Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A06CD6FCB36011F093BC80C1DAE4EC9C.roa
File: A06CD6FCB36011F093BC80C1DAE4EC9C.roa (raw, json)
Hash identifier: ESGo26nH56SGhGQLslbVleeLED9zzXhrPWDOUjmZGKY=
Subject key identifier: DD:32:1C:6F:3A:F2:27:08:4B:DD:0E:14:7B:6D:95:9F:24:75:E1:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A56D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A06CD6FCB36011F093BC80C1DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 18:13:24 +0000
ROA not before: Mon 27 Oct 2025 18:13:17 +0000
ROA not after: Mon 01 Dec 2025 18:13:17 +0000
asID: 62240
IP address blocks: 154.196.54.0/24 maxlen: 24
154.196.55.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
154.196.62.0/24 maxlen: 24
154.196.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107885 (0x1a56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 18:13:17 2025 GMT
Not After : Dec 1 18:13:17 2025 GMT
Subject: CN=68ffb644-e5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:88:76:26:b8:99:19:3a:bc:10:43:52:15:
c1:75:d9:81:5d:95:50:79:5e:03:02:fa:95:1e:7c:
70:78:68:79:ad:7a:0a:1c:99:ff:79:69:86:cc:04:
6c:11:43:dd:d9:93:bf:8d:ab:46:e1:70:00:11:91:
00:46:16:1d:1a:8f:4b:43:a9:7b:84:36:96:21:08:
fd:a0:1f:d0:a7:c8:f9:dd:b0:db:6f:fb:eb:5f:8a:
8b:bd:c6:5c:0e:64:1e:79:12:b8:59:ad:08:36:72:
43:5d:50:d1:2e:f4:9f:d9:e3:c8:c5:0b:7e:f1:6a:
09:38:c4:d7:27:76:42:a1:75:82:aa:6e:7d:29:8f:
af:49:55:a0:8c:ff:cc:47:29:78:fb:39:d8:44:da:
3d:39:18:80:36:ba:6f:97:84:27:6b:0d:f4:7e:4f:
be:52:16:fc:ba:38:77:49:4d:c8:81:98:64:58:e3:
07:80:f5:e4:d1:9a:c6:ff:e1:27:81:26:20:ee:0f:
50:5a:6b:82:e2:a6:76:89:0b:e3:6f:8d:06:5e:a0:
39:15:13:c3:b6:86:7a:87:18:d8:68:34:f4:ab:04:
69:31:c6:8a:4b:70:30:fd:b4:94:28:51:b2:15:4f:
7f:ce:8a:e6:f7:60:bb:a8:a4:4f:28:d4:fb:4b:d6:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:32:1C:6F:3A:F2:27:08:4B:DD:0E:14:7B:6D:95:9F:24:75:E1:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A06CD6FCB36011F093BC80C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.54.0-154.196.62.255
154.196.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:33:e9:4d:d6:e0:fd:49:a3:ea:42:be:1c:d1:a8:44:b2:57:
d1:31:f1:b6:13:3f:9a:d6:8b:de:d2:e5:94:fe:74:30:28:c1:
69:e4:d9:24:e5:15:93:b7:80:ae:42:43:c3:a0:26:4b:4c:d0:
09:41:f5:de:39:c6:04:65:f5:0c:f4:b8:49:1c:be:fb:7b:ee:
1f:65:3a:8b:87:c0:c3:91:fd:24:7a:98:c5:22:f1:fc:6f:f9:
6f:2c:d8:f8:44:97:93:52:23:e1:ab:5e:65:01:87:61:44:2c:
b1:c7:93:d1:21:93:4f:15:af:19:b4:6d:f1:ea:a3:20:ba:b4:
77:01:c8:eb:63:ee:2e:3e:a4:c8:8c:ce:73:4d:e7:57:20:af:
7b:81:85:f8:a4:d1:7a:7a:f4:0d:28:7e:db:3c:ae:eb:14:7d:
83:0f:33:42:17:1d:27:1f:cd:a7:5a:67:db:66:25:ed:79:da:
74:66:03:2e:b8:33:17:33:26:b0:7e:d2:4f:8c:7e:6c:47:35:
db:b1:4c:0a:9e:f4:45:8f:37:d6:3a:c5:9a:7a:eb:0d:01:99:
8a:3c:5d:6f:e4:99:6b:c8:61:27:41:9d:6a:e0:eb:50:9a:16:
ba:97:bc:86:2e:07:ea:01:26:72:04:95:50:91:cb:26:11:fb:
46:30:2c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:47 2025 by rpki-client