Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EA92EFA9D6111F08F2CB5ACDAE4EC9C.roa
File: 6EA92EFA9D6111F08F2CB5ACDAE4EC9C.roa (raw, json)
Hash identifier: KukH+9rI3cDddWJmQDaTDZFRPRRt16iVzZnfxt/NXew=
Subject key identifier: D6:1B:5C:BE:D1:51:13:BD:1E:21:9E:2A:C5:9C:B5:95:96:69:F3:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A173
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EA92EFA9D6111F08F2CB5ACDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 18:23:45 +0000
ROA not before: Mon 29 Sep 2025 18:23:39 +0000
ROA not after: Fri 31 Oct 2025 18:23:39 +0000
asID: 44559
IP address blocks: 154.203.216.0/24 maxlen: 24
154.203.218.0/24 maxlen: 24
154.203.219.0/24 maxlen: 24
154.203.220.0/24 maxlen: 24
154.203.221.0/24 maxlen: 24
154.203.222.0/24 maxlen: 24
154.203.223.0/24 maxlen: 24
154.203.224.0/24 maxlen: 24
154.203.225.0/24 maxlen: 24
154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.205.224.0/24 maxlen: 24
154.205.225.0/24 maxlen: 24
154.205.226.0/24 maxlen: 24
154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106867 (0x1a173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 18:23:39 2025 GMT
Not After : Oct 31 18:23:39 2025 GMT
Subject: CN=68daceb1-16b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:a1:07:c4:cb:e3:d8:55:6d:af:2f:49:fc:
4e:ae:70:8a:7e:d8:5c:43:58:29:bb:c6:ba:be:48:
c8:4d:aa:7f:aa:cd:a8:be:fb:f2:d4:1b:e7:bc:2f:
bc:98:37:b9:43:90:1c:e4:20:6c:9f:8e:a9:ed:39:
ea:9b:72:92:19:2f:d2:80:bd:d0:12:4a:03:17:10:
40:5d:c8:24:6b:eb:d2:e3:96:ba:fd:f0:08:9a:12:
7a:63:63:b6:4a:56:c6:83:40:42:b8:a8:6f:18:19:
c2:90:91:26:e0:3b:b9:87:bc:ff:b0:d3:ac:ad:ca:
f8:e5:53:3b:6e:2f:83:86:89:cf:11:4d:0d:75:16:
0d:82:19:7b:00:b6:77:4c:55:21:dc:08:9b:ff:da:
08:bf:33:2e:a9:f7:06:c0:31:55:f9:85:6b:60:4c:
5d:76:bd:1c:f3:d6:65:de:0c:b3:1d:5f:95:7c:ca:
2a:74:d7:a4:b8:7e:81:9e:5b:0d:aa:99:2f:9d:de:
f6:6f:0a:c5:0e:78:16:8b:7b:99:32:44:53:58:e1:
30:94:02:2e:ca:f3:5e:6b:b9:f9:8b:16:7c:4e:8b:
ef:68:4a:60:64:c2:21:3a:67:2b:53:fe:2b:4b:5a:
9a:ec:ca:30:13:54:20:fc:18:c9:25:97:fa:b6:1e:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1B:5C:BE:D1:51:13:BD:1E:21:9E:2A:C5:9C:B5:95:96:69:F3:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EA92EFA9D6111F08F2CB5ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.216.0/24
154.203.218.0-154.203.225.255
154.203.230.0/23
154.205.224.0-154.205.232.255
Signature Algorithm: sha256WithRSAEncryption
d6:b4:52:8f:e6:fd:57:e8:ee:47:5f:0e:8c:77:b1:59:5c:81:
ca:bc:9c:2a:e5:38:9b:ee:e0:aa:66:7e:b2:4c:4d:a6:7e:64:
fd:4a:8f:37:2a:2f:20:28:1a:b5:ff:be:32:2c:14:4e:b1:d3:
5e:1b:9c:f1:14:ea:99:a2:c1:71:e9:91:f8:7c:2d:f8:7a:8d:
9b:08:fa:b5:86:61:83:50:f4:65:e9:e0:40:04:60:ac:87:05:
7a:59:f0:75:85:b1:bd:07:f9:69:1b:22:1c:12:e2:42:3a:ff:
0a:c4:34:1c:2c:ca:b8:f1:f1:7d:34:ec:ef:64:0c:26:15:ab:
ff:53:0f:a3:c9:b7:65:31:f9:4b:b2:a1:95:36:33:ab:3c:15:
bc:9d:da:43:a5:73:be:7d:ec:49:f6:19:2f:c6:10:51:05:0c:
c9:53:98:db:b8:a4:eb:23:ca:29:69:65:b4:f9:8b:67:e0:b5:
fc:3a:e0:59:14:65:ff:b3:1a:82:78:3d:40:9b:db:92:43:95:
cd:91:cb:ee:ed:d2:2b:69:18:92:3b:70:94:0a:2b:b1:56:ba:
2c:b6:51:e3:27:2c:2d:4d:1f:d7:30:85:c0:05:58:db:06:cb:
78:35:3e:aa:3c:71:d6:9b:02:c2:98:c0:a2:d0:05:a5:39:55:
ae:a2:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:35 2025 by rpki-client