Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1D283ACB35211F0A6A17CEADAE4EC9C.roa
File: E1D283ACB35211F0A6A17CEADAE4EC9C.roa (raw, json)
Hash identifier: FUHKSK5sov4JNe/RdG4e3QGUDb9vF3lAj8O87OPKvFg=
Subject key identifier: 2E:D8:79:44:28:3E:B9:6D:CA:82:A0:0A:E4:61:38:23:45:2A:13:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A54D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1D283ACB35211F0A6A17CEADAE4EC9C.roa
Signing time: Mon 27 Oct 2025 16:35:01 +0000
ROA not before: Mon 27 Oct 2025 16:34:56 +0000
ROA not after: Mon 01 Dec 2025 16:34:56 +0000
asID: 62240
IP address blocks: 154.195.178.0/24 maxlen: 24
154.195.179.0/24 maxlen: 24
154.195.180.0/24 maxlen: 24
154.195.181.0/24 maxlen: 24
154.195.182.0/24 maxlen: 24
154.195.183.0/24 maxlen: 24
154.195.184.0/24 maxlen: 24
154.195.185.0/24 maxlen: 24
154.195.186.0/24 maxlen: 24
154.195.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107853 (0x1a54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 16:34:56 2025 GMT
Not After : Dec 1 16:34:56 2025 GMT
Subject: CN=68ff9f35-180a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:79:10:42:1b:2b:16:86:e3:df:c8:61:9a:
fa:3a:ef:34:87:49:8d:73:73:76:c9:8e:db:7a:e4:
80:b5:7f:24:03:5b:5d:63:f0:86:51:fb:1a:0b:17:
12:94:43:2a:8b:04:43:b6:be:b8:be:7a:4c:d6:d7:
37:d5:b9:e8:95:a5:54:e2:2d:f6:8e:64:a6:9b:68:
8a:67:11:7b:23:9d:0c:7f:71:79:64:b2:69:d2:9c:
82:58:85:54:86:58:fa:6f:db:6d:a3:39:6a:01:ea:
24:06:28:90:a9:8b:73:2d:2d:f3:17:d8:67:c6:71:
be:d5:3d:a7:de:e8:bd:1b:09:4c:6e:c0:4a:d4:20:
ce:45:17:30:27:d2:c1:c2:cb:15:ab:98:20:43:1a:
dc:25:51:c9:ba:dd:06:0c:2c:b6:b5:9e:54:7d:70:
b8:b7:32:3a:9b:f1:bf:61:b7:f7:66:ac:61:33:7a:
14:26:39:e0:f9:b5:1e:6c:2e:5f:7f:70:13:81:a8:
aa:d0:fd:06:46:d7:87:0e:6d:b2:6a:42:16:d0:ec:
39:b9:01:e7:72:9b:7c:7d:ee:c4:33:99:6b:2f:b3:
39:a5:65:44:cf:54:ed:94:3a:f4:fa:c3:45:90:24:
86:0c:ab:e9:44:89:5c:0b:b6:0d:54:ab:c8:20:62:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D8:79:44:28:3E:B9:6D:CA:82:A0:0A:E4:61:38:23:45:2A:13:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1D283ACB35211F0A6A17CEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.178.0-154.195.187.255
Signature Algorithm: sha256WithRSAEncryption
9d:8a:fa:40:3a:51:6d:02:65:d7:58:45:a4:f8:d3:2e:9f:aa:
13:1a:de:b9:b5:a5:46:20:76:36:b4:8c:64:8d:35:99:e6:17:
e8:ba:16:10:6d:e8:bd:72:4c:0f:ae:e4:03:79:d1:2e:b5:4f:
34:2c:00:06:4e:18:9c:2c:34:71:16:bc:fd:dc:ae:92:01:5a:
ac:7d:a1:89:1b:95:c9:8e:82:e9:54:a1:94:31:99:f9:7f:45:
b5:b2:b2:80:90:9a:d1:60:55:d4:5e:9c:60:68:14:1f:5c:df:
ca:bc:14:00:02:3b:b4:d1:7c:18:3d:dd:8e:e9:e6:58:09:61:
64:71:6b:f0:f6:50:e0:d6:3d:0e:f8:ec:45:49:58:9f:4c:7d:
60:c4:13:ab:93:d8:12:98:b1:9a:b2:10:94:db:50:52:c7:c9:
a3:85:d7:4b:78:d9:2b:7c:4a:be:ba:8d:cd:26:fd:bb:0a:dc:
f1:0f:d5:99:b6:7c:6a:29:90:07:9f:ce:85:fb:59:dc:fc:e0:
2a:7b:20:70:aa:91:67:86:17:5c:a0:ed:0a:35:34:2f:e3:7e:
26:6b:82:55:6b:d8:ea:48:22:d4:17:43:bb:99:66:c5:36:72:
b3:58:61:a1:19:a6:32:04:3c:13:15:93:e2:e9:57:65:58:9e:
b0:a8:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:47 2025 by rpki-client