Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E5A6F26A50A11F0B98B43E4DAE4EC9C.roa
File: 6E5A6F26A50A11F0B98B43E4DAE4EC9C.roa (raw, json)
Hash identifier: lA9W8jsv4jMN2dC91FN9lnftbcBEiLKEg2CR6b1IE48=
Subject key identifier: 60:A9:45:70:97:6E:BB:B2:EC:3E:B4:40:E1:3F:35:99:3B:E1:F4:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A30E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E5A6F26A50A11F0B98B43E4DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 12:21:07 +0000
ROA not before: Thu 09 Oct 2025 12:20:56 +0000
ROA not after: Sun 16 Nov 2025 12:20:56 +0000
asID: 22773
IP address blocks: 154.82.2.0/24 maxlen: 24
154.90.9.0/24 maxlen: 24
154.90.10.0/24 maxlen: 24
154.90.11.0/24 maxlen: 24
154.90.12.0/24 maxlen: 24
154.90.13.0/24 maxlen: 24
154.90.14.0/24 maxlen: 24
154.90.15.0/24 maxlen: 24
154.90.16.0/24 maxlen: 24
154.90.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107278 (0x1a30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 12:20:56 2025 GMT
Not After : Nov 16 12:20:56 2025 GMT
Subject: CN=68e7a8b3-72cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b0:7c:f9:31:0d:14:48:c5:08:8c:95:64:e5:
89:e2:f7:e7:62:34:f0:b9:ed:a2:61:6c:79:b6:b7:
39:43:7c:23:34:16:aa:df:cd:32:f4:8d:3c:9f:fc:
42:f6:7a:8b:f2:77:86:c5:18:d5:47:0d:46:df:dd:
7b:73:3d:87:7b:1b:88:79:e2:58:bc:cb:7a:d0:57:
f6:4b:44:dd:b5:a2:59:9a:eb:7c:18:1d:97:83:fe:
0b:6b:4f:b5:65:49:ac:c3:c6:b4:cd:f6:ad:5f:cb:
67:cc:0b:24:c6:1f:f4:34:13:e4:36:13:98:03:53:
1d:ad:b4:51:c3:dc:f1:f7:6e:3a:0b:5f:1b:b5:5a:
4e:6a:60:52:09:ba:ad:59:05:d8:9f:35:d6:33:87:
90:e8:a9:63:a4:95:44:c9:7e:c6:4c:bd:d3:12:8c:
3e:a2:3b:a4:6a:5a:8a:89:56:d8:f7:d5:b0:c8:b0:
37:b3:d7:76:2c:2c:93:f7:36:df:84:cf:ba:5a:7f:
e5:af:97:f5:a5:c5:93:79:17:dc:88:cc:1d:86:ee:
e6:e6:af:f3:a1:bb:12:e7:89:34:8f:0b:2d:f9:66:
0e:ed:c9:9d:9f:14:e5:3a:22:38:38:10:cf:d4:cb:
fb:32:15:1e:a8:2b:31:21:10:80:c1:b8:23:0b:96:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A9:45:70:97:6E:BB:B2:EC:3E:B4:40:E1:3F:35:99:3B:E1:F4:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E5A6F26A50A11F0B98B43E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.2.0/24
154.90.9.0-154.90.17.255
Signature Algorithm: sha256WithRSAEncryption
7f:a2:f4:e2:d8:3b:8b:60:f2:81:bd:00:48:40:be:b8:f8:31:
84:9b:8a:48:7f:7f:08:b7:34:1e:d3:9d:3a:5a:ed:66:82:99:
c2:1e:6e:3d:9f:d8:bc:54:d2:95:af:f7:1e:79:29:01:38:86:
d3:29:1c:44:88:f5:37:f5:ec:dd:84:ec:c6:37:a7:e2:d4:73:
36:4a:16:58:20:86:22:0c:ff:f7:33:fb:d1:06:e0:3b:d3:03:
5c:50:3d:c9:7c:1f:50:55:48:ca:4e:ef:83:90:6c:b0:e6:27:
42:9e:82:f9:1c:8f:0e:82:fd:a0:27:e6:f8:80:0c:b4:e8:6a:
24:33:89:f7:11:8e:1a:21:2b:1f:30:b0:d6:47:db:bc:c3:8c:
c3:80:90:5f:16:71:4c:08:11:9a:88:3f:04:fd:61:d8:0b:0b:
d8:72:1a:42:58:be:ca:1c:fa:c2:08:e8:00:99:11:74:6b:a5:
1d:1f:de:04:56:df:c2:92:ce:d4:42:a1:27:9f:90:9c:45:c6:
57:dd:3b:44:ee:d1:66:e1:3f:0e:f5:c4:02:3e:c2:fc:22:0d:
01:56:b3:59:8b:38:51:6b:c8:3e:39:85:bb:16:f0:a8:1d:fc:
c0:ad:2a:19:5e:b1:c5:28:2d:00:83:ae:ac:00:f2:13:be:e2:
3e:00:3c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:20 2025 by rpki-client