Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A82CAB6A81A11F0902F78BADAE4EC9C.roa
File: 6A82CAB6A81A11F0902F78BADAE4EC9C.roa (raw, json)
Hash identifier: damFNLm0CtyHUdyxKmOK2pS1kgMuRrakWdnSwlLZX38=
Subject key identifier: C6:84:FE:DD:FE:78:B4:BE:C7:5D:89:E8:EC:38:11:E2:F6:AC:E5:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A366
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A82CAB6A81A11F0902F78BADAE4EC9C.roa
Signing time: Mon 13 Oct 2025 09:53:06 +0000
ROA not before: Mon 13 Oct 2025 09:53:01 +0000
ROA not after: Mon 20 Oct 2025 09:53:01 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 09:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107366 (0x1a366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 13 09:53:01 2025 GMT
Not After : Oct 20 09:53:01 2025 GMT
Subject: CN=68eccc02-80f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:ed:99:51:57:d7:09:46:cd:d6:15:3f:4f:
f2:ba:a2:8a:da:db:de:8a:15:9c:08:61:45:ba:df:
03:a2:7e:5d:d3:82:ed:ba:df:00:7d:07:3d:5e:e5:
1c:80:c9:80:e5:58:40:80:27:f7:fa:ff:f1:3b:11:
63:8d:4c:01:18:2f:00:dc:e7:31:6a:34:2a:2d:1c:
57:3d:26:e8:44:5f:68:27:e4:cf:b4:30:51:1d:0d:
bb:61:75:b1:d2:88:6f:05:59:ba:32:32:f9:80:81:
b7:b5:60:9d:32:94:eb:a1:66:95:da:98:74:4c:b7:
3c:56:51:43:8d:0e:3c:b4:b4:aa:cd:ea:70:33:3c:
71:d1:ab:d3:d8:fe:0b:eb:71:d3:28:25:3b:5a:c8:
24:7d:db:ec:48:91:f2:ac:05:a7:35:d8:5c:86:e4:
de:73:17:0a:e9:8e:8d:72:08:d9:dd:36:a6:0b:9c:
31:64:2c:62:5c:97:79:2b:29:47:01:5d:6a:e0:f4:
41:0a:fa:23:c0:60:66:22:8f:42:0f:be:ec:fa:cd:
a2:dd:0c:cf:05:4f:e5:e9:7f:93:82:39:0d:48:2d:
8f:04:d4:ca:0e:2c:ac:43:48:98:d0:b5:0d:8b:92:
a0:c6:dd:c2:fb:3e:1f:85:af:8d:ee:86:6f:ee:a4:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:84:FE:DD:FE:78:B4:BE:C7:5D:89:E8:EC:38:11:E2:F6:AC:E5:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A82CAB6A81A11F0902F78BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
154.209.160.0/19
154.214.64.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
35:dd:b6:9b:4b:9e:96:10:24:aa:a0:db:0c:4f:21:af:c3:65:
49:ce:fb:8e:f4:e0:03:7c:f5:5d:1d:27:99:e4:53:8a:c9:3a:
ca:4e:c9:52:86:94:9d:f0:e5:fd:bd:c8:fa:cd:3c:9f:33:fa:
5f:09:c1:ca:3f:8f:98:78:83:6a:79:45:e3:58:73:eb:dc:03:
aa:51:b2:a6:d3:75:5a:7a:c5:29:37:22:f9:e0:d7:5c:ea:b8:
f6:81:23:7a:05:a7:fd:d8:47:94:64:de:4f:81:91:e9:61:c1:
f5:e1:2c:53:38:c6:8d:45:3f:7a:c7:d4:12:c9:c0:d2:df:21:
fb:7b:3c:34:5f:0d:75:8a:6a:a7:77:7e:4a:a1:38:72:b5:e2:
65:46:03:95:53:bc:e6:d6:62:6a:6c:1a:88:87:d0:9c:a1:3a:
03:4f:56:c6:0d:b9:85:ab:a1:20:48:8c:e5:78:23:89:3d:38:
37:8f:ec:9e:7c:01:27:93:d9:36:b9:0d:8d:12:5d:3a:9b:b0:
6d:84:5c:99:bf:88:03:04:07:5a:f2:84:d5:68:37:ba:cf:d4:
a9:c5:b8:e3:07:e9:5f:51:a2:fa:0c:29:7b:11:39:6d:ea:f1:
e6:33:68:ce:91:52:84:c8:4d:8b:ed:16:a9:2f:d6:f3:f0:1f:
f9:ec:14:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:36 2025 by rpki-client