Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A73D64CA1F911F0931EDD82DAE4EC9C.roa
File: 9A73D64CA1F911F0931EDD82DAE4EC9C.roa (raw, json)
Hash identifier: cqFmMUMDODXXa7Y0EJWNLRvOhonfdUOYRg2g+BQgG1Y=
Subject key identifier: D0:75:F3:8D:22:C0:33:80:C7:66:F5:D8:B6:C6:1F:EF:70:6E:C6:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A249
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A73D64CA1F911F0931EDD82DAE4EC9C.roa
Signing time: Sun 05 Oct 2025 14:43:06 +0000
ROA not before: Sun 05 Oct 2025 14:43:01 +0000
ROA not after: Sun 09 Nov 2025 14:43:01 +0000
asID: 200373
IP address blocks: 154.213.161.0/24 maxlen: 24
154.213.162.0/24 maxlen: 24
154.213.163.0/24 maxlen: 24
154.213.164.0/24 maxlen: 24
154.213.165.0/24 maxlen: 24
154.213.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107081 (0x1a249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 5 14:43:01 2025 GMT
Not After : Nov 9 14:43:01 2025 GMT
Subject: CN=68e283fa-f57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:a4:ff:8f:88:2f:61:af:1a:39:42:7e:25:
c6:88:20:77:6b:34:be:3d:d0:22:a2:93:2a:14:df:
a1:a2:00:77:df:ce:85:e7:da:02:d1:de:e0:4f:2c:
90:18:b4:a8:78:00:85:b8:b1:04:45:0b:41:9d:2b:
4b:5c:69:6a:90:23:03:87:a7:b1:80:eb:01:ec:cd:
05:c9:21:85:40:0a:8f:d8:6d:9f:49:c5:58:4b:4f:
32:37:60:f6:19:a1:b4:dc:4a:6f:73:54:a2:00:57:
ad:f8:ea:69:2a:db:78:16:cf:9c:51:11:d2:fd:ae:
1d:6c:5f:3a:ed:10:c3:7f:5d:5d:42:d3:ea:9e:2a:
f1:bd:37:9e:90:e2:24:46:5b:5b:8f:98:64:2f:ff:
0d:a8:b6:c8:cb:12:f3:86:85:56:61:be:6e:e1:6b:
08:71:da:c3:c8:86:ed:7c:4f:2e:b8:9e:36:5d:43:
58:d9:4d:7a:99:98:34:bd:ab:41:eb:d2:d2:98:bb:
3a:c5:53:8e:25:35:c4:bb:fa:45:a9:3a:1b:1c:38:
40:0a:5f:a9:22:18:7f:b1:b0:72:92:5c:59:dc:c6:
d2:c5:a4:ed:0a:5d:eb:12:21:05:24:b2:49:b9:b1:
b6:4f:ae:db:d0:2a:d8:a1:7c:1c:d1:2e:39:fd:13:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:75:F3:8D:22:C0:33:80:C7:66:F5:D8:B6:C6:1F:EF:70:6E:C6:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A73D64CA1F911F0931EDD82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.161.0-154.213.166.255
Signature Algorithm: sha256WithRSAEncryption
d2:98:56:19:5b:10:9c:e4:59:0a:54:53:22:9a:72:8f:bb:30:
6a:b2:fb:ed:19:d9:f8:d3:8a:8f:1a:e6:c2:fc:8c:fd:5b:ec:
ae:c4:f1:d8:43:c9:1d:e2:07:32:81:6b:a8:3e:6b:dc:c1:57:
f4:81:ae:2d:43:e0:95:fc:35:92:5e:62:42:7b:12:6a:a7:15:
fb:ac:a9:43:02:cf:a2:3d:26:b6:b8:b8:c3:c5:42:a6:c5:fa:
e7:16:87:35:79:de:9e:d1:99:e0:61:f1:19:67:e6:8d:af:8e:
21:6a:d0:76:d8:f0:ad:f6:c8:ea:c6:bc:e0:e8:6d:55:ed:62:
40:76:74:f3:d2:cf:7c:dd:4e:85:58:27:65:37:85:7e:37:6a:
75:f6:14:38:fc:6a:40:b0:34:c9:e3:90:6c:13:21:66:6b:4b:
1b:b1:03:91:6a:a0:9d:f7:a7:57:3b:35:b4:a5:2a:53:5f:dc:
12:4c:97:c7:ff:40:58:1d:47:4e:61:9d:9f:9e:93:73:02:04:
c4:df:b0:4f:8c:e4:f3:d9:1b:24:53:e4:0c:ed:d3:0a:ee:13:
7c:e6:a4:63:78:be:4f:43:a6:db:86:a5:79:a9:e7:4f:09:1e:
67:c9:e5:bf:fd:2d:ab:30:db:cd:c8:db:73:f9:94:bf:81:ff:
ad:73:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:45 2025 by rpki-client