Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE54E6E4A4F311F0A55F12D2DAE4EC9C.roa
File: BE54E6E4A4F311F0A55F12D2DAE4EC9C.roa (raw, json)
Hash identifier: tikcazn0+pqVuGaThc5gx20z0Z7EEU6tON01suvY2yo=
Subject key identifier: 1E:EC:41:14:52:3D:87:09:05:BE:76:EA:BB:4B:54:57:D1:CF:38:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A30A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE54E6E4A4F311F0A55F12D2DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 09:38:43 +0000
ROA not before: Thu 09 Oct 2025 09:38:37 +0000
ROA not after: Sun 16 Nov 2025 09:38:37 +0000
asID: 22773
IP address blocks: 154.202.14.0/24 maxlen: 24
154.202.15.0/24 maxlen: 24
154.202.16.0/24 maxlen: 24
154.202.17.0/24 maxlen: 24
154.202.18.0/24 maxlen: 24
154.202.19.0/24 maxlen: 24
154.202.20.0/24 maxlen: 24
154.202.21.0/24 maxlen: 24
154.202.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107274 (0x1a30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 09:38:37 2025 GMT
Not After : Nov 16 09:38:37 2025 GMT
Subject: CN=68e782a3-a365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:83:ed:e6:fd:65:76:ba:e1:4c:98:89:85:
15:f3:86:b0:17:bf:43:b1:66:c6:91:42:4b:58:47:
d9:ad:d7:f9:11:bc:81:f9:48:0f:86:4d:bd:d4:df:
e8:2e:8a:c0:54:c8:df:dc:a1:22:18:13:a5:b5:7f:
17:00:3f:67:55:f2:1e:97:51:68:5c:2f:65:e6:a1:
31:26:68:b9:05:99:07:2f:fe:54:8a:47:71:bd:e7:
24:bd:ce:58:55:bc:fb:eb:28:04:f3:6a:7b:af:bd:
05:a9:32:e9:dc:57:d4:67:52:d6:df:ff:0e:1f:06:
c0:eb:91:93:1d:43:ec:70:d9:4e:bd:c3:f8:f1:96:
ef:6e:e8:81:97:ec:84:ac:42:0a:98:44:80:bc:34:
ba:6a:da:eb:dc:29:f2:2c:b8:a8:e8:5e:07:59:68:
e5:ce:f9:f6:0c:01:81:80:10:b4:6c:dd:84:f5:40:
d8:62:39:28:a7:6d:59:b8:b5:5a:f4:b0:ae:a8:0f:
eb:2b:e3:ee:fa:e7:25:ce:cf:46:25:43:60:11:cc:
72:e2:38:57:8a:10:09:21:1b:e6:51:58:6a:13:58:
b4:81:2a:57:e6:db:ea:a9:f2:4b:8b:f6:c5:d6:e7:
f2:2c:a7:0e:b7:3f:d6:47:b4:af:d9:f3:65:5e:fb:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:41:14:52:3D:87:09:05:BE:76:EA:BB:4B:54:57:D1:CF:38:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE54E6E4A4F311F0A55F12D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.14.0-154.202.22.255
Signature Algorithm: sha256WithRSAEncryption
7c:6e:ac:82:58:8b:4b:18:20:68:64:73:4d:31:0b:8a:6f:cc:
60:fe:77:da:de:2b:97:dd:60:f5:2a:5f:a1:b5:0d:2d:26:cb:
77:a5:e0:98:ed:72:45:3c:5b:f5:98:9f:f9:14:3c:3a:c9:0c:
46:c8:a8:73:ce:20:ef:9a:4d:e3:17:01:50:18:a5:0b:18:4f:
dc:8f:d9:f7:06:dd:df:c5:cb:b4:9f:6e:e0:67:f0:df:82:b7:
ae:c2:2c:b1:d6:60:57:82:03:95:10:1e:a8:d6:46:a9:8a:f2:
f2:20:97:1d:e9:2b:67:49:3f:d6:7d:f0:49:c2:9f:34:dd:e6:
32:d3:93:ad:35:25:14:23:e3:fc:c6:10:0a:6d:e0:1f:91:11:
0b:9f:84:a4:74:ff:17:44:d8:f9:33:91:4c:be:ee:db:fb:5b:
30:da:68:ab:d4:81:ee:49:0c:98:01:e1:ec:0d:92:00:0d:eb:
6f:ff:d1:90:21:5c:b0:b4:77:08:0e:9a:43:2a:8f:fe:a5:24:
92:28:c0:f3:53:de:be:5a:8e:ff:9d:7e:7a:d0:93:5d:8d:38:
bd:f8:35:e8:9a:c3:c6:18:6e:89:01:02:aa:9c:14:f0:03:5f:
b6:34:d5:cf:1d:62:05:ef:7d:a6:a1:95:3a:48:ad:4f:37:fa:
da:d5:5c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:16 2025 by rpki-client