Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2E58B4EA42411F0AF4F2D96DAE4EC9C.roa
File: B2E58B4EA42411F0AF4F2D96DAE4EC9C.roa (raw, json)
Hash identifier: CMT/+3Kmc59lHzgP6jfRVeAxE4jlxmkf3aer4o/ZKKg=
Subject key identifier: 5B:F0:F7:01:15:1D:DE:19:13:C6:D2:27:AF:C0:E0:A5:12:AE:02:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2E58B4EA42411F0AF4F2D96DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 08:56:38 +0000
ROA not before: Wed 08 Oct 2025 08:56:33 +0000
ROA not after: Sat 15 Nov 2025 08:56:33 +0000
asID: 203020
IP address blocks: 154.201.37.0/24 maxlen: 24
154.201.38.0/24 maxlen: 24
154.217.0.0/17 maxlen: 24
154.217.91.0/24 maxlen: 24
154.217.94.0/24 maxlen: 24
154.217.95.0/24 maxlen: 24
154.217.179.0/24 maxlen: 24
154.217.224.0/22 maxlen: 24
154.217.228.0/22 maxlen: 24
154.217.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107193 (0x1a2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 08:56:33 2025 GMT
Not After : Nov 15 08:56:33 2025 GMT
Subject: CN=68e62746-d716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:5c:55:40:05:6e:b1:22:96:ea:c6:15:ab:
df:19:45:72:74:0a:5a:38:f7:bb:50:55:78:4d:ad:
bc:26:05:8d:f3:9f:e1:8f:32:b9:01:ea:85:3b:31:
02:44:1b:42:ab:e5:09:a8:3e:82:ac:99:3c:8a:a7:
49:76:94:f1:c4:57:ee:2b:98:ed:e6:a1:5d:86:f6:
e6:a7:dd:3d:20:e8:8f:aa:3f:44:a8:fe:dc:77:fd:
be:f0:8c:c4:c3:86:78:26:56:11:16:77:60:49:b6:
5c:de:3d:be:e4:0f:7a:eb:8b:1b:47:50:2d:2f:47:
2a:4a:52:15:d5:ac:18:6f:95:db:61:36:b5:a8:ee:
68:54:f0:d9:c5:01:aa:a6:6e:79:f6:df:3b:39:cc:
17:67:1a:6d:ff:be:02:14:df:9c:1c:a8:05:55:04:
61:5a:c6:63:83:8c:4f:f8:27:08:bf:23:8d:e6:57:
dd:58:8d:70:20:23:a7:7f:1f:b0:57:5e:c8:e8:d9:
2e:b8:de:3e:e6:d6:18:87:5c:ec:36:55:da:19:8e:
35:5d:d3:52:23:01:19:65:cb:9f:b0:06:45:56:1b:
e3:c7:ea:81:a3:31:ec:71:51:ae:90:c0:e5:58:e5:
2d:6b:2c:e8:fb:d2:80:a8:93:7f:34:b7:3d:d3:5c:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F0:F7:01:15:1D:DE:19:13:C6:D2:27:AF:C0:E0:A5:12:AE:02:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2E58B4EA42411F0AF4F2D96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.37.0-154.201.38.255
154.217.0.0/17
154.217.179.0/24
154.217.224.0-154.217.233.255
Signature Algorithm: sha256WithRSAEncryption
38:f4:78:fe:d2:be:46:c3:c3:c9:ee:7d:0f:61:b9:8f:92:75:
36:bd:fb:34:85:5e:7f:4d:64:df:fa:b4:15:ee:20:45:aa:1f:
fd:dd:56:c4:62:d2:b6:63:a2:8c:61:ad:b7:a0:12:c6:30:36:
6b:d2:03:f3:d0:1c:fe:e8:31:38:71:3a:36:8d:b9:f6:cc:bb:
ba:c7:f8:c5:d7:8d:98:fd:45:bc:fb:33:2a:a6:23:fb:7f:e7:
bb:ff:d0:ac:a7:5d:2f:eb:19:50:4b:dc:62:c1:d3:2f:0d:08:
e4:c2:fa:82:89:0a:5b:fc:28:30:eb:e5:68:f5:8e:a8:4a:76:
1a:c3:5b:aa:e9:22:ab:8e:3f:7e:c6:fc:ca:3e:b0:0c:6e:b9:
39:54:74:fa:26:58:f6:91:1a:38:3c:8b:f3:81:81:25:dd:e5:
4e:7a:67:8c:90:90:1b:87:82:a8:d5:8e:3e:07:1a:5e:01:9a:
7d:e3:94:ae:d4:97:c8:25:87:31:0b:1b:98:18:bd:c2:9e:a8:
74:93:2d:6a:61:34:b0:03:87:71:7b:2b:5e:b1:0e:e2:6e:19:
00:bd:c9:7f:a3:52:a2:03:ab:96:e0:5e:b2:fe:a0:40:17:12:
be:70:e2:66:50:5e:75:8e:35:29:f5:74:5b:e2:cd:9f:62:6b:
3b:d8:1b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:51 2025 by rpki-client