Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EA3A068A5C211F0AFB11D8EDAE4EC9C.roa
File: 4EA3A068A5C211F0AFB11D8EDAE4EC9C.roa (raw, json)
Hash identifier: tLUc/64Zdx+Kqx0akvwY4tGLp0DtKc+Kmag05yjPczc=
Subject key identifier: 6F:3F:A3:66:B5:EF:16:84:CB:57:20:F4:36:75:EA:35:E5:D6:81:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A343
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EA3A068A5C211F0AFB11D8EDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 10:17:21 +0000
ROA not before: Fri 10 Oct 2025 10:17:16 +0000
ROA not after: Mon 05 Oct 2026 10:17:16 +0000
asID: 211392
IP address blocks: 154.84.16.0/23 maxlen: 24
154.84.18.0/23 maxlen: 24
154.84.20.0/23 maxlen: 24
154.84.22.0/23 maxlen: 24
154.84.22.0/24 maxlen: 24
154.84.24.0/23 maxlen: 24
154.84.24.0/24 maxlen: 24
154.84.25.0/24 maxlen: 24
154.84.26.0/24 maxlen: 24
154.84.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107331 (0x1a343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 10:17:16 2025 GMT
Not After : Oct 5 10:17:16 2026 GMT
Subject: CN=68e8dd31-d0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:46:53:b2:09:cf:f1:4a:94:69:97:da:05:
e2:3a:0f:86:3a:b0:d4:4a:d5:94:a9:09:98:ff:62:
d4:5c:72:d2:ad:1f:45:3c:a5:b6:d9:df:35:7d:4d:
50:15:38:34:5b:2c:09:b8:72:dc:49:91:92:5e:d9:
13:d7:52:99:be:85:0d:c9:da:b3:69:d9:22:53:4c:
ae:94:06:8a:ca:11:39:78:19:0d:5c:49:89:ed:1c:
24:48:e7:e8:42:58:a3:de:2c:bb:6b:30:cb:6e:c2:
0a:d6:72:ad:c1:64:83:46:e9:ea:4e:80:ff:9e:77:
99:12:0f:91:9b:d0:a7:f5:71:f7:b1:f5:de:77:45:
81:0b:64:30:af:c8:58:a5:7d:69:30:6c:30:09:d6:
01:76:d3:08:c8:7e:0d:9f:cc:26:ff:f0:84:06:3d:
ba:f6:74:31:45:27:58:fc:c5:c0:27:cd:57:59:16:
1b:5f:76:51:8e:b2:17:63:ca:03:43:4c:90:e2:66:
58:c4:a1:62:a2:96:7d:84:9e:de:52:4e:1e:12:3b:
cf:f9:58:b3:12:b9:d6:29:c1:69:f8:e3:4b:86:e5:
e1:6e:e9:90:e2:f9:60:38:40:7e:fd:85:b8:fb:cc:
42:8b:f3:e3:9a:2e:a6:9c:ba:1b:d6:93:6d:5c:fa:
99:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3F:A3:66:B5:EF:16:84:CB:57:20:F4:36:75:EA:35:E5:D6:81:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EA3A068A5C211F0AFB11D8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.16.0-154.84.27.255
Signature Algorithm: sha256WithRSAEncryption
56:61:57:7e:d9:04:34:bc:c5:df:c1:e7:f8:b8:e0:50:fd:95:
40:68:9a:39:37:0a:d8:fe:43:1f:65:7e:f0:96:09:1c:db:9c:
c6:7d:69:58:01:8c:7c:6d:cb:e2:f4:83:a4:2d:80:49:d1:f4:
21:e1:64:8d:19:5c:e2:55:c5:ce:88:e8:e0:64:c8:90:07:55:
21:6c:35:d8:67:e9:1c:55:dd:15:b0:99:94:ef:b0:e7:26:a9:
d2:54:f2:aa:e0:c6:d2:84:41:cd:24:13:29:a5:74:85:a2:d8:
7e:d4:41:60:41:95:f0:34:35:9e:94:51:0d:8f:f5:d0:33:19:
4a:53:1a:0e:77:c2:8c:5d:78:84:85:9c:8c:25:7d:47:f1:6d:
e8:fd:3a:20:95:bf:9f:d8:e9:72:19:32:88:ae:9a:4d:a4:88:
a9:bc:a0:9e:b1:18:02:ef:ec:d4:ce:60:e9:90:42:82:ed:7a:
b3:ae:09:a5:15:ab:4e:d8:79:b4:2f:f8:22:71:6e:52:65:cc:
fa:a0:87:55:d5:54:df:a2:64:e0:1a:0e:f8:c5:41:be:50:08:
90:6a:92:b0:c3:e8:ae:a2:0d:43:93:1f:d6:d5:c8:35:e2:3f:
4e:9d:5e:fb:5a:0e:1f:90:df:8e:7c:e4:a4:00:19:a3:53:38:
72:12:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:23 2025 by rpki-client