Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A08D311CAA6F11F083F04A99DAE4EC9C.roa
File: A08D311CAA6F11F083F04A99DAE4EC9C.roa (raw, json)
Hash identifier: K48df1R449IzbCIlokBlJyhM/9DGtWw2G6PnHGDsz7g=
Subject key identifier: D7:63:28:D7:57:4E:19:41:DE:DA:EE:5D:FC:53:5A:7C:E0:D1:E9:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A08D311CAA6F11F083F04A99DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 09:08:06 +0000
ROA not before: Thu 16 Oct 2025 09:08:01 +0000
ROA not after: Sat 15 Nov 2025 09:08:01 +0000
asID: 138915
IP address blocks: 154.203.163.0/24 maxlen: 24
154.203.165.0/24 maxlen: 24
154.203.178.0/24 maxlen: 24
154.203.181.0/24 maxlen: 24
154.203.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107483 (0x1a3db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 09:08:01 2025 GMT
Not After : Nov 15 09:08:01 2025 GMT
Subject: CN=68f0b5f6-bb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:28:e7:3f:29:77:9e:ef:f0:e3:0b:12:22:
47:27:1b:99:e3:6e:10:d5:20:1d:5e:0d:cb:13:e8:
e0:83:71:74:fc:da:d8:7a:54:df:80:a6:e6:a7:b4:
e5:3c:75:b1:f0:db:7d:c3:68:fa:97:80:19:80:82:
8c:c8:05:cb:7f:d3:2b:0d:ee:52:34:e0:a8:96:5b:
10:92:d4:55:d3:5a:8c:ad:05:16:b6:51:43:77:c0:
6c:75:c4:15:87:14:e9:ef:5d:8c:94:33:29:51:ff:
14:a8:b9:82:4e:4c:7d:a7:e4:f4:d8:c4:82:aa:cc:
03:e8:c8:72:d2:ff:2f:ad:ba:52:7c:d0:dc:2a:4e:
e5:c9:e1:7e:62:25:68:46:17:0e:23:2f:98:ec:92:
29:93:c8:f6:c4:f3:a4:e8:ce:a5:c1:fb:50:5e:02:
9f:08:b6:1c:5b:91:04:ab:3b:75:1b:f6:7a:71:a9:
0e:8a:6f:79:aa:f2:21:5c:c2:58:16:f5:c2:11:05:
bc:3c:29:5c:aa:01:e3:f5:be:e4:81:0d:b6:19:41:
a9:4f:6c:77:9c:38:7e:f3:8f:5f:dd:c1:69:12:2b:
a2:78:81:8d:47:78:13:a0:c1:ad:6d:a5:7a:72:ed:
ba:5b:2c:88:07:ae:6c:28:8b:54:30:7c:0b:ad:e2:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:63:28:D7:57:4E:19:41:DE:DA:EE:5D:FC:53:5A:7C:E0:D1:E9:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A08D311CAA6F11F083F04A99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.163.0/24
154.203.165.0/24
154.203.178.0/24
154.203.181.0/24
154.203.191.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:f6:43:d7:87:b6:9c:92:ac:70:05:da:bd:54:2f:91:b6:ea:
7a:b8:d0:67:c3:4b:63:d6:9a:0b:21:c7:4e:0b:8f:f7:56:c8:
87:ee:2b:bb:fa:4b:37:4d:24:c3:92:50:01:d0:9c:85:7b:bf:
9e:30:19:37:d2:0f:5a:32:8f:7f:5a:f3:c1:f2:43:c5:16:41:
0a:5e:b9:4d:4f:d4:fe:1f:ad:d9:45:f4:97:51:78:d7:1f:da:
db:b0:7d:46:3d:09:34:18:6d:62:da:5a:e4:23:47:de:98:15:
de:e5:7d:1c:b0:78:66:90:3f:12:b6:3c:c7:97:b6:81:0d:80:
f6:45:8a:9b:55:d6:60:31:ef:6a:e6:2e:ad:db:e2:52:21:b5:
bb:8d:24:f4:3d:c2:8d:67:d9:c2:ed:dc:ad:ff:32:14:4c:57:
21:c4:7a:de:a1:b1:16:ff:66:1d:91:40:f3:66:67:50:ee:ef:
d7:7c:c5:17:5e:0d:85:01:32:f3:4f:8d:45:10:7a:94:6d:01:
aa:af:ba:86:69:ac:b5:83:94:4c:ef:84:1b:4d:5f:63:eb:b6:
d1:64:aa:6b:33:3e:ee:16:32:0a:18:c4:cc:b6:8c:79:39:2e:
d1:b5:60:7d:e0:a4:4f:03:d1:46:40:a1:27:3d:18:32:51:6a:
35:43:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:55 2025 by rpki-client