Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EA508D2A28111F08623B17ADAE4EC9C.roa
File: 6EA508D2A28111F08623B17ADAE4EC9C.roa (raw, json)
Hash identifier: Va65GymLAOkyeA9q3qCDzIk/VdkynTxLVAp+7oX8gV8=
Subject key identifier: 19:14:39:DA:29:AB:CA:2B:66:1E:25:70:31:77:58:67:33:EF:D7:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A252
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EA508D2A28111F08623B17ADAE4EC9C.roa
Signing time: Mon 06 Oct 2025 06:55:24 +0000
ROA not before: Mon 06 Oct 2025 06:55:17 +0000
ROA not after: Thu 06 Nov 2025 06:55:17 +0000
asID: 45194
IP address blocks: 154.84.193.0/24 maxlen: 24
154.84.225.0/24 maxlen: 24
154.84.226.0/24 maxlen: 24
154.84.227.0/24 maxlen: 24
154.84.228.0/24 maxlen: 24
154.84.229.0/24 maxlen: 24
154.84.230.0/24 maxlen: 24
154.84.231.0/24 maxlen: 24
154.84.232.0/24 maxlen: 24
154.84.233.0/24 maxlen: 24
154.84.234.0/24 maxlen: 24
154.84.235.0/24 maxlen: 24
154.84.236.0/24 maxlen: 24
154.84.237.0/24 maxlen: 24
154.84.238.0/24 maxlen: 24
154.84.239.0/24 maxlen: 24
154.84.240.0/24 maxlen: 24
154.84.241.0/24 maxlen: 24
154.84.242.0/24 maxlen: 24
154.84.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107090 (0x1a252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 6 06:55:17 2025 GMT
Not After : Nov 6 06:55:17 2025 GMT
Subject: CN=68e367dc-6a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:bd:45:e3:ce:0f:96:1b:df:28:95:a5:34:
de:2d:87:ca:bd:65:b5:8b:f1:ed:99:31:d8:0a:33:
90:3b:8c:07:e3:05:47:6d:ce:83:4f:e3:54:28:2b:
39:c3:34:04:1c:75:f0:7a:85:41:1a:7f:93:fe:b1:
72:b5:ad:da:73:7e:52:3b:04:84:a5:ec:c5:37:ee:
f3:a1:82:5c:99:43:1e:75:4e:9f:7f:be:c1:4a:be:
31:eb:a1:c9:e2:71:07:e9:82:d3:7e:56:12:25:f7:
a3:91:64:18:f1:c7:00:92:c1:d1:e6:bc:fe:f4:43:
be:79:1e:18:8e:e7:f8:67:9e:e9:b9:03:dd:70:e3:
22:19:57:35:30:39:b3:50:80:26:85:1c:c6:6f:51:
cb:ca:56:c2:5d:e7:17:3a:a3:bd:2b:3e:51:34:ce:
b8:2d:b8:57:02:c0:fb:5a:82:f5:cc:13:a0:69:de:
67:5e:0b:69:81:01:58:74:30:62:7e:ef:fb:9b:ec:
9e:b2:b3:93:93:0e:33:8c:64:e5:fd:4f:e4:a7:48:
9e:66:75:44:a1:00:98:d7:b4:21:f2:ad:72:56:d8:
b5:71:c4:dc:c6:a2:89:94:94:1e:ab:ae:d7:88:35:
30:e9:72:c3:ec:59:91:36:0b:f5:9c:81:97:12:96:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:14:39:DA:29:AB:CA:2B:66:1E:25:70:31:77:58:67:33:EF:D7:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EA508D2A28111F08623B17ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.193.0/24
154.84.225.0-154.84.243.255
Signature Algorithm: sha256WithRSAEncryption
1a:ec:89:52:a5:f4:46:32:e8:42:d1:05:a2:e6:f4:12:81:ac:
1f:41:27:61:1b:db:fd:f9:79:f2:8f:39:d4:71:33:ae:f4:9e:
3b:20:90:3a:8e:a4:a2:ad:79:4e:93:8c:df:f9:12:a0:5c:a6:
d3:ff:e3:21:33:a7:fa:59:ea:e6:64:72:20:ef:bf:40:8d:5e:
6a:96:e1:45:b3:e6:df:f1:54:9d:1a:20:a2:e6:a2:99:09:a8:
73:b7:d6:0b:92:47:e8:3f:8e:f4:99:fd:15:5e:a9:0c:13:93:
14:f1:0d:e7:a7:e3:55:df:cc:0c:92:67:6f:3c:f2:f3:c5:c2:
3e:5d:b6:cb:39:27:8a:31:fc:76:b0:97:23:a6:2f:c6:e8:a6:
ad:b4:9b:cf:10:8f:9e:65:5d:fb:59:e3:b0:e2:41:41:46:d0:
51:1a:31:59:00:c4:48:5a:44:83:29:8a:ef:0f:2c:bc:e3:06:
a8:8f:ec:6f:57:cb:75:11:14:30:7f:11:6f:e4:85:d1:1f:f7:
8a:0a:45:e3:66:27:84:6e:f1:3b:71:99:79:6f:78:01:56:93:
ac:56:50:af:4d:47:ea:d0:04:2b:ea:c8:d2:8e:52:8a:b3:a9:
b8:ab:ec:d6:f7:2a:bb:22:32:d1:97:30:c8:63:52:51:4f:b2:
89:c8:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:02 2025 by rpki-client