Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C667EA229F7411F0BB17B3AADAE4EC9C.roa
File: C667EA229F7411F0BB17B3AADAE4EC9C.roa (raw, json)
Hash identifier: nRE3Uom1pBIq5pHCEXSwa8ACRf7HHrBepjj9xk2NuK0=
Subject key identifier: 5C:49:B3:18:2C:F7:49:37:0E:D5:87:35:EA:D0:20:7E:96:36:4A:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C667EA229F7411F0BB17B3AADAE4EC9C.roa
Signing time: Thu 02 Oct 2025 09:47:14 +0000
ROA not before: Thu 02 Oct 2025 09:47:09 +0000
ROA not after: Sun 09 Nov 2025 09:47:09 +0000
asID: 200373
IP address blocks: 154.82.150.0/24 maxlen: 24
154.82.168.0/22 maxlen: 24
154.86.112.0/24 maxlen: 24
154.86.113.0/24 maxlen: 24
154.86.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107004 (0x1a1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 2 09:47:09 2025 GMT
Not After : Nov 9 09:47:09 2025 GMT
Subject: CN=68de4a22-89ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f8:ae:44:5f:20:73:3e:20:68:09:7a:f1:e3:
7e:2f:ad:95:62:84:d1:1f:80:22:dc:c9:0e:f1:e2:
5d:de:39:16:57:94:95:a4:d4:a5:ab:65:87:35:11:
bc:4b:8b:19:36:64:8e:ab:1b:2b:01:02:b1:b4:c5:
59:4d:45:9f:e7:42:18:1f:56:2e:fd:04:0c:34:dd:
33:80:a4:b8:4a:ea:8b:5e:00:0e:b3:9d:1e:25:cb:
0f:0f:d7:c9:df:64:71:00:6f:fd:e5:1d:a4:1f:27:
99:ef:6c:1e:e3:92:47:8f:5c:d2:dd:90:7a:32:a7:
dc:21:8f:f4:44:fc:3a:97:86:f6:84:85:c3:fc:1e:
f8:44:8f:05:26:74:88:9c:91:18:bd:36:94:7a:6d:
0c:51:02:4a:f8:21:42:4b:19:b8:69:7a:78:7f:b2:
d8:2e:97:9e:03:89:b0:d2:09:76:12:30:18:37:90:
79:d7:c1:cd:a2:f8:ef:25:47:31:b2:5d:e5:3d:e8:
af:48:1b:e5:8f:53:54:5b:d7:3f:2a:82:29:a0:04:
36:be:89:93:b5:c6:24:2d:63:f2:39:67:6f:5e:6e:
57:fb:d8:cc:ca:a1:ba:e6:ca:56:2a:3b:2e:5c:92:
ba:49:19:7f:eb:86:7c:5d:e7:c5:1b:b6:20:63:d4:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:49:B3:18:2C:F7:49:37:0E:D5:87:35:EA:D0:20:7E:96:36:4A:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C667EA229F7411F0BB17B3AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.150.0/24
154.82.168.0/22
154.86.112.0-154.86.114.255
Signature Algorithm: sha256WithRSAEncryption
d4:c6:06:ee:ce:cc:6a:ad:21:1d:c3:fc:fa:00:d7:70:e8:c2:
1b:7e:40:9f:cc:9b:60:ff:ea:3d:74:45:f6:7d:5c:c5:f7:1b:
98:3a:35:b0:20:ad:8a:34:cc:3d:65:6c:ab:5f:b9:1d:91:9d:
20:ec:c3:79:94:08:a6:53:9d:73:08:8a:aa:66:85:bf:05:b7:
5d:17:95:d2:90:12:e7:94:45:cd:13:45:26:cb:32:28:b5:c7:
24:b7:22:16:10:e8:9f:8b:ef:89:12:28:28:84:53:30:d8:a2:
f3:59:15:d6:8a:06:95:4c:07:ac:f6:f2:dd:b5:5e:68:57:06:
4b:3b:b8:bf:c6:78:b2:11:05:bc:1a:79:f1:36:1d:1d:91:f3:
a3:db:a0:87:52:73:21:e3:f0:99:9e:13:98:f0:e2:2b:cc:de:
cb:43:3a:d0:1f:23:2a:8e:c8:ac:a9:f3:26:6e:8b:5d:01:cc:
48:42:76:61:6b:13:0c:92:6d:c2:dc:45:9b:8f:15:33:a2:d0:
63:e1:21:83:ea:8a:b9:43:59:1f:46:ea:43:ab:f0:91:f5:88:
c1:96:10:92:8c:48:de:41:4c:59:61:84:9e:63:bf:df:6d:89:
42:47:6a:13:86:f6:98:c0:3f:d6:2a:cc:e0:ab:71:7d:3a:2e:
c3:00:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:07 2025 by rpki-client