Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1976E14A41311F0B8E40DABDAE4EC9C.roa
File: E1976E14A41311F0B8E40DABDAE4EC9C.roa (raw, json)
Hash identifier: 5e+CyIkzgtUJdjGqkvPrUCN/zDB+N2RkhwlOzOYmNBk=
Subject key identifier: 8D:24:F3:4F:D0:EF:95:C3:82:C2:6F:C7:37:4E:32:D6:B3:17:1E:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1976E14A41311F0B8E40DABDAE4EC9C.roa
Signing time: Wed 08 Oct 2025 06:56:15 +0000
ROA not before: Wed 08 Oct 2025 06:56:10 +0000
ROA not after: Sun 07 Dec 2025 06:56:10 +0000
asID: 141883
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107175 (0x1a2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 06:56:10 2025 GMT
Not After : Dec 7 06:56:10 2025 GMT
Subject: CN=68e60b0f-ed0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:da:94:72:25:2a:50:4d:92:1d:b0:3d:f6:
d4:55:11:19:1c:76:56:3f:c0:ed:de:f6:20:27:2f:
1c:87:31:48:7a:32:df:3a:86:e7:34:54:0b:60:a0:
90:88:29:2d:6b:6d:99:9f:1f:30:11:da:ea:7f:43:
2a:42:50:21:87:7c:d5:34:8e:49:6b:b4:29:ab:13:
6e:ae:7c:90:94:da:70:1a:7a:69:46:fb:77:f7:2a:
3a:0c:42:65:2c:ae:5e:7e:5b:b4:63:27:64:51:34:
72:42:85:31:fb:f9:90:b9:de:fc:5e:41:5c:22:f0:
e5:33:9c:b8:9a:61:ba:7a:8e:74:d5:f6:a2:b9:8a:
42:a3:01:eb:2b:e7:f8:2b:7d:6b:44:1e:e3:50:4e:
71:39:cd:46:e3:2a:d0:32:69:5c:51:be:c1:6c:e3:
30:2d:90:e2:b6:97:cd:ee:34:5b:4b:c4:d9:1a:02:
39:07:a4:03:5f:b0:f6:02:be:f2:34:57:03:90:ab:
c9:36:38:15:0c:ca:9e:0e:6a:48:15:90:32:3c:cd:
f6:50:95:46:25:74:7b:1b:9b:ce:d7:00:06:ac:ce:
fb:06:46:e7:a8:ed:e7:e4:f0:4b:d4:a8:66:a4:c6:
1e:b1:43:14:e5:ee:c4:dd:73:c9:7a:d9:4c:f1:e2:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:F3:4F:D0:EF:95:C3:82:C2:6F:C7:37:4E:32:D6:B3:17:1E:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1976E14A41311F0B8E40DABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:5c:bc:44:50:73:9f:77:65:72:f4:9c:bb:e9:c7:bb:ac:b2:
9b:ff:a3:a4:8d:ad:a2:2b:49:ab:58:05:09:6f:a1:c0:7a:f8:
57:6c:1e:fd:3a:7d:bb:d6:0b:2e:6b:55:59:ae:44:d2:0f:23:
55:76:e1:20:5f:92:7e:7f:93:08:16:34:d8:71:b3:9c:c8:1f:
fe:f7:0b:2c:09:0e:1b:bb:06:5b:b3:ed:62:9e:45:b5:65:a0:
f9:fb:08:08:81:4d:f0:5c:61:f1:50:8b:30:f8:97:a0:1c:87:
68:78:51:77:1d:47:4e:19:de:f6:80:64:87:bf:33:3b:52:87:
c0:f0:ef:5f:b5:18:a3:9e:d5:5e:26:bf:8d:68:57:cc:cf:3c:
3a:e1:62:d4:af:43:c5:69:6a:da:70:cb:27:b6:d1:a3:58:c6:
a4:f9:c2:1c:5a:f8:28:35:d5:12:c4:80:3f:15:c1:ba:c3:73:
42:27:18:1a:bd:61:a3:1c:40:09:d8:df:be:79:00:b4:20:4e:
22:7f:61:98:ba:12:ba:92:41:fe:ad:d1:14:45:6e:3c:54:04:
2a:de:93:f1:ab:b2:4c:b7:64:ec:d7:21:85:8c:c8:ee:cb:1a:
a6:a7:78:88:2b:ef:1a:13:0b:9f:03:33:94:be:16:bf:7c:f4:
39:63:02:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:03 2025 by rpki-client