Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DAEE16AA81F11F0B66FF7D8DAE4EC9C.roa
File: 2DAEE16AA81F11F0B66FF7D8DAE4EC9C.roa (raw, json)
Hash identifier: 5bKgkW8moqJeJ4B7VI1+OWurAV7rjkT7hAFwUknYNoE=
Subject key identifier: 17:87:B6:4E:32:AC:4E:22:7F:DE:78:03:60:AC:69:C0:38:72:49:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A36F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DAEE16AA81F11F0B66FF7D8DAE4EC9C.roa
Signing time: Mon 13 Oct 2025 10:27:11 +0000
ROA not before: Mon 13 Oct 2025 10:27:05 +0000
ROA not after: Tue 25 Nov 2025 10:27:05 +0000
asID: 20326
IP address blocks: 154.193.132.0/24 maxlen: 24
154.193.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107375 (0x1a36f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 13 10:27:05 2025 GMT
Not After : Nov 25 10:27:05 2025 GMT
Subject: CN=68ecd3ff-a530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:4a:34:fc:94:e5:c6:6e:b9:70:aa:d2:1c:
42:c0:f8:bd:86:56:09:e6:e9:e5:04:fd:19:7a:7d:
76:7d:38:2c:4e:a4:59:f0:96:8a:26:d4:9a:97:2c:
b2:ee:82:ac:2b:b4:15:62:4e:ad:88:a8:0d:11:9d:
3f:94:ec:c4:6f:cf:1b:d3:cc:0b:12:37:76:c3:07:
9a:89:68:2c:b3:79:5c:94:5d:ba:f2:f1:d7:b0:61:
6d:d3:57:70:13:f6:a6:58:52:f3:5d:33:d8:18:be:
11:59:fe:4a:22:65:df:c9:c1:24:4b:3d:2f:9b:9e:
e4:1f:b0:3c:ab:4f:ce:38:1f:f8:a3:d9:56:7a:57:
f8:80:d6:92:f1:f7:d3:ed:d7:87:7c:78:9f:cd:a1:
6c:e6:17:5e:cb:84:2f:bd:19:fa:8a:4b:33:d7:84:
b1:e3:9d:77:8d:53:e3:0f:45:5e:80:55:7a:a4:8f:
6c:b7:ae:e7:0e:42:2e:e5:f6:0c:fe:36:52:9f:2c:
99:18:82:97:30:86:61:73:fb:ff:64:bb:2c:8b:22:
e3:63:41:65:bd:84:bf:44:6e:d8:e8:df:22:4f:a1:
09:cd:fc:d2:5a:51:b8:ff:50:08:ba:72:bb:1a:55:
ff:2f:60:21:9b:31:3d:6e:c2:d6:4e:00:71:e4:8b:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:87:B6:4E:32:AC:4E:22:7F:DE:78:03:60:AC:69:C0:38:72:49:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DAEE16AA81F11F0B66FF7D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.132.0/24
154.193.164.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:c6:22:f1:92:90:3f:88:f5:e7:22:ba:ea:3d:1b:5a:5f:c5:
7f:45:eb:57:30:a3:65:04:f6:3c:c6:05:e6:a6:14:03:f0:68:
a9:58:7a:f9:75:8d:df:83:65:21:2a:ec:b7:59:ec:d6:67:e1:
51:fa:e7:71:3e:76:a3:64:ed:cd:b7:92:46:e9:08:79:86:1c:
0c:95:61:fe:ee:46:84:ce:76:de:26:2a:38:3d:88:db:db:18:
e7:a0:11:d4:ee:3b:4d:9b:90:da:41:07:f5:ba:7d:3e:69:59:
cf:a9:50:5d:9d:90:5c:67:36:47:99:4e:52:44:e2:bf:94:81:
ad:0e:8e:db:cf:6c:b7:5e:7d:fd:61:04:fa:06:45:30:35:7c:
95:67:09:a5:fb:33:e9:c4:c2:e6:8f:41:44:48:14:a6:e0:c0:
3d:c2:aa:fc:f9:27:00:7a:7b:30:52:6b:2e:63:bb:fc:d1:a4:
a2:81:25:38:19:da:38:90:f0:99:e2:11:ff:f6:83:38:19:ab:
62:7f:52:8e:af:50:96:02:1d:d7:cc:0f:91:a1:4c:2b:33:a9:
a3:df:f1:8e:39:cd:a0:38:53:0f:23:4c:78:ea:02:e6:e7:2c:
bf:50:2b:5d:17:96:d7:61:07:ca:a5:8f:88:79:55:99:9b:f6:
1e:34:4d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:22 2025 by rpki-client