Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BD496ECAA7711F0ABAAF5C8DAE4EC9C.roa
File: 1BD496ECAA7711F0ABAAF5C8DAE4EC9C.roa (raw, json)
Hash identifier: qPXEwzff5Yf4kCPUeCU3H7hG0yyfRkZvkzoizh9G8XU=
Subject key identifier: F2:3E:E6:38:48:93:D1:A6:00:27:C0:1E:F8:15:36:97:EE:1C:C6:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BD496ECAA7711F0ABAAF5C8DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 10:01:40 +0000
ROA not before: Thu 16 Oct 2025 10:01:34 +0000
ROA not after: Sat 17 Jan 2026 10:01:34 +0000
asID: 135377
IP address blocks: 154.202.65.0/24 maxlen: 24
154.202.66.0/23 maxlen: 24
154.202.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107489 (0x1a3e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 10:01:34 2025 GMT
Not After : Jan 17 10:01:34 2026 GMT
Subject: CN=68f0c284-5a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:4b:d2:dc:55:32:d5:70:6b:11:21:15:29:
5f:28:64:1c:73:e9:08:26:8e:a9:d7:05:6c:37:71:
0e:fb:de:8a:79:a4:2d:c0:12:9b:2f:9b:f3:7c:5d:
09:a9:c8:1e:5f:8a:7b:d8:9b:38:40:ec:ec:62:67:
64:49:c5:3c:06:2e:73:1e:81:b2:cd:80:03:3a:e8:
39:0f:dd:37:1f:b6:76:23:de:8d:06:f7:44:72:bf:
07:d3:c6:f5:37:b3:0c:e7:13:1a:6a:56:b6:f9:d4:
c5:8d:59:04:f7:fd:15:f4:f7:9c:70:b8:60:c0:95:
d4:a4:c1:43:ab:e8:7a:11:ea:7c:b3:96:f3:57:5e:
76:f0:6e:40:46:1b:8a:1c:ef:92:ec:ca:87:7b:0a:
96:93:d5:dd:d2:ed:21:ac:ef:0c:ed:df:8b:32:0c:
4b:26:e8:cf:8a:76:71:36:bc:0e:24:4e:1a:85:d9:
68:be:09:33:57:5a:33:59:06:a1:1a:c2:99:c3:be:
d1:64:18:cf:31:70:c0:50:19:67:c2:79:b3:c8:fe:
89:6a:3c:96:62:4b:22:e1:b0:a9:72:6b:55:fa:2e:
53:6c:48:97:a9:a8:dd:7c:87:1e:a4:46:6d:fa:98:
25:de:34:90:97:17:16:9a:f9:54:e8:b3:6e:15:f3:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3E:E6:38:48:93:D1:A6:00:27:C0:1E:F8:15:36:97:EE:1C:C6:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BD496ECAA7711F0ABAAF5C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.65.0-154.202.68.255
Signature Algorithm: sha256WithRSAEncryption
a3:e8:8b:e3:2c:2f:3a:45:99:7a:46:9b:9a:41:b7:f1:50:9b:
6c:0c:bb:53:0f:bb:74:f0:58:f8:a7:dd:da:0f:b3:82:a4:41:
e4:cd:21:ef:e3:fc:d7:71:96:e6:2e:d0:50:05:55:0e:72:35:
14:ed:f5:93:62:27:fe:a1:ad:f0:89:20:a2:4b:fb:ee:a3:57:
42:6e:60:70:75:3a:05:ea:3e:a6:76:07:20:82:fd:da:b1:e8:
13:c6:9e:b9:15:b7:cd:85:be:a2:29:09:61:8d:f2:4f:1e:ac:
55:98:83:b3:ed:d2:44:b3:3d:61:b0:be:f1:f8:25:32:cc:58:
bc:96:4e:b5:50:de:08:86:43:e9:b7:46:df:54:d5:fb:7f:0b:
15:26:e8:79:b3:95:9a:80:69:d5:6c:8e:36:19:85:d1:26:35:
50:31:88:50:97:43:0c:09:46:33:a2:f8:f8:64:7c:8d:5b:39:
35:9f:29:e6:a3:a0:05:7d:74:f4:8a:6c:66:e7:35:c0:9a:2f:
07:c9:75:a8:a0:fc:fe:3c:3b:cb:02:1d:2b:71:a7:a5:05:b1:
8e:de:c7:5e:aa:6b:39:e5:1e:b3:c0:b6:20:ac:d1:7d:79:d2:
d7:95:62:1b:07:07:8d:f0:e6:3a:47:1b:aa:ca:ae:99:53:4e:
e1:c0:d7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:41 2025 by rpki-client