Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E66FB5EAB6011F0872D21AADAE4EC9C.roa
File: 1E66FB5EAB6011F0872D21AADAE4EC9C.roa (raw, json)
Hash identifier: elP928Sz+U62gQfK1t/izQGbXW7CzPtaXEu2hskIsAA=
Subject key identifier: 65:E2:35:EF:37:A3:4F:77:17:35:89:F6:C3:C3:3C:89:51:31:EE:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A436
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E66FB5EAB6011F0872D21AADAE4EC9C.roa
Signing time: Fri 17 Oct 2025 13:49:37 +0000
ROA not before: Fri 17 Oct 2025 13:49:32 +0000
ROA not after: Mon 24 Nov 2025 13:49:32 +0000
asID: 55933
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.148.0/23 maxlen: 24
154.89.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107574 (0x1a436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 17 13:49:32 2025 GMT
Not After : Nov 24 13:49:32 2025 GMT
Subject: CN=68f24971-2466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c5:c9:22:b4:07:af:a2:bb:cf:1a:a9:ce:b7:
81:e3:4f:bd:af:bf:e3:a6:01:c3:d0:81:57:67:b7:
31:7b:0d:90:28:42:02:9a:c5:15:2a:0b:5c:fc:00:
07:00:83:c6:40:ae:ae:a7:39:dd:cc:af:76:c7:93:
df:9a:1b:d1:69:1d:5e:22:c8:f2:cf:e2:bc:88:9f:
88:2c:e8:21:3f:d0:8c:32:7c:bc:a7:28:00:98:ed:
9a:08:be:06:9a:3f:6f:fc:c0:23:39:7e:db:c4:ec:
b6:7f:a3:4e:1c:90:02:02:23:2c:34:fa:a2:22:3d:
f4:1e:f6:fc:03:3b:0f:4e:e8:63:17:c1:cc:ad:a5:
34:9b:e9:d4:2a:b9:98:de:bd:30:ae:fa:64:ec:a1:
aa:c5:04:4a:de:29:ae:1b:7d:37:83:a7:31:80:75:
d5:73:8e:d1:ca:d0:bc:34:03:62:9d:07:9c:85:1f:
b3:c0:6f:33:8a:96:70:48:bb:9c:04:99:67:9f:4c:
66:a8:b5:19:36:1f:d0:c9:55:49:fa:5c:55:0c:e4:
1e:ba:e8:49:d1:52:91:50:52:e1:bd:7c:e9:e4:ff:
e1:54:6c:13:fd:0d:44:f0:ee:0a:d7:3d:66:b9:c7:
0d:1d:18:ec:57:b4:ec:3b:5e:d8:3f:fc:b9:0c:d3:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:35:EF:37:A3:4F:77:17:35:89:F6:C3:C3:3C:89:51:31:EE:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E66FB5EAB6011F0872D21AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
52:aa:76:53:3e:25:04:96:09:6d:16:f3:e9:e6:c2:88:30:fc:
12:08:d5:66:10:3d:c8:89:f4:ad:49:0d:af:0d:58:0a:e7:31:
b8:b3:a7:f1:0c:6d:7e:1b:3c:59:8a:48:34:58:60:ea:d0:14:
66:34:0c:cb:45:58:20:76:67:da:13:8f:fb:77:bf:65:9d:94:
9f:7b:d8:e2:9a:1d:4d:d6:a7:77:4d:b6:b3:b3:16:5e:49:a2:
15:e7:9d:e8:db:f5:b5:d3:bc:8f:ec:68:6d:39:ad:64:e2:ea:
6d:0f:7f:69:f8:1f:d4:5d:c1:a8:ee:8f:9a:60:b2:a0:c0:ba:
50:56:60:00:b6:68:d8:b5:57:00:06:fa:af:1e:a3:b8:b4:37:
a9:31:e0:0b:3e:d6:31:48:7f:af:b9:e8:7d:93:d2:b7:72:5a:
6f:c5:27:47:4c:26:ac:46:ec:35:80:45:17:e9:7b:be:06:db:
90:fd:3d:8f:24:0a:2a:c5:2a:87:d1:b5:11:c9:b8:42:a9:78:
11:74:ce:f5:bf:9e:e5:4e:dd:45:b2:ff:d4:20:a4:7e:3c:59:
34:65:cd:cf:c3:ba:b5:24:fa:65:9a:0a:2a:16:75:0d:6f:1e:
03:58:2c:55:bc:4a:8e:e1:f4:5e:df:a1:71:37:44:cc:e6:9a:
86:b4:f2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:03 2025 by rpki-client