Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD4F03E6A5B111F0A09036A3DAE4EC9C.roa
File: CD4F03E6A5B111F0A09036A3DAE4EC9C.roa (raw, json)
Hash identifier: Yq4jxAiu0JYk5MR6eTrWAcLJFaQP8l9l5QZQ3QHWD9o=
Subject key identifier: 22:67:9D:2C:62:BA:B8:A3:EC:2E:47:35:0D:73:65:94:13:96:01:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A331
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD4F03E6A5B111F0A09036A3DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 08:19:12 +0000
ROA not before: Fri 10 Oct 2025 08:19:08 +0000
ROA not after: Mon 17 Nov 2025 08:19:08 +0000
asID: 22773
IP address blocks: 154.90.152.0/24 maxlen: 24
154.90.153.0/24 maxlen: 24
154.90.154.0/24 maxlen: 24
154.90.155.0/24 maxlen: 24
154.90.156.0/24 maxlen: 24
154.90.157.0/24 maxlen: 24
154.90.158.0/24 maxlen: 24
154.90.159.0/24 maxlen: 24
154.94.40.0/24 maxlen: 24
154.94.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107313 (0x1a331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 08:19:08 2025 GMT
Not After : Nov 17 08:19:08 2025 GMT
Subject: CN=68e8c180-fc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:14:70:46:07:47:e7:54:86:b9:f1:4c:8b:
0b:d4:a7:46:ae:35:dc:fa:fa:4e:aa:60:c2:04:66:
f0:b0:36:1c:94:ac:98:eb:73:55:cf:af:c7:8c:39:
e2:30:70:92:54:7c:15:e8:a8:55:fe:4e:03:c3:d8:
6e:59:06:78:4d:73:08:a2:32:ff:e2:cb:47:26:a6:
96:70:a2:01:7b:4c:52:39:48:d0:bc:9c:9f:6a:77:
76:d9:9e:e5:78:e9:f9:9d:92:86:cb:a9:b5:b2:94:
c1:49:93:67:ee:44:05:54:27:0c:38:10:99:f3:39:
93:c1:e8:f0:fc:f3:75:cb:0e:c9:60:39:2a:df:eb:
c8:c6:69:66:3f:89:45:d8:1e:0d:0c:fd:71:36:03:
8f:57:80:48:c7:db:ee:14:6d:87:bd:1a:4c:2f:cf:
f6:d4:66:ba:81:da:10:f0:d7:ce:42:af:05:54:3c:
85:d5:58:11:63:83:49:d4:15:a5:19:b4:d9:3e:41:
ee:ae:81:a2:24:52:62:e9:27:4d:b5:17:1d:6e:32:
d1:f3:bc:94:3d:16:6a:bb:07:3c:3c:f5:fe:1f:fd:
72:ad:41:00:73:0f:92:65:d9:36:33:eb:03:69:12:
9c:52:34:5c:53:b0:52:6c:85:ee:aa:c5:09:20:1f:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:67:9D:2C:62:BA:B8:A3:EC:2E:47:35:0D:73:65:94:13:96:01:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD4F03E6A5B111F0A09036A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.152.0/21
154.94.40.0/24
154.94.43.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b7:e5:9a:02:8a:3d:bd:7a:e9:88:89:ca:f6:da:85:eb:b8:
2c:a1:8b:c5:c0:97:21:5b:75:c4:0b:7d:57:36:48:af:ab:39:
22:a6:19:99:e6:5a:97:af:6f:67:ba:5e:ab:3d:0e:0b:68:e2:
7a:9b:67:ac:b6:fa:eb:21:02:ad:a3:9f:26:9b:f2:92:98:dc:
e9:a3:f9:5d:81:9b:f9:50:f9:b2:95:ce:80:55:05:e4:b6:b7:
50:dc:99:53:4e:22:32:a2:43:a5:39:f3:19:95:39:d5:a9:62:
db:d0:76:19:03:c3:8b:14:f5:fb:70:b1:c2:39:af:ff:de:76:
ad:5c:82:f8:e0:87:2f:79:50:c8:8b:e4:49:46:e8:77:db:84:
0b:ed:df:91:11:07:90:32:5e:66:d1:90:b7:27:82:98:2e:68:
55:f3:c3:6c:87:64:b3:6e:57:3e:12:70:cc:83:81:b2:a2:34:
bd:0f:6f:09:d3:5f:c1:2d:55:4a:b2:1f:4c:fb:9f:83:72:3e:
8b:9f:d3:95:16:96:10:bf:40:de:69:cf:dd:f0:fe:be:30:fd:
e0:d7:10:3a:d6:57:4b:50:66:7f:bc:dd:6e:0b:6d:ba:10:85:
f0:a6:f5:18:90:d1:83:ae:b0:dc:9c:c9:38:d5:0e:bf:62:4b:
d2:0d:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:52 2025 by rpki-client