Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CADA6FC0A4ED11F0BBBC33AEDAE4EC9C.roa
File: CADA6FC0A4ED11F0BBBC33AEDAE4EC9C.roa (raw, json)
Hash identifier: typAwRi039rVtNcTeQiZsndyqlKNeP9TyCESkYroYO4=
Subject key identifier: A6:6F:66:92:93:1A:85:05:BC:63:8B:97:F3:16:DE:2B:DC:5A:DF:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CADA6FC0A4ED11F0BBBC33AEDAE4EC9C.roa
Signing time: Thu 09 Oct 2025 08:56:07 +0000
ROA not before: Thu 09 Oct 2025 08:56:01 +0000
ROA not after: Sun 16 Nov 2025 08:56:01 +0000
asID: 22773
IP address blocks: 154.202.90.0/24 maxlen: 24
154.202.92.0/24 maxlen: 24
154.202.93.0/24 maxlen: 24
154.202.94.0/24 maxlen: 24
154.202.95.0/24 maxlen: 24
154.202.96.0/24 maxlen: 24
154.202.97.0/24 maxlen: 24
154.202.98.0/24 maxlen: 24
154.202.102.0/24 maxlen: 24
154.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107260 (0x1a2fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 08:56:01 2025 GMT
Not After : Nov 16 08:56:01 2025 GMT
Subject: CN=68e778a7-5492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:27:26:38:32:86:ef:cb:b4:c1:3a:3b:cb:
8c:45:12:b1:fc:74:73:68:9c:0a:19:2f:57:70:ca:
c7:e0:3a:89:2b:93:2f:bb:77:26:c5:0b:35:9c:4a:
b2:5b:36:ea:f3:63:1c:58:0f:bf:4f:b3:85:35:24:
99:f6:12:a9:83:e8:61:1c:5a:04:b7:cf:42:c5:f4:
ee:82:78:5a:5f:28:5f:72:cc:5c:22:57:11:27:38:
1d:05:9a:d9:df:97:27:eb:75:40:b6:f0:e1:15:a2:
7b:ae:ca:26:eb:b0:dd:49:fd:28:f7:88:2d:1c:92:
79:75:10:6f:36:0d:ab:df:b1:70:4b:61:3a:68:be:
1c:3f:75:ef:b4:2d:26:e6:8e:f8:f6:1a:20:65:a5:
96:15:58:5e:2c:51:a9:bc:4f:94:09:92:8d:8e:df:
48:ec:d1:9a:6f:c1:90:78:d6:b5:a7:ad:b5:08:fd:
80:c5:66:4e:2d:98:54:c0:eb:15:bb:96:48:87:d3:
0a:c9:6b:2d:1d:82:9e:b0:02:a3:49:bb:f3:cc:10:
99:7a:45:18:94:d3:a5:ae:56:f4:ef:7c:2a:14:e6:
7e:8d:64:79:43:7b:a2:ae:05:79:3f:6b:85:23:81:
4b:5d:04:b4:15:23:57:3e:21:a9:80:f5:2a:1c:24:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6F:66:92:93:1A:85:05:BC:63:8B:97:F3:16:DE:2B:DC:5A:DF:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CADA6FC0A4ED11F0BBBC33AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.90.0/24
154.202.92.0-154.202.98.255
154.202.102.0/24
154.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0a:2d:5d:9c:05:44:25:ee:25:4e:7b:72:36:5c:97:50:ad:
0e:bd:45:ce:0d:ee:ab:1f:37:fd:b9:6d:58:47:54:70:bb:5d:
34:6f:91:5c:b3:d5:1d:f3:af:31:16:9b:46:b6:15:24:62:5e:
fe:54:11:de:57:74:d2:aa:73:75:ef:04:3a:49:f4:6a:e0:eb:
df:b4:14:4e:3b:73:ff:37:ee:43:c7:6b:7a:2b:a1:df:37:df:
92:f3:3f:9c:1e:cb:f6:48:de:ac:23:34:98:f0:62:31:27:08:
76:16:00:8a:8a:61:85:3c:2a:0a:d6:a3:b5:3e:f9:38:3c:1c:
b3:4a:b2:df:7f:43:29:36:80:70:fe:2b:82:28:d0:19:c7:98:
5f:bd:5e:24:1a:e6:b1:60:27:10:a3:1c:d1:5f:54:7d:70:ab:
d1:d2:8a:c2:9a:42:14:c9:50:17:08:14:bc:d8:9a:61:82:47:
95:11:7b:c0:58:51:bc:73:53:73:f9:bf:52:60:6a:9d:05:0f:
44:0f:a5:e4:bd:44:9f:20:c2:23:e2:3c:09:ad:32:7c:88:c9:
fe:27:fb:fb:af:2d:c6:d6:d4:55:0b:62:59:a1:0b:e0:ad:07:
cd:d1:8b:d2:c6:9d:e0:bf:b2:3e:f8:84:c5:8a:bc:91:fd:79:
0e:40:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:08 2025 by rpki-client