Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBD016A8B4B11F0ABB03BD9DAE4EC9C.roa
File: CCBD016A8B4B11F0ABB03BD9DAE4EC9C.roa (raw, json)
Hash identifier: 27YtGP0+FscwJP47bh2CSi4ChpQBHvHOVS2EeSCJ6GQ=
Subject key identifier: 0F:68:95:7A:C9:5D:6C:BC:A0:A2:06:40:7E:A1:D4:DB:6F:AC:23:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBD016A8B4B11F0ABB03BD9DAE4EC9C.roa
Signing time: Sat 06 Sep 2025 18:03:33 +0000
ROA not before: Sat 06 Sep 2025 18:03:28 +0000
ROA not after: Fri 05 Dec 2025 18:03:28 +0000
asID: 18229
IP address blocks: 154.210.151.0/24 maxlen: 24
154.210.152.0/24 maxlen: 24
154.210.153.0/24 maxlen: 24
154.210.154.0/24 maxlen: 24
154.210.155.0/24 maxlen: 24
154.210.156.0/24 maxlen: 24
154.210.157.0/24 maxlen: 24
154.210.158.0/24 maxlen: 24
154.210.159.0/24 maxlen: 24
154.210.160.0/24 maxlen: 24
154.210.161.0/24 maxlen: 24
154.210.162.0/24 maxlen: 24
154.210.163.0/24 maxlen: 24
154.210.164.0/24 maxlen: 24
154.210.165.0/24 maxlen: 24
154.210.166.0/24 maxlen: 24
154.210.167.0/24 maxlen: 24
154.210.168.0/24 maxlen: 24
154.210.169.0/24 maxlen: 24
154.210.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106088 (0x19e68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 6 18:03:28 2025 GMT
Not After : Dec 5 18:03:28 2025 GMT
Subject: CN=68bc7774-99ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:6e:70:bb:4c:8d:9f:35:d5:c1:34:72:39:
b7:f2:43:1e:54:f6:7f:5e:69:6e:52:75:97:79:7c:
0e:ad:fa:1a:b6:14:9a:e7:fc:5a:3e:7d:48:70:3c:
c3:f6:9c:65:6f:54:a0:ea:b3:da:fa:7f:3d:0f:f5:
78:88:49:88:54:87:79:0e:c4:44:4d:9e:7b:e6:53:
70:38:d8:3c:e2:3c:2f:20:68:bd:30:c5:2c:fd:10:
ec:50:4a:58:92:c4:7e:85:51:8a:cb:f3:ca:3e:1a:
ad:07:39:4d:b9:eb:49:df:ed:4a:e9:3a:d8:25:f1:
33:b7:81:97:4a:e1:ee:e8:f7:01:ad:88:a7:19:37:
c5:f1:ac:92:c8:bd:c1:77:a2:cd:7d:16:0a:6a:17:
dd:98:5c:36:83:04:3c:5a:56:6f:36:fc:fb:bd:75:
f5:99:77:2e:a4:03:8c:b3:b8:d9:9d:14:bb:06:ad:
8d:9f:09:44:46:4d:06:75:3a:01:41:d1:f2:71:9f:
61:68:f4:8b:47:77:20:bd:7d:77:34:fa:98:3c:4b:
ad:ed:39:bb:69:37:3f:74:5a:63:b5:06:ea:dd:ba:
30:5d:a5:25:d2:ef:fb:e4:80:8e:c0:c2:3d:32:ef:
7b:fd:b3:03:4c:36:46:c4:ad:2f:9e:15:9e:33:a1:
9f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:68:95:7A:C9:5D:6C:BC:A0:A2:06:40:7E:A1:D4:DB:6F:AC:23:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBD016A8B4B11F0ABB03BD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.151.0-154.210.170.255
Signature Algorithm: sha256WithRSAEncryption
98:8f:2b:cd:39:73:4c:73:e8:61:c8:99:8c:e9:d4:29:78:70:
d5:b6:97:88:6b:cd:91:fa:e0:2e:72:6b:58:76:ee:9a:a7:12:
27:eb:b4:da:48:82:ce:f1:36:f6:37:9a:48:3f:00:fd:8d:49:
ea:72:3e:4e:d2:5e:66:27:b5:39:96:8b:fa:ca:8d:da:cd:59:
05:ab:d1:13:0d:19:0c:5c:a7:b8:cf:a8:0d:9e:1e:32:e7:6d:
ee:ba:7a:12:3a:45:e5:9e:a8:38:37:02:e5:17:80:6f:8e:6a:
5f:af:3a:68:a7:cc:09:c1:e6:55:a5:b8:6f:6c:1d:d5:3d:20:
25:67:c6:3b:a3:7a:54:16:81:30:98:c2:8f:97:e9:d3:fb:ce:
d3:29:cf:d8:5d:cd:6c:61:2a:08:cb:fb:1b:f9:55:87:56:d0:
24:a1:86:c2:2f:56:fd:2e:7f:b7:85:5b:eb:e1:30:25:c9:10:
07:62:e2:26:c6:99:3e:c8:1c:a0:44:67:03:7e:1b:d0:96:c5:
5b:b9:c1:4c:3b:61:42:70:18:af:20:5f:ad:d7:9e:a0:1f:4a:
ae:21:16:58:b8:b7:74:5e:b6:45:79:45:9d:37:54:a5:91:c0:
a3:5e:22:65:e3:8f:7b:ab:02:2b:1a:8e:46:94:8a:81:d0:8a:
94:06:44:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:39 2025 by rpki-client