Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33DA23D69DE011F0A291B2EDDAE4EC9C.roa
File: 33DA23D69DE011F0A291B2EDDAE4EC9C.roa (raw, json)
Hash identifier: HyoxpmUfgTfsL8UP2vnSmprYrzmW52JaUzNHCIqlYR0=
Subject key identifier: 69:C9:18:A4:D8:94:EF:00:C7:B7:D1:ED:A1:02:09:50:D2:1A:78:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33DA23D69DE011F0A291B2EDDAE4EC9C.roa
Signing time: Tue 30 Sep 2025 09:31:12 +0000
ROA not before: Tue 30 Sep 2025 09:31:06 +0000
ROA not after: Sat 15 Nov 2025 09:31:06 +0000
asID: 138915
IP address blocks: 154.203.128.0/23 maxlen: 24
154.203.130.0/23 maxlen: 24
154.203.132.0/24 maxlen: 24
154.203.136.0/24 maxlen: 24
154.203.137.0/24 maxlen: 24
154.203.144.0/23 maxlen: 24
154.203.148.0/24 maxlen: 24
154.203.149.0/24 maxlen: 24
154.203.150.0/24 maxlen: 24
154.203.151.0/24 maxlen: 24
154.203.152.0/24 maxlen: 24
154.206.80.0/23 maxlen: 24
154.206.82.0/23 maxlen: 24
154.206.84.0/23 maxlen: 24
154.206.86.0/23 maxlen: 24
154.206.88.0/23 maxlen: 24
154.206.112.0/23 maxlen: 24
154.206.114.0/23 maxlen: 24
154.206.116.0/23 maxlen: 24
154.206.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106952 (0x1a1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 09:31:06 2025 GMT
Not After : Nov 15 09:31:06 2025 GMT
Subject: CN=68dba360-ad21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:26:26:b9:ff:d4:1c:c5:2c:34:9b:56:dc:
30:ab:a0:6d:be:8a:87:47:bd:22:76:77:a6:d9:ff:
20:f7:4f:02:71:f1:a0:af:2d:3c:c2:7d:d0:3a:ed:
8a:6b:98:3d:a0:bc:3c:d5:5a:34:1c:5b:25:f8:97:
aa:dd:f4:c0:52:dd:07:de:2b:37:d8:30:b3:4e:de:
98:69:44:9f:71:41:04:ca:67:1e:1d:d9:8c:8e:73:
65:18:28:bc:4b:13:35:73:1b:49:04:b9:4a:e6:68:
1f:b3:8a:a3:da:33:ff:68:5a:49:1f:4f:b9:95:5b:
78:1b:e0:9d:ec:cd:28:f1:a8:cd:b4:04:bf:dd:05:
0f:0a:65:71:fa:b9:9b:ae:5f:c4:0d:28:11:49:39:
0a:b4:6e:d1:5d:98:84:c5:b9:0b:9b:ac:09:d8:36:
e5:e2:42:5c:00:7c:d4:38:4f:f4:1a:31:48:67:97:
c0:e2:b3:57:69:98:e8:d3:92:d3:40:21:37:a9:72:
8c:cc:3b:99:fa:29:ec:de:95:d5:11:f5:cb:41:17:
ca:3b:c7:be:64:d0:95:f6:03:91:f7:62:64:62:59:
7a:08:16:6d:53:04:8d:e1:29:79:7f:d0:55:9e:c4:
70:4a:2b:05:47:1e:ec:a1:3f:3d:f6:bc:54:6a:06:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C9:18:A4:D8:94:EF:00:C7:B7:D1:ED:A1:02:09:50:D2:1A:78:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33DA23D69DE011F0A291B2EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.128.0-154.203.132.255
154.203.136.0/23
154.203.144.0/23
154.203.148.0-154.203.152.255
154.206.80.0-154.206.89.255
154.206.112.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:27:80:96:75:0c:9c:e0:bc:11:31:ce:2a:7e:2c:92:6c:c7:
83:5f:e0:fb:cc:14:3c:2b:cd:66:a8:c9:f9:90:72:a8:63:c8:
1d:d4:68:1d:c7:5a:51:39:fc:19:e0:a7:27:95:5c:ac:ea:bc:
65:cb:7b:e1:84:6a:52:22:43:07:2a:ac:7e:c3:2f:18:be:af:
2a:43:eb:35:0c:9b:20:1a:48:16:36:ac:2e:08:5a:46:2d:8c:
fb:f0:8b:51:6d:b7:e8:3a:e5:52:65:a1:03:a9:16:fb:c6:db:
a2:65:46:a9:41:e9:bf:a6:81:1d:2a:bf:5c:7b:26:92:8e:de:
0e:c5:f8:61:56:35:82:45:c7:6e:81:61:fe:14:9d:de:48:c5:
c2:8e:69:79:5e:cf:17:79:e1:e8:c7:5c:1a:6b:64:d2:71:c7:
67:9f:83:89:4f:f2:a2:07:46:4e:f1:c0:eb:e6:ad:77:19:88:
c6:84:03:98:04:c5:57:da:c0:fe:d4:ca:47:22:3f:0d:cf:b2:
7a:85:ce:25:30:33:08:b7:39:d7:3c:84:ae:37:91:ea:6b:d0:
b5:37:c4:fe:f2:3b:06:e3:aa:b1:9e:aa:22:8d:0a:de:9b:02:
97:b1:a8:b8:32:7f:36:cb:71:7c:b6:f2:7d:bb:88:1f:41:8e:
11:3d:4d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:03 2025 by rpki-client