Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31B0C59AA81911F0B9D3FCB0DAE4EC9C.roa
File: 31B0C59AA81911F0B9D3FCB0DAE4EC9C.roa (raw, json)
Hash identifier: 7jqLREah9XzOhjJO4MR4FIQh1MM5d2fUC9A367I0f8Q=
Subject key identifier: D6:60:BD:4F:EE:E3:EA:46:B4:7E:42:D3:48:57:46:B9:C5:62:C4:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A362
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31B0C59AA81911F0B9D3FCB0DAE4EC9C.roa
Signing time: Mon 13 Oct 2025 09:44:21 +0000
ROA not before: Mon 13 Oct 2025 09:44:14 +0000
ROA not after: Fri 17 Jul 2026 09:44:14 +0000
asID: 329611
IP address blocks: 154.211.4.0/24 maxlen: 24
154.211.5.0/24 maxlen: 24
154.211.6.0/24 maxlen: 24
154.211.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107362 (0x1a362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 13 09:44:14 2025 GMT
Not After : Jul 17 09:44:14 2026 GMT
Subject: CN=68ecc9f5-8566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:76:68:3f:fb:70:55:36:d3:9e:f0:93:cc:
6c:27:7c:b0:ab:6c:00:36:63:0f:06:e1:5d:67:f7:
e8:91:76:04:5f:6a:c3:1a:5d:d4:a6:2b:8b:8c:c7:
1f:53:2e:e4:5b:6b:bf:9d:41:56:d5:b7:68:cd:9d:
d9:ad:54:84:51:ad:9b:9e:ad:a7:10:35:f3:d6:b4:
b0:9b:ec:2d:92:54:38:cc:25:74:a3:f3:90:6c:be:
88:b6:c2:d4:8d:bf:9c:a7:73:11:64:38:4b:56:c0:
28:6d:e5:dd:a2:cc:84:77:19:1b:5a:93:a6:c2:ee:
6c:25:48:21:e0:96:16:61:c0:69:ef:9c:42:5a:20:
e4:38:c7:bd:86:87:83:3b:4b:bd:a5:64:f1:42:64:
fc:c1:31:b2:5f:dc:40:58:1e:41:de:ca:19:31:1c:
08:99:b0:1b:eb:e3:22:57:e6:a1:4f:15:3b:36:25:
23:f4:7e:43:fd:3a:fe:6a:b2:9d:c7:37:cc:dc:8b:
b6:c2:e4:f3:42:ef:ec:d5:1b:8d:41:d4:99:c6:e7:
58:53:f3:93:bb:73:6f:23:36:bd:7a:0b:7c:44:1b:
7b:58:f8:69:d6:e8:5b:79:d9:99:6c:98:ad:70:e9:
df:80:42:8c:86:00:95:bf:5c:ee:11:a3:70:7a:0f:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:60:BD:4F:EE:E3:EA:46:B4:7E:42:D3:48:57:46:B9:C5:62:C4:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31B0C59AA81911F0B9D3FCB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:cb:59:f5:0c:c8:09:ca:5b:0b:5f:91:cb:a1:d9:b0:c5:6d:
d9:84:e6:ea:d6:3f:6b:41:c2:3b:3b:8d:3d:58:0b:ae:c7:30:
d2:7f:00:19:b9:98:ee:47:71:69:7a:2e:c7:38:e2:0c:de:f0:
d3:79:d0:8c:ef:d9:03:d4:6a:d2:83:5f:f9:94:7c:ed:01:b3:
d3:e6:ad:e4:5e:69:3a:df:f7:ac:db:34:0d:fa:65:c8:41:52:
73:7b:6f:24:a2:38:99:81:9a:ba:78:ec:f6:50:2c:55:68:98:
32:92:5a:01:c9:06:d1:a9:86:b5:98:cb:83:9c:49:ba:c9:7f:
5c:c3:18:5d:b0:9d:b0:73:e4:2b:c5:f5:19:dc:95:9f:bb:4e:
dd:70:52:86:e2:7d:7e:f7:f6:6a:92:10:cd:ff:30:1d:9c:7c:
94:e9:29:ec:a7:32:9f:ca:02:30:3a:c4:4c:b7:7f:1f:1e:b8:
8b:96:44:90:e5:08:16:22:7f:6d:fb:db:4b:b9:4d:65:ca:ba:
7a:22:27:c6:0c:cb:8e:39:c3:29:fb:87:ee:4f:cd:c1:47:b1:
aa:39:7c:b5:aa:1b:d7:24:05:94:bf:a4:ae:1d:f7:9e:2c:7d:
7c:35:50:ac:b0:b8:43:b8:14:ee:80:b9:f9:95:79:db:37:f4:
22:7d:a7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:43 2025 by rpki-client