Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60125CC2A81A11F0B5FA75BADAE4EC9C.roa
File: 60125CC2A81A11F0B5FA75BADAE4EC9C.roa (raw, json)
Hash identifier: fS7NbaLKwYdPnKSC6d5iSANWLB+81XOnrv9nlLs+Hdo=
Subject key identifier: 3B:C5:17:EA:5F:ED:7C:FA:E6:2D:16:55:3C:CB:38:C5:00:B6:97:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A364
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60125CC2A81A11F0B5FA75BADAE4EC9C.roa
Signing time: Mon 13 Oct 2025 09:52:49 +0000
ROA not before: Mon 13 Oct 2025 09:52:44 +0000
ROA not after: Thu 20 Nov 2025 09:52:44 +0000
asID: 214413
IP address blocks: 154.205.253.0/24 maxlen: 24
154.205.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107364 (0x1a364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 13 09:52:44 2025 GMT
Not After : Nov 20 09:52:44 2025 GMT
Subject: CN=68eccbf0-2e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:6d:99:ba:fb:a7:01:44:05:77:be:68:fa:
23:f0:03:cf:95:c2:ef:f5:14:51:5a:95:41:a4:c3:
5f:2d:4a:03:76:2b:52:7d:f2:be:f3:6a:09:b7:c1:
00:88:ad:3a:3a:8f:43:de:5a:45:b4:3e:de:d6:8b:
cb:b5:37:56:2c:80:c0:8a:c2:4e:36:a4:97:57:1b:
28:61:85:dc:9e:ad:66:06:86:4e:c5:1e:03:6a:9b:
46:23:07:1a:8a:b4:43:63:04:cd:a9:ed:05:c1:92:
3b:ce:95:d4:e7:34:ad:b1:35:6c:85:a2:7a:58:a4:
59:aa:bb:4e:d1:bd:db:09:46:3a:de:be:07:0f:7f:
a7:ca:7e:72:23:39:12:bc:56:f8:e4:d4:d4:87:79:
e0:d8:65:e4:69:ca:f4:28:32:cb:3b:1f:f9:cb:42:
e3:8a:ad:1c:40:ee:c4:8e:de:1b:56:a2:89:81:9b:
da:95:2e:20:65:f1:0d:d1:b4:a9:84:6b:b4:fc:76:
33:dd:9b:79:ac:14:31:b7:3c:c7:44:14:f8:ed:22:
09:4c:6a:62:ee:f2:fe:7c:1b:da:98:54:b8:4b:8b:
18:fe:fc:a5:e6:02:ed:fc:25:39:ea:76:20:a7:5f:
bf:5b:fe:07:d5:15:5c:64:56:55:b5:15:b8:44:ff:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C5:17:EA:5F:ED:7C:FA:E6:2D:16:55:3C:CB:38:C5:00:B6:97:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60125CC2A81A11F0B5FA75BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.253.0-154.205.254.255
Signature Algorithm: sha256WithRSAEncryption
34:3c:6b:ba:7b:a4:18:ac:f1:ee:78:fa:23:9c:41:c4:07:28:
6f:5c:b1:ee:22:bb:4f:89:2d:81:98:02:e7:44:16:f3:90:48:
32:e0:6e:53:f5:ba:6b:fd:1f:90:eb:ff:b7:71:c0:c8:43:d0:
d6:aa:9b:af:23:de:ed:c7:9a:c2:54:a7:93:2c:b4:e1:c6:26:
1f:ce:1b:ac:3a:30:34:3d:5e:e8:39:c2:ea:33:cc:55:60:9e:
b9:40:ca:0d:47:b9:c3:7d:51:e7:88:08:4e:cb:e0:83:83:c0:
ee:b1:1b:15:df:0f:ef:db:1e:69:f7:a4:23:5b:b2:b2:5b:ef:
2e:dd:68:fa:16:56:61:3e:26:7f:8d:10:2c:ca:6a:04:50:94:
96:26:c1:cd:6d:29:90:64:62:9d:34:75:26:c0:a0:94:1e:31:
18:d4:68:a7:7d:3b:3b:f9:a4:8f:08:92:12:87:a1:e9:29:89:
6d:a7:22:d5:f8:34:e1:80:4b:10:00:81:bf:03:3e:02:ec:73:
bc:6a:10:9c:db:38:42:b9:0b:23:ff:0d:7e:29:c8:e5:cc:27:
31:79:1e:3b:27:93:33:e3:cb:0f:44:ec:40:2f:a9:40:6d:f2:
6c:5e:8e:f2:bd:ba:cf:61:3e:08:61:cd:8b:b6:dd:15:f6:96:
96:b9:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:08 2025 by rpki-client