5:d9:08:e9:2e:9c:a4:f6:
46:69:96:3c:af:12:63:9d:ac:98:45:57:ae:23:53:
bc:13:ee:87:1b:f2:92:4a:97:e4:2d:05:5a:9c:62:
8e:8e:72:89:77:91:39:23:4e:ec:99:72:30:67:1f:
7c:b8:94:f2:74:56:8c:1a:06:94:ac:3f:5a:a0:81:
bb:d3:71:df:72:df:66:57:69:24:ed:d9:24:d1:57:
08:cb:a1:70:82:d9:f9:a8:9d:eb:b3:6f:13:15:d7:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6A:97:22:B0:FA:45:34:6A:E5:86:57:4F:B1:F8:A5:FA:0C:6A:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/159835108CA711F0889029ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
47:a6:b3:27:d2:f8:18:ef:8a:77:9c:b6:a3:28:b6:55:39:81:
e8:70:6e:65:de:a2:0e:3b:ea:5f:0b:a9:a0:39:6e:fd:24:ab:
96:35:32:24:81:9e:96:e9:6c:4e:d3:7f:64:d2:d6:ba:ed:61:
72:bc:75:ff:6e:6a:7e:36:ac:fe:d7:67:86:5a:28:a3:08:c9:
cd:02:ff:da:63:63:44:6d:61:7b:e1:ab:79:5e:45:5d:03:34:
45:ae:bf:d1:8f:4e:a0:7a:4f:54:bc:43:0e:5f:f8:44:60:d6:
21:86:67:6f:a9:bf:b7:eb:47:2b:bb:17:bb:b3:8a:b6:02:47:
20:c0:a6:cd:74:01:3b:0e:c8:26:6b:19:d0:89:c5:19:06:14:
4d:30:13:a8:8a:c0:4c:14:9d:0d:b9:a0:53:16:33:7a:ee:d8:
8c:bb:17:06:5c:49:1c:bb:28:3d:ce:b5:11:0b:7a:a4:34:02:
39:9a:2c:67:85:24:b2:96:06:c3:74:b7:29:b7:49:5b:24:44:
28:94:23:67:bf:6d:ba:e9:88:7e:89:7a:15:dd:3e:1f:49:49:
b4:23:27:01:88:bc:bc:36:f7:98:af:f3:d0:4d:6a:9f:24:5f:
95:7d:43:a2:6e:a5:6e:7e:71:89:4f:d1:e0:4f:3d:42:65:ac:
f1:94:65:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:40 2025 by rpki-client