Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9B23AC499AE11F0A11FADB3DAE4EC9C.roa
File: B9B23AC499AE11F0A11FADB3DAE4EC9C.roa (raw, json)
Hash identifier: /qgwrc9lUvBEsGZaMlVpuXY8VmgQ0kg7uWCi3h5LtXQ=
Subject key identifier: C4:6E:FA:0D:97:B0:E6:5F:97:20:2D:22:E1:6B:C6:29:29:E7:66:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9B23AC499AE11F0A11FADB3DAE4EC9C.roa
Signing time: Thu 25 Sep 2025 01:26:57 +0000
ROA not before: Thu 25 Sep 2025 01:26:51 +0000
ROA not after: Fri 31 Oct 2025 01:26:51 +0000
asID: 203020
IP address blocks: 154.86.64.0/20 maxlen: 24
154.86.80.0/20 maxlen: 24
154.86.96.0/20 maxlen: 24
154.89.208.0/20 maxlen: 24
154.195.32.0/19 maxlen: 24
154.198.128.0/19 maxlen: 24
154.212.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106713 (0x1a0d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 01:26:51 2025 GMT
Not After : Oct 31 01:26:51 2025 GMT
Subject: CN=68d49a61-63ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:14:c2:45:ad:c7:a9:5c:7a:dd:0b:3c:08:
d8:8b:19:00:bd:bd:c4:76:6c:1b:59:39:a3:2c:59:
42:d9:b7:f3:67:c9:6f:73:3e:f9:12:4f:d0:54:b1:
aa:19:27:ef:eb:f5:ac:29:ca:9e:5a:61:7c:99:8b:
d0:81:d1:d4:d8:bb:8b:78:a6:a5:09:b4:08:13:a0:
60:42:5e:3c:73:90:f0:b5:95:87:f2:70:88:d5:13:
2c:78:ed:68:39:d5:bd:98:fd:7c:8d:fb:7c:a9:22:
b5:0d:34:f3:6a:63:26:f0:26:73:99:be:d9:e1:3b:
cc:98:a8:b2:d7:0b:67:38:c0:e2:65:8c:3e:6f:56:
e2:3f:98:d7:84:81:ed:e6:bb:f6:4c:d0:dd:ad:3e:
75:c7:ec:b9:b0:4a:76:d4:76:da:ff:e6:3d:07:b2:
39:49:9e:ad:8f:11:f4:69:d2:96:d3:03:ef:a0:d6:
39:67:d0:80:9e:6e:31:1d:fa:e7:6f:4e:ad:65:3b:
71:d1:b4:f1:7b:62:ee:ce:2f:ee:20:e3:32:3e:e7:
f9:fd:47:54:9d:0f:f9:6c:c1:3f:24:52:4e:29:53:
dd:a8:c9:16:a8:8d:54:b8:07:f9:bd:2d:01:de:97:
29:d1:c0:1d:1b:e6:0f:8a:01:85:fb:58:1d:73:01:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6E:FA:0D:97:B0:E6:5F:97:20:2D:22:E1:6B:C6:29:29:E7:66:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9B23AC499AE11F0A11FADB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.64.0-154.86.111.255
154.89.208.0/20
154.195.32.0/19
154.198.128.0/19
154.212.32.0/19
Signature Algorithm: sha256WithRSAEncryption
d2:f9:be:23:f7:68:40:8a:1a:c0:3b:7c:51:ea:63:3a:99:78:
a7:1f:5c:bb:34:ee:57:d0:64:8d:15:9a:99:47:58:ce:a6:c1:
1f:52:b3:c2:46:1e:32:df:95:b2:4d:71:e1:37:33:22:f2:96:
bc:5e:e2:af:7e:95:cc:cb:6d:49:e7:4e:0e:32:cf:17:a0:e9:
db:bc:08:d8:0e:21:ea:44:d3:e3:f8:0c:be:17:15:50:7b:7b:
7c:32:a9:a3:d6:97:7a:f9:c6:e8:16:e5:dd:7f:7b:44:10:e0:
cd:f3:a5:3b:6c:64:9f:9b:1b:f6:0a:0a:44:ab:1d:d2:38:23:
3f:b9:c6:d7:e1:1a:7e:75:3f:a6:7f:ba:b1:31:eb:4f:32:ad:
cf:c7:d9:54:a3:1f:68:2d:b1:e0:1b:e3:f3:5c:c3:ae:cb:7c:
07:18:a0:c0:cc:5f:b3:3a:76:e9:0e:63:ef:49:65:e9:39:4c:
c1:bd:66:ac:96:e1:5f:b0:d9:98:fd:64:db:08:7c:ad:70:18:
94:40:d4:de:ec:9c:c6:90:3e:af:04:60:93:08:66:66:c1:23:
26:aa:e8:74:76:2c:ba:7f:4e:41:1d:50:13:02:36:15:d6:1e:
0b:82:ce:92:6b:55:ab:b1:55:f2:34:0b:71:f7:6f:a6:d1:27:
be:ef:f4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:18 2025 by rpki-client