Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/235773F69F7511F0972A13ABDAE4EC9C.roa
File: 235773F69F7511F0972A13ABDAE4EC9C.roa (raw, json)
Hash identifier: 8SB3Nu6xaUmlJ/H57/2xWbhdh4uiybFEhGh8WwRsjDw=
Subject key identifier: 72:0E:BB:94:5C:79:7A:F2:8C:D7:43:DC:DA:8E:42:84:78:13:C2:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/235773F69F7511F0972A13ABDAE4EC9C.roa
Signing time: Thu 02 Oct 2025 09:49:50 +0000
ROA not before: Thu 02 Oct 2025 09:49:46 +0000
ROA not after: Sun 09 Nov 2025 09:49:46 +0000
asID: 200373
IP address blocks: 154.193.152.0/22 maxlen: 24
154.193.158.0/23 maxlen: 24
154.199.14.0/23 maxlen: 24
154.199.68.0/23 maxlen: 24
154.213.160.0/21 maxlen: 24
154.222.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107006 (0x1a1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 2 09:49:46 2025 GMT
Not After : Nov 9 09:49:46 2025 GMT
Subject: CN=68de4abe-9870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:49:70:9e:6a:bb:57:c7:ec:98:dc:11:e7:
c9:6f:3a:db:e9:87:13:ad:6f:06:83:ea:2b:22:16:
16:20:9f:f3:3e:fc:4e:82:ce:86:12:36:4e:22:b2:
b5:41:a0:ee:b4:c6:ba:47:65:57:b0:d0:30:8b:d9:
01:03:af:44:a1:28:05:42:b9:dd:7d:d8:d3:b9:96:
b7:9c:ba:9f:49:8f:1f:61:5f:37:c6:89:08:2b:e9:
89:53:2e:b5:24:80:d5:9a:8a:eb:11:27:58:69:6b:
6b:e2:00:89:72:2b:5d:a5:98:39:21:29:27:2e:a7:
bf:08:24:84:31:bb:af:be:58:ac:a8:09:19:53:0f:
4f:7e:cd:be:ea:38:e7:b6:c4:cf:6f:57:81:19:8b:
64:d1:2a:ba:2a:a4:1a:d5:9f:42:04:28:c4:0c:67:
55:df:51:53:84:f5:b1:78:d5:76:24:f4:49:7b:c1:
6c:a8:b7:d4:0c:80:e5:b6:d3:67:64:fd:6e:cf:c9:
8c:bf:9b:00:0a:37:b4:12:af:59:11:f2:39:be:74:
10:aa:94:25:f7:0f:fe:53:fc:b3:df:3c:b7:df:d2:
f2:27:e6:15:3f:86:ef:a3:df:fe:b3:fa:05:d6:3c:
bc:b9:ac:43:56:cd:aa:4b:40:46:20:97:13:4a:bb:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0E:BB:94:5C:79:7A:F2:8C:D7:43:DC:DA:8E:42:84:78:13:C2:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/235773F69F7511F0972A13ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.152.0/22
154.193.158.0/23
154.199.14.0/23
154.199.68.0/23
154.213.160.0/21
154.222.132.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1d:fe:f7:bc:f4:8a:d2:87:bd:b6:cf:d6:a0:3c:fe:46:1b:
b2:ef:4f:c8:74:0c:03:e0:b7:d8:40:0e:db:4b:83:07:d0:65:
18:bf:47:55:64:36:57:0b:1a:3c:2e:35:32:a5:d0:8b:2d:59:
70:63:48:a7:42:bb:a9:c9:87:f2:c8:9f:8d:4f:31:06:a7:65:
4c:57:40:d2:76:e6:cf:3c:ae:c8:e8:c7:5b:26:8a:21:73:07:
64:54:74:74:93:a4:c6:79:92:b1:29:19:f3:55:b2:eb:0f:fc:
27:21:f5:82:61:6d:4b:cf:74:df:31:c9:54:80:39:e8:d7:f2:
fa:f7:09:60:c8:b1:19:e5:2f:5a:09:79:c6:ee:1e:7d:96:31:
22:2d:cf:90:b0:9b:41:69:03:7f:d2:fa:ae:f3:db:86:18:8c:
30:7e:ea:5e:ac:ed:65:f7:35:a1:59:62:4e:18:bb:48:4c:d1:
6a:af:87:fc:04:52:7d:2d:99:aa:e8:16:3a:c4:16:65:4a:ea:
d2:0f:21:f5:71:1b:78:00:fc:ff:2b:f2:83:3c:e4:7d:ba:98:
95:92:5a:c5:28:45:19:d8:07:1d:41:6a:22:dd:f8:7e:8e:9a:
b2:fd:6c:05:cc:25:e8:8f:76:88:95:47:4f:94:1d:be:a6:4e:
77:f8:39:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:34 2025 by rpki-client