Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD7470E6A50A11F0B57CA4E4DAE4EC9C.roa
File: DD7470E6A50A11F0B57CA4E4DAE4EC9C.roa (raw, json)
Hash identifier: NqHauCGlUbn7o9nCRNTloYFhrimj0prbCqLVgThWtcE=
Subject key identifier: 0B:0A:C7:98:D2:31:FA:A7:8D:A0:EC:E1:4F:2B:3A:D6:DA:BD:52:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A310
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD7470E6A50A11F0B57CA4E4DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 12:24:13 +0000
ROA not before: Thu 09 Oct 2025 12:24:09 +0000
ROA not after: Sun 16 Nov 2025 12:24:09 +0000
asID: 22773
IP address blocks: 154.82.11.0/24 maxlen: 24
154.82.12.0/24 maxlen: 24
154.82.13.0/24 maxlen: 24
154.82.14.0/24 maxlen: 24
154.82.15.0/24 maxlen: 24
154.85.12.0/24 maxlen: 24
154.85.22.0/24 maxlen: 24
154.85.23.0/24 maxlen: 24
154.85.104.0/24 maxlen: 24
154.85.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107280 (0x1a310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 12:24:09 2025 GMT
Not After : Nov 16 12:24:09 2025 GMT
Subject: CN=68e7a96d-ce87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:cb:46:80:54:db:66:25:01:83:46:14:35:
84:72:ea:b5:fd:f9:82:73:b0:56:94:fe:9e:45:aa:
14:d4:ae:b0:14:11:fa:e9:3d:7a:86:2a:bc:25:76:
07:56:43:13:78:77:80:e8:d3:dc:20:2f:a8:07:ad:
f7:b2:22:41:a2:b9:6f:1e:41:d5:99:4b:61:75:f1:
c3:4c:89:32:00:8c:da:d3:7a:a0:d2:93:c1:47:8c:
23:a2:78:ba:8a:b5:a0:e4:55:f3:f0:91:e1:a4:dc:
9d:a6:b3:de:74:bc:51:9e:b5:a4:50:b5:dc:33:c4:
48:c5:2c:3d:c3:87:73:78:72:c0:0b:a1:d2:c4:88:
fb:51:13:1e:ca:52:47:51:75:ce:a2:a0:ea:5e:34:
23:e6:dc:fe:4b:1c:cb:2b:f5:03:f8:5a:8c:28:33:
66:78:dd:fc:b4:ec:06:3d:05:bd:ca:a1:06:0f:bd:
a4:e2:b6:ad:d0:de:2a:97:55:ca:f2:66:19:de:e2:
27:e5:72:7d:f9:ed:1e:b2:1d:50:5b:b3:6e:6e:25:
c1:c7:7a:ce:c7:61:e0:d9:8e:2f:ec:41:0e:1d:ae:
74:eb:f0:65:a2:1f:d1:56:fa:57:b6:d4:f1:82:3f:
c3:17:b8:c4:7a:e4:9c:7f:47:a6:3b:72:26:0c:c0:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0A:C7:98:D2:31:FA:A7:8D:A0:EC:E1:4F:2B:3A:D6:DA:BD:52:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD7470E6A50A11F0B57CA4E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.11.0-154.82.15.255
154.85.12.0/24
154.85.22.0/23
154.85.104.0/23
Signature Algorithm: sha256WithRSAEncryption
47:c1:2d:70:25:c2:24:18:0b:46:39:7d:35:8b:e7:0d:58:30:
1e:fd:78:35:39:89:9a:72:44:a9:dd:53:b1:08:d7:92:4f:39:
55:dd:c0:1f:af:40:5c:78:91:a9:81:31:bc:82:e3:0f:39:ed:
5f:c5:e6:b8:53:24:2b:9c:af:f1:de:08:40:ba:f0:0d:52:ae:
71:3d:40:5e:af:67:ba:f8:93:c4:31:28:82:17:d8:b5:07:fb:
d6:64:ee:42:cb:06:9c:03:d5:10:f8:a9:4b:97:b5:9f:e7:d1:
44:f0:9e:6c:5c:15:28:c3:58:f0:77:29:2e:f7:2f:88:c6:28:
54:95:a6:6c:73:c0:36:22:b8:b9:a6:eb:36:0a:ee:83:aa:76:
87:8e:9b:99:08:d0:67:50:3e:22:be:98:a7:38:eb:7f:26:71:
ce:77:e4:8e:13:14:75:a5:64:8a:2a:2a:fa:9f:93:4a:2f:69:
8e:b5:f6:3d:e2:a4:e7:58:77:fb:d4:4f:cf:40:90:ad:bd:ad:
8e:ce:e7:00:fc:1e:ca:df:b2:87:6e:5c:1a:ec:aa:2b:2d:4b:
1d:d6:b8:c5:a9:fb:f7:6f:7d:f9:2f:d8:46:45:ed:0e:ac:e7:
62:88:b4:34:37:c6:af:ed:5a:a4:86:c8:b3:db:f4:bd:ee:5e:
42:fa:c8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:26 2025 by rpki-client