Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC08E6DCA9AC11F09739B6D5DAE4EC9C.roa
File: DC08E6DCA9AC11F09739B6D5DAE4EC9C.roa (raw, json)
Hash identifier: 4uEvMYsVIwTnv1Vc9XgGS+Z4MFc4g4DODRFHKaBn1Ec=
Subject key identifier: 35:C7:3C:7D:48:6B:7D:8B:28:D6:8C:20:47:F2:57:D8:5A:6A:E1:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A38B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC08E6DCA9AC11F09739B6D5DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 09:53:54 +0000
ROA not before: Wed 15 Oct 2025 09:53:49 +0000
ROA not after: Wed 19 Nov 2025 09:53:49 +0000
asID: 11404
IP address blocks: 154.83.160.0/20 maxlen: 24
154.89.240.0/20 maxlen: 24
154.90.80.0/20 maxlen: 24
154.90.96.0/19 maxlen: 24
154.92.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107403 (0x1a38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 09:53:49 2025 GMT
Not After : Nov 19 09:53:49 2025 GMT
Subject: CN=68ef6f32-1a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a5:cc:0c:10:a7:45:f9:64:6c:5f:f9:6a:38:
ec:da:20:08:d4:5a:ce:38:b9:c7:3f:44:d0:06:c1:
a5:03:48:2f:da:e4:cd:a1:31:57:76:ba:a1:f4:9f:
3c:10:99:20:3f:dc:00:d5:95:f3:bd:b7:14:a6:e8:
a4:39:7d:e0:df:d6:20:54:c8:f8:23:06:fb:07:99:
c0:01:13:95:db:2e:af:ef:91:fe:23:6f:f2:36:f3:
dc:8c:84:d0:54:5f:f5:7d:a3:8b:a6:07:55:ad:6b:
62:08:ac:88:0c:34:f9:81:3f:e6:1e:94:7c:92:83:
82:9f:22:f3:c8:7a:da:95:1c:ab:3e:87:f1:d6:c5:
38:ea:54:ca:05:68:72:46:d3:da:c9:e4:f2:8b:8b:
b9:c6:66:49:be:ca:82:fb:20:0b:ff:c4:1a:99:e2:
64:20:67:dc:71:12:e9:d3:dc:0c:bd:48:39:34:9d:
f8:ec:cf:b7:ef:2a:80:73:ea:c5:28:71:48:61:b7:
25:40:5d:06:75:c6:52:e8:86:da:be:90:ee:96:ee:
de:1a:93:20:79:13:19:35:eb:da:b6:01:a2:3a:51:
14:a5:fa:27:e6:30:fd:30:6d:4c:14:fd:e6:6f:05:
cd:cb:d0:98:cf:b7:53:cc:53:dc:1b:b4:06:bc:85:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C7:3C:7D:48:6B:7D:8B:28:D6:8C:20:47:F2:57:D8:5A:6A:E1:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC08E6DCA9AC11F09739B6D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.160.0/20
154.89.240.0/20
154.90.80.0-154.90.127.255
154.92.144.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:b3:2f:9d:12:96:81:ea:48:89:b0:63:a6:1b:bc:11:b8:b9:
4e:f6:33:30:54:f0:b6:f0:b2:b0:91:09:e6:54:d7:74:b2:8c:
8b:24:d7:d0:98:c2:fe:39:7c:7b:1e:63:ca:4c:ae:04:42:3e:
0c:f7:e4:23:82:3b:eb:39:a2:c9:b9:d4:83:a9:66:35:b2:77:
bb:21:10:f6:86:dc:8f:3b:07:fa:e3:84:fd:73:24:a6:6a:ea:
06:68:74:c2:d5:65:59:b9:6b:e0:56:b7:04:f9:44:3c:d5:b6:
e0:7f:8f:b4:71:dc:d8:d6:e0:e3:b3:ac:7f:d9:e5:50:4b:ce:
cb:a2:0d:08:13:aa:e8:48:da:27:53:0f:0c:78:a7:1e:f1:c2:
a7:50:3e:15:20:93:19:5a:8d:ed:d6:58:f8:4c:cc:61:3c:32:
03:66:59:e1:49:fa:6f:35:bb:36:b5:38:79:26:59:2d:e8:47:
a3:52:5d:de:6a:56:44:fc:32:c9:ea:4d:32:b5:6c:cd:56:9c:
de:3e:e3:d9:cb:a1:f8:6b:12:4a:16:a9:46:bb:6a:e3:92:c9:
84:a6:63:dd:1a:19:c5:a5:34:ac:4a:41:85:8b:3d:09:49:e3:
12:84:d3:75:54:a7:ba:57:1c:6d:41:73:86:fd:05:92:2f:f4:
8d:01:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:56 2025 by rpki-client