Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BDEAC668B4D11F08553CAE1DAE4EC9C.roa
File: 1BDEAC668B4D11F08553CAE1DAE4EC9C.roa (raw, json)
Hash identifier: Y3LWnolx8TX0Rqmbinv+yZGVXsDeoFR13QED+FU6Jwg=
Subject key identifier: 06:A4:09:47:84:42:74:E5:C8:3C:4A:D6:38:6C:4C:F9:28:97:0C:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BDEAC668B4D11F08553CAE1DAE4EC9C.roa
Signing time: Sat 06 Sep 2025 18:12:55 +0000
ROA not before: Sat 06 Sep 2025 18:12:50 +0000
ROA not after: Fri 05 Dec 2025 18:12:50 +0000
asID: 18229
IP address blocks: 154.210.171.0/24 maxlen: 24
154.210.172.0/24 maxlen: 24
154.210.173.0/24 maxlen: 24
154.210.174.0/24 maxlen: 24
154.210.175.0/24 maxlen: 24
154.210.176.0/24 maxlen: 24
154.210.177.0/24 maxlen: 24
154.210.178.0/24 maxlen: 24
154.210.179.0/24 maxlen: 24
154.210.180.0/24 maxlen: 24
154.210.181.0/24 maxlen: 24
154.210.182.0/24 maxlen: 24
154.210.183.0/24 maxlen: 24
154.210.184.0/24 maxlen: 24
154.210.185.0/24 maxlen: 24
154.210.186.0/24 maxlen: 24
154.210.187.0/24 maxlen: 24
154.210.188.0/24 maxlen: 24
154.210.189.0/24 maxlen: 24
154.210.190.0/24 maxlen: 24
154.210.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106090 (0x19e6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 6 18:12:50 2025 GMT
Not After : Dec 5 18:12:50 2025 GMT
Subject: CN=68bc79a7-eaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:22:7e:fa:cc:32:39:db:2f:ac:55:d4:7b:
b0:2c:cf:89:23:ba:7a:35:71:4f:f8:4e:08:2b:c9:
68:16:4f:9f:18:9f:96:e1:01:cd:3d:2f:29:18:58:
b0:67:78:d7:1b:06:6f:da:ae:a2:47:41:3a:97:45:
80:01:f7:c6:2e:32:2a:8f:15:9c:e8:0a:a0:38:14:
21:09:90:c4:3b:4e:8f:90:ed:36:dd:24:be:c0:a0:
24:99:bf:81:49:29:68:83:00:89:7e:9f:63:67:a3:
52:fc:95:f0:48:e1:bf:bf:20:7a:a7:7e:60:12:36:
4a:6b:4f:77:ae:d2:c8:36:57:fc:90:a9:fe:7f:f7:
1e:b5:ce:19:c0:a4:4a:72:3a:2c:e9:3f:c7:85:84:
f0:38:77:ac:6f:5d:c6:8c:fb:33:c4:a0:9a:0b:25:
02:54:6f:58:20:e9:43:b6:ac:e6:f1:5f:0b:10:b2:
8b:76:48:f1:4c:0d:91:da:08:07:c3:b1:e2:f2:00:
bb:58:50:44:66:82:79:b1:1c:aa:b0:7f:12:83:18:
2d:73:50:4c:68:8e:6c:36:f4:46:f6:46:2a:ab:4e:
c9:3f:f0:ac:e3:4b:a1:1d:0c:c9:68:c8:ca:70:dd:
b6:97:89:4f:29:2a:e3:54:dc:5f:22:2c:bf:79:f4:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A4:09:47:84:42:74:E5:C8:3C:4A:D6:38:6C:4C:F9:28:97:0C:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BDEAC668B4D11F08553CAE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.171.0-154.210.191.255
Signature Algorithm: sha256WithRSAEncryption
70:83:0a:5c:d3:bd:d1:8e:bf:f9:55:d0:8c:67:df:0a:ce:91:
4f:a1:76:05:eb:a6:e6:de:b9:1b:64:ad:39:cd:9c:68:ac:b3:
ab:22:f2:6a:e8:5d:7a:c5:8c:1f:42:28:b9:2f:8a:50:af:c7:
a1:b2:4b:98:a3:46:95:40:65:26:bb:5d:39:6f:27:11:31:61:
33:bc:3b:03:db:c3:b3:39:a7:be:4f:70:01:f5:21:66:0a:45:
94:36:6a:38:0f:f9:c4:89:d9:e9:0c:e4:ef:6d:d0:63:92:9f:
88:93:08:f5:b0:ce:c6:67:22:49:c4:5c:a3:68:6d:0d:7d:1b:
06:f9:c2:ee:c5:38:61:9d:3b:ab:5d:86:fa:75:6d:29:ed:94:
91:60:71:bb:59:51:cb:f5:20:66:8c:58:27:e7:23:84:9d:ac:
3d:d5:ad:99:bc:1c:b8:5f:2b:98:a5:04:eb:cd:e7:6c:de:46:
9b:92:83:a5:16:fb:43:79:94:c6:53:6b:b6:d1:54:63:88:ee:
81:26:b1:d8:4a:41:56:1b:fb:17:97:c5:8d:d9:24:89:0e:dc:
f4:e4:9d:27:7d:34:ca:41:d2:3b:e8:e5:41:d0:75:38:d4:77:
7f:aa:0b:d9:d3:3c:f7:56:6b:a9:d2:6f:d9:93:d9:77:7d:a3:
cf:01:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:15 2025 by rpki-client