Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C6A3BB4A9AC11F0BA6F4BD1DAE4EC9C.roa
File: 1C6A3BB4A9AC11F0BA6F4BD1DAE4EC9C.roa (raw, json)
Hash identifier: dHnnkoIpSaEPTajdF7EA3XPmBsHoq4GwK5PkjWYUA70=
Subject key identifier: C5:45:34:13:71:74:5F:A3:61:25:D7:83:D1:44:A5:E4:F8:E4:AB:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A387
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C6A3BB4A9AC11F0BA6F4BD1DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 09:48:33 +0000
ROA not before: Wed 15 Oct 2025 09:48:28 +0000
ROA not after: Wed 19 Nov 2025 09:48:28 +0000
asID: 11404
IP address blocks: 154.205.48.0/20 maxlen: 24
154.206.32.0/20 maxlen: 24
154.207.144.0/20 maxlen: 24
154.207.160.0/20 maxlen: 24
154.208.96.0/20 maxlen: 24
154.211.192.0/20 maxlen: 24
154.214.16.0/20 maxlen: 24
154.215.16.0/20 maxlen: 24
154.216.16.0/20 maxlen: 24
154.222.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107399 (0x1a387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 09:48:28 2025 GMT
Not After : Nov 19 09:48:28 2025 GMT
Subject: CN=68ef6df1-15c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:0f:72:22:3a:13:68:21:68:3c:6a:f9:02:
a9:a2:73:d1:ba:f0:b2:fd:c0:c4:0c:97:89:88:52:
b6:83:bc:6d:c8:04:1c:0c:bf:94:f3:8a:28:65:fd:
b2:f1:ca:82:d5:0d:89:99:e4:2e:2c:69:f5:66:d5:
c0:e3:49:20:0b:ae:51:39:37:37:86:64:c1:92:9a:
26:3a:08:3d:0d:b4:a3:6b:04:26:6b:07:f7:65:ed:
d3:36:31:3c:4e:85:04:f6:d5:fb:16:7a:1f:89:8c:
8b:b8:b1:6c:bb:8a:0f:51:39:e8:80:61:ef:e1:d9:
f3:5c:46:a3:55:83:87:e0:d2:5c:51:00:2f:f4:e1:
1e:fd:35:ba:1b:19:41:bf:70:43:e5:79:80:95:72:
b4:6e:90:52:eb:b5:72:fc:39:6c:e0:88:ab:34:16:
5c:16:af:a3:55:df:8a:e2:c4:9e:1c:e9:df:41:f8:
bc:89:a3:74:c7:3f:18:7d:c6:d1:f8:39:dd:9c:ff:
39:80:b7:3f:ab:ef:34:bb:5e:84:e2:2d:0c:cf:67:
03:fa:b4:1f:fd:24:5f:03:a1:ee:b7:26:2e:e4:3a:
62:b8:51:af:0f:8b:d7:b9:f6:cb:06:98:86:cf:16:
c2:24:9e:ea:06:58:cf:b2:90:f2:01:51:ed:55:c9:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:34:13:71:74:5F:A3:61:25:D7:83:D1:44:A5:E4:F8:E4:AB:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C6A3BB4A9AC11F0BA6F4BD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.48.0/20
154.206.32.0/20
154.207.144.0-154.207.175.255
154.208.96.0/20
154.211.192.0/20
154.214.16.0/20
154.215.16.0/20
154.216.16.0/20
154.222.96.0/20
Signature Algorithm: sha256WithRSAEncryption
31:9f:fc:08:be:2a:0b:72:44:3c:43:fe:fc:45:e4:4c:e8:08:
f3:49:4e:81:4b:df:d4:b1:28:d0:99:11:44:4e:8b:6c:33:3d:
f6:e5:77:86:35:13:9a:6e:51:e4:91:9f:53:3b:88:ac:c9:8a:
bd:c7:af:b6:ea:6a:c6:29:5d:bd:9d:11:f8:cc:db:9b:fa:37:
30:ec:05:25:8d:6d:12:46:18:59:16:d5:e2:5c:19:77:e3:4a:
c0:cd:d7:14:06:29:26:70:b3:4b:b5:4f:4d:cf:2c:60:e7:f5:
dc:a1:ac:ca:9d:a3:c9:00:ff:2c:13:8d:f8:12:ea:95:b3:eb:
ec:7b:93:00:69:2f:80:07:9e:7d:9c:d5:19:92:da:0f:1a:70:
1f:52:56:34:76:ff:35:7e:ba:8d:7e:62:47:8f:b5:71:44:b8:
ea:05:f2:4a:2c:ed:b4:b5:e0:a4:36:c7:6f:6c:18:a7:f4:63:
a5:14:0c:f8:e7:20:c9:cd:a3:1d:9d:54:29:a6:d0:d2:d4:66:
ae:38:e0:9c:72:c2:a8:60:f1:33:b7:66:4b:56:c3:54:4d:b1:
2f:dd:dc:64:21:81:9b:2d:49:e5:71:f6:7f:b4:d8:82:74:10:
5e:78:bf:24:8c:c7:a8:9b:dd:fb:4b:51:a8:53:69:cb:67:65:
f3:88:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:56 2025 by rpki-client