Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E58EE730AA6811F08BF1DEEBDAE4EC9C.roa
File: E58EE730AA6811F08BF1DEEBDAE4EC9C.roa (raw, json)
Hash identifier: Rw8OmsVaC/uPyRyC9WP2sFkA+Ay5NLqZAz1uILLkjzA=
Subject key identifier: 12:C0:0E:3B:35:2C:1C:F6:B9:F7:60:97:28:94:89:AC:E4:27:44:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E58EE730AA6811F08BF1DEEBDAE4EC9C.roa
Signing time: Thu 16 Oct 2025 08:19:56 +0000
ROA not before: Thu 16 Oct 2025 08:19:50 +0000
ROA not after: Sun 16 Nov 2025 08:19:50 +0000
asID: 203020
IP address blocks: 154.194.214.0/23 maxlen: 24
154.194.232.0/23 maxlen: 24
154.194.242.0/23 maxlen: 24
154.198.174.0/23 maxlen: 24
154.198.184.0/23 maxlen: 24
154.203.32.0/21 maxlen: 24
154.203.40.0/22 maxlen: 24
154.203.44.0/22 maxlen: 24
154.204.96.0/19 maxlen: 24
154.220.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107464 (0x1a3c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 08:19:50 2025 GMT
Not After : Nov 16 08:19:50 2025 GMT
Subject: CN=68f0aaab-cdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:dd:de:da:da:68:00:f5:5f:8f:3f:ea:e3:
a8:a2:e7:45:22:e6:b3:cb:7e:ac:e0:00:b4:6f:d8:
2d:1d:f4:d8:c2:af:56:10:1a:f5:04:ca:ad:83:c3:
24:96:2a:8f:80:5d:30:70:17:e3:24:71:84:4c:e8:
a5:6d:44:90:bb:34:73:69:c8:cc:3a:a3:33:23:06:
68:e5:1e:b1:3c:6c:3a:5b:90:fb:93:9b:b3:79:2d:
3c:d6:3d:70:75:98:41:ea:2c:1f:aa:25:b9:a4:81:
80:02:db:45:d4:ff:f5:11:8e:b2:6b:76:6d:02:f4:
b7:df:48:f7:54:9e:b1:8b:1f:fc:4f:ba:65:61:49:
42:6b:9b:31:5f:95:91:09:95:7d:4c:88:42:04:4b:
6a:80:8b:4c:37:b6:b9:a2:29:eb:cf:5a:25:72:45:
dd:6c:d8:8f:19:52:4b:e3:bd:06:56:45:0d:83:b4:
ed:64:64:91:40:3a:0e:18:f6:9e:b1:17:2b:51:95:
93:e2:b9:a0:12:bc:5e:15:62:2f:ca:bc:25:6e:d3:
94:c7:09:d2:a8:00:a8:c4:eb:af:e5:77:7b:58:ce:
0b:d6:b8:38:84:df:7a:13:6e:8e:27:4a:10:f6:30:
65:df:e6:26:d1:8a:61:89:74:3d:10:c9:8c:7a:ea:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C0:0E:3B:35:2C:1C:F6:B9:F7:60:97:28:94:89:AC:E4:27:44:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E58EE730AA6811F08BF1DEEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.214.0/23
154.194.232.0/23
154.194.242.0/23
154.198.174.0/23
154.198.184.0/23
154.203.32.0/20
154.204.96.0/19
154.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
37:ce:6f:ac:4a:e0:f1:1d:88:ba:4d:5c:65:a4:31:b3:57:ed:
e3:c2:fa:f1:e1:af:a4:07:ce:aa:f0:d1:47:0a:27:0c:30:93:
40:19:97:89:3f:86:22:0a:92:65:c5:fb:21:76:b7:f6:d0:c9:
50:88:e0:09:be:ae:df:10:61:d0:28:24:cc:f1:ee:cb:3e:7c:
7b:77:4e:b2:aa:be:01:f7:d4:00:cf:15:b5:db:a1:33:81:1f:
88:89:f3:02:5b:f0:9e:e2:bc:1b:53:0b:4d:d8:ca:b4:42:32:
f9:9d:83:26:2f:f2:87:c8:68:5d:80:8a:f1:16:e9:f3:6f:23:
87:9a:75:4f:24:77:2f:88:4f:e1:59:44:84:ed:46:8d:35:77:
47:aa:0e:64:1c:7c:37:6c:92:ec:d5:8f:78:bc:a0:9b:3f:f5:
45:68:bb:3a:8b:88:63:32:be:44:39:4f:d8:02:61:d1:1f:59:
75:39:cf:34:92:84:66:5f:fd:45:25:1f:35:20:9a:fc:a1:a4:
fa:36:b2:d3:96:9e:9a:11:db:0d:ce:60:df:7e:65:56:74:98:
62:0a:99:e2:88:be:af:6d:91:1d:ca:92:6b:cd:7f:31:53:95:
59:5e:23:23:b0:ac:e9:19:c8:2e:42:5d:90:5d:8d:f3:08:09:
29:57:78:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:00 2025 by rpki-client