Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDDA3A0CB35311F08C1090F2DAE4EC9C.roa
File: BDDA3A0CB35311F08C1090F2DAE4EC9C.roa (raw, json)
Hash identifier: utNnR6MIyzhobqiWv++t8ZzMDXQ65eGIaneMR/33wnM=
Subject key identifier: 92:DB:29:56:67:E5:9C:66:21:58:25:BB:CD:0B:78:47:0F:F4:1B:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A54F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDDA3A0CB35311F08C1090F2DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 16:41:10 +0000
ROA not before: Mon 27 Oct 2025 16:41:03 +0000
ROA not after: Mon 01 Dec 2025 16:41:03 +0000
asID: 62240
IP address blocks: 154.194.112.0/24 maxlen: 24
154.194.113.0/24 maxlen: 24
154.194.114.0/24 maxlen: 24
154.194.115.0/24 maxlen: 24
154.194.116.0/24 maxlen: 24
154.195.24.0/24 maxlen: 24
154.195.25.0/24 maxlen: 24
154.195.26.0/24 maxlen: 24
154.195.27.0/24 maxlen: 24
154.195.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107855 (0x1a54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 16:41:03 2025 GMT
Not After : Dec 1 16:41:03 2025 GMT
Subject: CN=68ffa0a6-5c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:55:ef:97:21:34:cc:0f:fe:75:20:a9:6c:70:
7f:cc:0e:4d:89:4c:45:90:7b:8e:4e:e0:a6:ef:47:
ab:ea:ee:ec:f4:43:cb:e6:51:1b:bd:3b:f6:fc:16:
b0:28:e8:6a:92:6a:b8:e5:72:8f:70:b1:b7:6b:18:
e4:18:02:10:67:75:ff:a4:67:cd:47:79:f6:15:5f:
86:80:46:83:dd:e9:fb:4c:22:fe:37:10:09:89:8e:
90:ef:7e:ac:45:ac:9b:5e:bb:18:db:91:d4:6e:7c:
c5:30:b7:43:77:4d:57:b5:b8:c1:65:e2:cf:0f:d9:
5a:66:9c:d6:b6:a1:77:1a:b7:59:5a:f1:91:28:07:
70:45:fa:69:3c:5d:49:a3:b6:3b:20:9e:5b:aa:96:
0b:9e:c1:e2:42:e5:50:d4:c9:b2:26:30:61:1e:ed:
36:7e:1c:9a:69:85:4e:41:e0:b6:5d:03:d2:42:76:
88:c4:f3:76:f3:9d:72:2c:d6:21:e4:f9:18:9a:e4:
8c:d4:e3:9d:7b:84:a4:93:64:d8:7d:d1:37:52:bb:
59:51:16:e8:67:d1:fd:3d:03:2f:ef:87:c9:18:c1:
7c:6a:a7:ac:c3:57:de:53:a7:fc:ac:56:c6:79:34:
ac:5e:b5:d2:60:a9:30:7d:7b:ce:60:fa:03:9f:2b:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DB:29:56:67:E5:9C:66:21:58:25:BB:CD:0B:78:47:0F:F4:1B:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDDA3A0CB35311F08C1090F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.112.0-154.194.116.255
154.195.24.0-154.195.28.255
Signature Algorithm: sha256WithRSAEncryption
b3:e8:d2:09:4e:a0:76:8d:7b:86:ab:fc:90:78:c1:40:cf:71:
c7:b1:fe:d8:5e:40:c0:88:5d:44:f7:aa:7a:80:04:4e:c1:6e:
38:3f:8b:d0:9a:97:54:dd:30:67:46:a6:66:13:83:3d:ed:65:
99:2d:4f:cc:09:3d:93:2c:3c:1a:b5:3b:2f:9c:c5:f7:92:e6:
66:0c:18:3b:b8:46:67:aa:0a:3b:4e:5a:74:d9:64:78:3a:a4:
0a:c3:ff:e6:52:d1:f8:b6:6c:7b:1a:78:44:0e:b9:99:0c:4e:
24:c7:e2:dd:88:52:7e:ee:6b:9e:37:da:3d:c3:6f:19:b2:2f:
da:3d:26:47:b0:b6:0f:e9:97:68:55:fe:ab:38:a6:08:dc:f5:
b1:aa:1b:a0:9c:e6:78:b5:b4:45:be:58:a2:ee:48:89:48:94:
a9:1f:82:bb:bd:b0:cf:de:a9:84:62:68:4c:87:f6:1f:29:af:
89:31:86:79:f1:1d:9f:56:58:6b:f6:db:72:a7:cc:67:bd:84:
68:2e:5c:13:48:09:d0:9d:b7:bd:74:b7:17:76:58:03:6f:28:
ad:08:f4:08:d5:db:9c:f6:d2:7a:46:35:2d:65:2d:48:58:74:
2a:db:ac:08:db:17:78:38:7f:0c:ab:02:ee:3b:0e:e6:7d:55:
2a:11:e1:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:50 2025 by rpki-client