Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38B64EE690EF11F0A0D7F795DAE4EC9C.roa
File: 38B64EE690EF11F0A0D7F795DAE4EC9C.roa (raw, json)
Hash identifier: /10Aq7d+hLddXWsMfgVpXZIlKeNYo8ISCIzfCdsB9+s=
Subject key identifier: A8:72:DA:66:79:C9:95:A3:71:CA:D8:2A:D2:F0:63:1F:F5:CF:E9:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38B64EE690EF11F0A0D7F795DAE4EC9C.roa
Signing time: Sat 13 Sep 2025 22:15:58 +0000
ROA not before: Sat 13 Sep 2025 22:15:52 +0000
ROA not after: Sun 19 Oct 2025 22:15:52 +0000
asID: 6079
IP address blocks: 154.205.48.0/20 maxlen: 24
154.206.32.0/20 maxlen: 24
154.207.144.0/20 maxlen: 24
154.207.160.0/20 maxlen: 24
154.208.96.0/20 maxlen: 24
154.211.192.0/20 maxlen: 24
154.214.16.0/20 maxlen: 24
154.215.16.0/20 maxlen: 24
154.216.16.0/20 maxlen: 24
154.222.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Oct 2025 22:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106369 (0x19f81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 13 22:15:52 2025 GMT
Not After : Oct 19 22:15:52 2025 GMT
Subject: CN=68c5ed1d-45e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:c4:16:6c:aa:d8:41:87:93:21:0a:2e:90:
ef:9b:6c:50:5c:3c:e3:ff:dd:d6:d9:f8:50:0d:e3:
2b:78:06:4a:6e:4f:6f:72:f3:a2:f1:05:92:af:bb:
ec:d9:cc:98:6d:e9:15:d3:07:48:e1:5c:a7:c3:c5:
41:6f:f3:69:d6:b9:17:12:8f:53:17:bb:ea:aa:ab:
16:5f:dd:ea:09:ef:1f:35:61:a9:8d:88:d9:2c:30:
06:41:dd:59:f0:03:7e:67:b8:7d:a0:39:f2:59:e4:
f5:7b:74:53:53:83:8b:af:5e:d4:cd:2c:a1:12:6d:
0c:25:7c:7c:d9:fa:c0:1f:9d:35:28:5d:95:33:e7:
7f:c7:79:11:43:ae:f4:fd:9e:c9:99:1e:13:ae:f6:
ae:2a:e0:5e:03:eb:5f:ed:3a:24:74:65:a9:f9:7a:
43:e5:de:29:2f:1f:e7:32:c1:4c:36:f7:f4:ef:86:
40:42:0d:cb:45:03:26:97:fc:59:67:85:c7:35:82:
f9:98:a7:5f:9a:f1:99:83:bc:45:89:17:4e:e8:9e:
cf:cf:4d:36:80:bf:71:e5:16:3a:29:95:de:19:74:
cb:79:a8:c7:da:c4:3a:16:7a:39:9c:05:2d:80:a3:
28:31:dd:30:c2:64:8a:67:c4:bf:47:43:27:17:a4:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:72:DA:66:79:C9:95:A3:71:CA:D8:2A:D2:F0:63:1F:F5:CF:E9:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38B64EE690EF11F0A0D7F795DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.48.0/20
154.206.32.0/20
154.207.144.0-154.207.175.255
154.208.96.0/20
154.211.192.0/20
154.214.16.0/20
154.215.16.0/20
154.216.16.0/20
154.222.96.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:33:bb:c5:4e:95:f0:64:db:f9:28:ad:2a:e6:23:0f:ef:74:
2f:2b:83:ae:8f:8e:14:36:e2:35:6b:d2:be:36:e2:40:b2:73:
c9:25:5a:22:83:9d:b7:f6:5e:66:7a:77:cd:40:96:ea:68:d4:
64:3e:5f:c3:94:11:99:8e:d5:7f:ac:e1:5f:ea:fb:81:88:85:
04:11:b0:93:cd:d8:50:9b:eb:c7:b6:57:5b:47:a0:4e:0a:9d:
32:7f:0e:11:de:3e:52:d8:13:69:5e:39:a5:ed:81:cf:61:d8:
e4:8d:56:7e:de:b7:1d:cf:79:06:3f:bd:06:4b:49:fb:7c:ca:
5d:62:18:95:64:51:8c:7a:0e:22:ee:8c:fa:88:58:24:49:9e:
0e:4b:92:6e:fc:2b:b3:74:3b:02:ce:05:8d:52:f1:b2:3e:dc:
19:42:19:b4:67:46:6e:4b:ba:16:97:3a:e5:07:6a:b0:e8:e1:
28:be:78:d0:86:ca:fe:cf:88:d2:b8:30:e8:fc:83:4c:27:97:
d1:3d:92:f8:13:92:f1:49:7f:a9:aa:b5:f4:f8:0e:ee:e1:3b:
9b:a9:e1:01:ae:03:75:a0:d4:26:57:22:1c:f2:4f:c4:4d:ad:
f8:d7:a5:10:2f:c6:ab:26:f4:7f:d5:a9:7f:49:24:cc:74:66:
e5:3b:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:06 2025 by rpki-client