Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6FDA97AAB3111F0A4250086DAE4EC9C.roa
File: E6FDA97AAB3111F0A4250086DAE4EC9C.roa (raw, json)
Hash identifier: omM7PC4131aagn4JD8y3S18dc/U6XsGsNPQAvwOM0EM=
Subject key identifier: 76:31:A2:8A:76:13:03:4B:42:26:D0:06:C0:85:DA:DB:DD:6A:FB:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A416
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6FDA97AAB3111F0A4250086DAE4EC9C.roa
Signing time: Fri 17 Oct 2025 08:18:47 +0000
ROA not before: Fri 17 Oct 2025 08:18:42 +0000
ROA not after: Fri 24 Oct 2025 08:18:42 +0000
asID: 54801
IP address blocks: 154.81.61.0/24 maxlen: 24
154.81.136.0/24 maxlen: 24
154.81.140.0/24 maxlen: 24
154.81.161.0/24 maxlen: 24
154.81.164.0/24 maxlen: 24
154.81.166.0/24 maxlen: 24
154.81.178.0/24 maxlen: 24
154.81.181.0/24 maxlen: 24
154.81.191.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.128.0/24 maxlen: 24
154.83.135.0/24 maxlen: 24
154.83.137.0/24 maxlen: 24
154.83.141.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
154.83.209.0/24 maxlen: 24
154.83.211.0/24 maxlen: 24
154.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107542 (0x1a416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 17 08:18:42 2025 GMT
Not After : Oct 24 08:18:42 2025 GMT
Subject: CN=68f1fbe7-78b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:2e:2f:22:16:dd:41:74:7e:ed:67:51:03:
d2:73:ec:93:f5:ca:1a:f7:00:3f:17:e5:1d:f8:30:
92:62:06:a7:71:b1:72:14:64:f2:3d:90:e9:7b:a1:
b1:e2:39:7e:f4:b0:07:9b:53:6a:77:56:87:90:9d:
c1:d0:8c:0c:69:7b:a4:a7:5f:da:72:68:84:1e:65:
e8:f7:3f:80:97:f1:21:e1:ee:01:ee:d2:ec:40:4a:
84:ae:b9:00:cc:c7:bf:68:79:ac:43:84:f4:b1:ef:
b7:c8:40:ae:22:c7:bc:5c:ad:02:64:16:1e:12:34:
cb:e8:da:17:68:d7:03:31:37:b6:c6:41:01:1b:e6:
9b:51:5e:4e:0b:03:d8:e7:d9:c1:22:e0:bf:c1:b3:
81:27:58:9d:9b:de:37:f1:22:43:86:28:e1:28:d5:
e9:8b:10:c1:57:e4:84:d9:dc:b2:d1:b7:53:46:55:
5e:1e:a6:42:45:ac:9b:27:ce:5d:a0:41:86:02:b2:
2a:11:0c:35:7c:8e:ad:df:c9:c2:c6:71:c9:bf:6b:
33:52:56:9f:cc:8d:34:ce:b0:ce:bf:f6:58:29:66:
55:db:73:b9:a0:f3:08:f3:36:60:74:7c:e4:9b:8f:
99:89:df:7b:20:bd:a4:da:b4:1f:9f:85:b6:e2:b5:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:A2:8A:76:13:03:4B:42:26:D0:06:C0:85:DA:DB:DD:6A:FB:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6FDA97AAB3111F0A4250086DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.61.0/24
154.81.136.0/24
154.81.140.0/24
154.81.161.0/24
154.81.164.0/24
154.81.166.0/24
154.81.178.0/24
154.81.181.0/24
154.81.191.0/24
154.82.18.0/24
154.82.20.0/24
154.83.128.0/24
154.83.135.0/24
154.83.137.0/24
154.83.141.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
154.83.209.0/24
154.83.211.0/24
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3f:1a:0e:18:a6:62:3e:22:bf:eb:33:0d:14:cc:c3:f0:1e:
dc:84:39:cb:52:1f:76:ba:aa:ad:1f:93:a0:91:a2:f3:ba:68:
48:6e:3d:d2:77:a9:e9:69:94:30:1e:61:ee:22:82:ff:44:39:
60:cb:4f:24:1b:fa:2d:ca:78:da:70:76:cb:31:db:9c:c4:d2:
d8:86:dd:e7:7b:c0:b6:65:b5:77:d8:c0:eb:96:13:94:e6:dc:
56:f8:64:54:28:b7:8f:b9:e7:18:81:e1:d8:4a:78:c8:6e:53:
aa:2c:c8:f0:9f:b5:4f:ef:69:55:e8:8f:23:49:6d:71:17:fc:
99:56:94:c3:4b:3b:7a:60:62:4a:dd:e1:c9:3c:9f:52:c9:8f:
17:6b:01:f2:18:10:d2:95:fb:1d:8f:2f:41:e1:69:e1:9b:5a:
f7:90:7e:b6:53:bb:c4:ef:e3:bc:0b:12:a3:97:27:e4:81:82:
2d:75:37:97:3a:17:95:e9:2a:fa:ae:59:c9:36:f8:a2:59:6f:
2d:f7:e2:a5:db:22:a8:d3:aa:ad:67:d0:a4:df:21:81:7b:9c:
4f:9a:ff:ca:92:90:5c:fb:70:f5:44:5e:46:78:8d:31:ec:3c:
d5:56:b8:c6:88:14:de:c4:8c:6c:db:7a:fb:3e:19:f6:87:cb:
1b:77:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:23 2025 by rpki-client