Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E17318EB34E11F08F2F19D1DAE4EC9C.roa
File: 9E17318EB34E11F08F2F19D1DAE4EC9C.roa (raw, json)
Hash identifier: VoMWygVQPEUueebkrY/tJ4mXK/0FagePbh50IHfg7Zo=
Subject key identifier: 3F:F1:4A:13:91:18:36:DD:99:34:CB:B0:CD:8F:56:99:FD:5B:D7:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A543
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E17318EB34E11F08F2F19D1DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 16:04:29 +0000
ROA not before: Mon 27 Oct 2025 16:04:24 +0000
ROA not after: Mon 01 Dec 2025 16:04:24 +0000
asID: 62240
IP address blocks: 154.194.82.0/24 maxlen: 24
154.195.116.0/24 maxlen: 24
154.195.117.0/24 maxlen: 24
154.195.118.0/24 maxlen: 24
154.195.152.0/24 maxlen: 24
154.195.153.0/24 maxlen: 24
154.195.154.0/24 maxlen: 24
154.195.155.0/24 maxlen: 24
154.195.156.0/24 maxlen: 24
154.195.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107843 (0x1a543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 16:04:24 2025 GMT
Not After : Dec 1 16:04:24 2025 GMT
Subject: CN=68ff980d-a8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:8d:3a:03:d3:9a:d4:95:78:9a:c5:e1:f9:
d8:63:d0:a1:14:70:ea:19:2a:aa:17:8c:8f:99:70:
3a:8e:47:df:53:b1:e7:2d:13:62:db:0b:3a:3b:2f:
78:24:fc:d0:79:3b:ad:af:56:9b:b2:d1:17:4b:f5:
e9:24:72:f1:f2:22:17:4e:83:60:44:9c:7f:2f:bb:
0a:91:82:5c:f1:64:51:b5:b2:10:fc:db:e0:c6:78:
68:b4:5a:f0:b5:4f:7f:c0:28:f2:bd:38:b0:0a:1e:
58:14:3b:3b:ae:dd:fa:31:8c:56:6b:db:d6:ae:8d:
44:06:a0:ee:aa:26:2d:c9:5c:e7:cc:20:de:8a:5c:
10:80:4b:7e:bc:9f:a1:13:17:9f:f3:82:ab:5f:a7:
ba:44:40:fe:63:71:5b:ba:4c:19:78:af:88:9a:38:
ef:70:7c:35:df:8d:c6:ef:dc:1d:9a:e3:77:36:97:
bf:e0:d7:45:d6:67:6b:d7:7c:71:81:08:b9:fa:55:
25:0d:46:30:8c:df:17:fe:74:55:0a:a7:3e:87:f4:
fb:75:3e:86:5e:70:e9:70:12:5e:19:0e:68:ba:2a:
83:df:d0:d8:11:2a:55:3f:c0:5a:61:3c:45:52:b1:
62:1d:dd:e2:16:01:cb:cb:be:c8:0c:ee:ef:df:09:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F1:4A:13:91:18:36:DD:99:34:CB:B0:CD:8F:56:99:FD:5B:D7:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E17318EB34E11F08F2F19D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.82.0/24
154.195.116.0-154.195.118.255
154.195.152.0-154.195.157.255
Signature Algorithm: sha256WithRSAEncryption
6d:4b:0d:ff:b1:28:90:eb:a1:89:90:91:11:f5:d2:a0:3c:ff:
71:54:ff:03:f5:85:62:1a:bc:3b:46:51:9d:75:89:48:eb:b6:
68:e7:d3:ca:76:3b:41:a6:d8:6e:7b:e8:d4:98:00:58:72:f0:
f3:4b:b9:42:7d:78:2e:94:22:27:d6:c1:47:33:6d:91:8d:82:
d1:33:80:96:f1:99:3c:21:7c:40:f8:f5:1e:c6:a4:31:5e:10:
bb:a8:9b:54:4e:11:9f:82:a2:81:c2:93:32:31:00:00:8d:47:
ed:48:dd:7e:30:65:19:c2:42:e5:96:18:b6:d8:3d:87:f4:52:
a5:47:d9:4f:a7:07:66:97:e1:27:18:41:29:e8:49:bb:d7:85:
a5:81:35:3f:a7:de:2c:fd:b2:d6:3f:86:b3:70:a4:da:a9:f5:
b8:1e:01:d2:76:69:ec:cb:98:78:29:3a:65:aa:d8:04:e8:03:
51:a2:9d:af:84:de:45:d6:39:15:66:b0:54:04:3e:d5:67:80:
d9:84:e2:76:1c:a6:d3:24:77:1e:b1:dd:6c:22:1f:b8:b6:7c:
b3:c2:0f:b2:50:e2:8c:77:ae:e1:5a:b4:1e:e2:2d:35:b5:56:
d1:3e:37:2e:58:47:70:84:a8:ff:29:fb:b7:33:e1:d3:01:80:
c7:ef:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:47 2025 by rpki-client