Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85CBF1BAA4E811F09C13A18BDAE4EC9C.roa
File: 85CBF1BAA4E811F09C13A18BDAE4EC9C.roa (raw, json)
Hash identifier: ZpqOWn3gWRuvABl694VS5uwED3MusFabDysf3AnUV28=
Subject key identifier: 8A:7E:4E:98:7F:C9:6D:42:87:A9:39:7E:EE:27:97:F9:29:FA:5D:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85CBF1BAA4E811F09C13A18BDAE4EC9C.roa
Signing time: Thu 09 Oct 2025 08:18:24 +0000
ROA not before: Thu 09 Oct 2025 08:18:19 +0000
ROA not after: Mon 10 Nov 2025 08:18:19 +0000
asID: 203020
IP address blocks: 154.217.156.0/23 maxlen: 24
154.217.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107248 (0x1a2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 08:18:19 2025 GMT
Not After : Nov 10 08:18:19 2025 GMT
Subject: CN=68e76fcf-31c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:01:1e:a7:ad:28:c9:22:51:e0:22:5b:6e:
f7:98:ad:39:c3:8c:ca:32:c9:6d:ef:69:de:c5:42:
3f:5d:f6:53:4a:34:6b:d6:cf:be:2c:96:87:a6:c6:
f2:e2:85:0c:a5:73:7d:f9:7d:09:64:a7:b4:7f:fc:
34:96:4c:5c:ff:e9:79:80:87:8e:11:67:c6:94:1b:
6e:02:49:10:a2:86:41:69:dd:1f:ad:29:f5:55:88:
3c:76:ce:80:78:07:ad:c1:25:bb:e5:bf:a5:ff:dd:
83:09:a0:80:56:a1:51:6d:15:d7:76:b2:16:c3:c3:
ea:64:c8:fc:cb:55:71:03:65:99:d3:82:88:d9:55:
ac:09:16:40:34:c7:3d:97:f8:c6:37:1b:0d:64:59:
76:b2:69:5d:69:67:b2:1d:c0:62:1e:20:62:e6:8c:
79:f0:07:c5:7d:65:4d:aa:80:78:55:88:8c:9d:2e:
e7:32:f2:d9:b3:51:e3:bd:0d:3b:5e:ff:c7:11:28:
8f:b2:cd:8f:84:ad:34:6f:9c:24:1e:7c:d2:91:a5:
c6:bf:9f:99:bf:e6:87:7c:e2:96:d7:1a:c5:92:e2:
28:b9:e2:8b:b2:6d:23:fa:a8:8f:10:1d:86:18:e4:
e5:d0:08:06:29:8e:c1:fb:8a:12:a2:1e:32:47:ef:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7E:4E:98:7F:C9:6D:42:87:A9:39:7E:EE:27:97:F9:29:FA:5D:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85CBF1BAA4E811F09C13A18BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.156.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:4c:56:a9:87:3d:5e:99:35:ee:cc:52:b6:20:38:f6:5a:11:
42:8d:a7:e9:4d:ba:6b:51:48:64:eb:4f:c6:7d:09:90:13:20:
a8:77:59:5a:7b:f2:82:20:7b:62:18:af:53:6a:22:d3:58:02:
ce:13:fd:1c:f6:3d:3f:e6:2a:7b:52:74:c7:8e:3a:5d:55:fc:
9a:61:31:5f:ba:dd:4d:d0:02:57:17:44:c7:58:49:3a:3c:2b:
95:78:6f:58:7f:10:5b:4c:ec:3e:9b:f0:2f:75:93:26:f5:1f:
5d:57:65:b3:15:40:6d:9b:92:c5:4c:45:75:0c:51:a6:b2:7a:
f3:f4:fa:85:e7:b5:98:e4:c0:a5:89:b5:8c:27:22:82:74:0b:
13:f9:65:49:85:0a:4e:57:c8:a6:e1:0f:3a:7f:db:ee:e9:97:
d7:d0:b8:67:57:e7:29:f1:fe:4b:bd:c7:e9:3a:db:d5:cf:b0:
70:e2:54:98:d8:e0:36:0f:ab:e8:f5:c4:9f:83:f1:a3:2b:49:
c8:bc:50:6a:db:88:c9:6f:13:e8:09:9e:0d:49:b9:78:17:77:
71:0e:29:39:0d:55:b4:b8:0c:9c:62:d0:7d:0b:d0:63:ac:54:
de:80:a1:cf:ae:bf:85:57:67:5d:7d:69:a0:01:18:3e:f5:27:
4a:e6:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:51 2025 by rpki-client