Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFDE6B0E993A11F086E3FECCDAE4EC9C.roa
File: AFDE6B0E993A11F086E3FECCDAE4EC9C.roa (raw, json)
Hash identifier: T32PpmomZkBOKa6edqFwP9kIv2FY34u9DhbMzIv0te8=
Subject key identifier: 4C:35:D2:43:0B:F3:7F:47:9D:AB:39:84:48:97:3A:4E:49:D0:68:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A054
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFDE6B0E993A11F086E3FECCDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 11:36:19 +0000
ROA not before: Wed 24 Sep 2025 11:36:14 +0000
ROA not after: Sat 01 Nov 2025 11:36:14 +0000
asID: 214413
IP address blocks: 154.193.136.0/21 maxlen: 24
154.193.144.0/22 maxlen: 24
154.193.148.0/22 maxlen: 24
154.193.168.0/22 maxlen: 24
154.193.172.0/22 maxlen: 24
154.193.176.0/22 maxlen: 24
154.193.180.0/22 maxlen: 24
154.194.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106580 (0x1a054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 11:36:14 2025 GMT
Not After : Nov 1 11:36:14 2025 GMT
Subject: CN=68d3d7b3-8446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:29:0e:db:88:34:65:d4:ec:ce:31:b2:b4:
2b:74:d2:20:30:3f:49:01:bf:04:b5:2f:1b:d2:98:
f1:39:ae:ba:d7:9e:be:2d:a4:d3:6b:bd:f1:3f:f7:
d6:71:a2:79:23:1e:00:85:f3:26:a9:bd:ba:84:e6:
84:2f:be:03:12:59:06:d7:45:01:93:b4:8e:fb:ac:
6b:b4:18:bc:6a:69:ac:10:46:2a:48:b5:dc:3d:cc:
a6:6d:46:10:86:d2:bd:20:77:af:01:14:e0:4c:1b:
ed:85:f8:cd:62:b6:8d:be:1a:ff:e8:e7:19:72:44:
44:2a:4d:3c:f5:ea:c9:0f:45:4f:e8:50:02:0b:c0:
e8:c6:ae:43:f5:bb:c8:9f:b5:c2:d3:ba:aa:d9:82:
a1:6e:7d:23:e4:2f:84:ee:03:de:40:51:10:e5:f8:
ba:7b:2c:4c:22:e6:ed:ae:0a:e1:82:de:5d:71:bd:
13:a8:26:38:61:c9:b9:39:fc:6d:03:38:18:42:93:
63:86:0b:62:25:92:05:6c:6d:ef:42:4a:75:c7:1c:
4a:f8:05:84:15:98:6e:5c:a0:14:2c:e8:5d:8e:08:
09:c1:5a:8a:2e:28:de:9e:fe:89:c8:f9:64:0a:0b:
f8:e2:59:b3:f4:4c:5c:02:4d:ca:a8:3e:63:2b:7d:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:D2:43:0B:F3:7F:47:9D:AB:39:84:48:97:3A:4E:49:D0:68:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFDE6B0E993A11F086E3FECCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.136.0-154.193.151.255
154.193.168.0-154.193.183.255
154.194.226.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:c6:52:19:93:cd:95:83:d8:58:21:68:66:f9:11:08:9e:25:
2a:b1:42:07:a7:d6:f9:c4:15:dc:4f:20:16:c6:a5:65:3b:74:
bb:08:5d:e1:d6:01:42:a5:ae:fa:60:69:c3:89:b8:f3:4e:6d:
4a:ea:e9:f8:52:2a:58:19:4f:ed:cf:d0:92:c5:67:7d:d5:7c:
ee:97:37:9c:43:fa:6c:74:62:ee:15:b7:f2:6e:cb:36:14:09:
3e:f1:eb:aa:af:fe:8a:e7:cc:80:05:cf:3d:73:6d:30:f8:d3:
a1:fc:52:ee:a4:fc:c9:d2:9a:24:83:76:84:9f:63:e7:7c:08:
2e:14:99:ca:87:6c:e0:e9:5c:74:a8:89:ed:1d:4b:87:bd:1c:
d2:a0:76:3c:a1:82:8a:75:87:60:77:99:23:e3:93:5f:7a:3b:
c0:f8:78:f1:2c:56:f0:45:4f:a6:9c:88:0b:a8:3f:ce:9c:fc:
f6:e2:bb:25:44:1a:8c:14:9e:cc:98:fe:42:7e:ea:3b:94:51:
f2:3d:4d:8b:a7:51:e6:c8:53:31:69:d2:37:00:65:c2:b4:7c:
9c:59:a0:62:48:7f:a6:c7:27:bb:e4:8d:2a:1d:0b:2a:d3:02:
2e:17:86:5d:d0:e4:90:0f:d2:09:d8:b9:04:d1:63:2e:97:7c:
2a:ac:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:05 2025 by rpki-client