Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A517F2D28FAB11F0A626B7F5DAE4EC9C.roa
File: A517F2D28FAB11F0A626B7F5DAE4EC9C.roa (raw, json)
Hash identifier: rnB78zHlbKmyuso49RDrqDW2+Cg6XCLP0SQyUxmCN04=
Subject key identifier: 48:D5:C9:2D:B4:67:87:E4:49:D8:90:59:22:A4:1D:4D:EB:A7:98:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A517F2D28FAB11F0A626B7F5DAE4EC9C.roa
Signing time: Fri 12 Sep 2025 07:39:42 +0000
ROA not before: Fri 12 Sep 2025 07:39:38 +0000
ROA not after: Thu 16 Oct 2025 07:39:38 +0000
asID: 22773
IP address blocks: 154.198.20.0/24 maxlen: 24
154.198.21.0/24 maxlen: 24
154.198.22.0/24 maxlen: 24
154.198.23.0/24 maxlen: 24
154.198.24.0/24 maxlen: 24
154.198.25.0/24 maxlen: 24
154.198.26.0/24 maxlen: 24
154.198.27.0/24 maxlen: 24
154.198.28.0/24 maxlen: 24
154.202.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106346 (0x19f6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 12 07:39:38 2025 GMT
Not After : Oct 16 07:39:38 2025 GMT
Subject: CN=68c3ce3e-71fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e2:c0:01:83:05:1e:07:69:d6:94:ef:eb:9a:
ae:3e:77:ec:48:18:00:32:3b:fa:c5:03:aa:f3:54:
32:00:0f:06:de:11:bc:d1:98:3b:9c:47:17:4b:09:
f7:79:ef:ee:d1:b1:d7:30:c0:c8:57:0a:60:12:85:
89:32:5e:a6:70:e0:1b:20:1c:87:7f:d8:b9:5d:c5:
d6:f8:31:2c:f0:53:d6:fd:b5:41:88:26:f1:ff:97:
51:d2:6f:fa:85:a6:1b:95:f9:35:70:dd:8f:35:e5:
34:92:10:c7:73:d9:33:c5:ab:91:f3:21:93:d0:27:
0e:16:8b:cf:3d:09:7a:d1:f6:a5:53:26:7c:6e:2d:
f1:95:90:53:0d:39:89:0f:a9:8e:79:0e:1d:a5:cd:
d6:3a:5e:31:be:eb:99:7e:e2:bc:3e:67:9c:4b:dd:
ae:cc:c3:7e:58:68:6e:e0:45:b1:7b:dc:7c:9d:d0:
b2:19:84:2d:1a:08:1d:e1:37:de:7b:11:9f:79:c2:
10:0f:fd:f8:b7:c8:e3:2d:88:58:3b:7f:55:ed:23:
c5:7e:3e:40:cf:11:da:10:dc:0b:d2:be:c4:ae:88:
c6:1c:f5:aa:e1:d4:3b:04:b0:89:1c:6c:66:a3:5e:
24:ed:2a:4e:f8:fe:0e:d3:24:3a:d1:4e:ec:13:e8:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D5:C9:2D:B4:67:87:E4:49:D8:90:59:22:A4:1D:4D:EB:A7:98:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A517F2D28FAB11F0A626B7F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.20.0-154.198.28.255
154.202.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b5:8c:60:8e:76:ae:8c:37:40:e8:55:73:b8:a6:91:a8:81:
e5:1c:94:90:bd:5e:7e:20:ef:63:5d:ba:6f:39:52:50:7e:de:
e3:b5:7b:1b:87:80:cb:90:ff:38:cb:91:ae:c6:98:fd:7a:14:
a7:23:8c:b0:83:55:b8:5e:ef:b5:40:05:4d:9e:7e:62:78:1b:
90:a6:83:a1:d7:4c:97:c5:77:91:97:cf:4c:6e:26:55:98:6b:
f9:0c:39:ed:fa:7e:e8:85:aa:ad:a3:c6:99:8f:8c:84:73:cd:
07:9e:83:fa:1c:15:e2:dc:0c:93:01:0d:50:84:dd:84:6b:11:
93:c3:9e:3a:49:24:e3:bb:c4:9e:a7:b2:91:41:be:c5:4d:a9:
b1:95:39:e0:45:38:19:f2:41:df:5f:a9:25:07:cd:f1:ff:af:
8c:b9:0b:f0:cf:16:80:cf:92:fe:b9:05:0c:f6:d8:bb:68:81:
ab:30:f7:c3:4f:5e:e5:5d:c5:71:6a:0c:0f:0e:3d:4f:b2:e4:
0f:33:9e:34:a8:1d:72:9d:33:7d:98:52:a6:c8:9a:a0:28:d0:
e2:66:3b:c5:be:ab:49:79:17:52:9d:8c:d8:98:de:e7:77:48:
1b:e4:69:1b:fc:82:6c:64:4a:49:9b:00:33:d2:21:cc:ac:4a:
23:85:8f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:53:26 2025 by rpki-client