Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8A11CF0B35E11F0B6030EB9DAE4EC9C.roa
File: E8A11CF0B35E11F0B6030EB9DAE4EC9C.roa (raw, json)
Hash identifier: /D4x9SY3K3Zoi55NxplzOHENYkstbfTiEcfblTkiODE=
Subject key identifier: 49:B3:91:DE:C2:4F:75:5F:CB:E9:D9:E7:52:48:17:5C:3A:2F:9E:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A569
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8A11CF0B35E11F0B6030EB9DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 18:01:06 +0000
ROA not before: Mon 27 Oct 2025 18:01:01 +0000
ROA not after: Mon 01 Dec 2025 18:01:01 +0000
asID: 62240
IP address blocks: 154.196.21.0/24 maxlen: 24
154.196.23.0/24 maxlen: 24
154.196.24.0/24 maxlen: 24
154.196.25.0/24 maxlen: 24
154.196.26.0/24 maxlen: 24
154.196.27.0/24 maxlen: 24
154.196.28.0/24 maxlen: 24
154.196.51.0/24 maxlen: 24
154.196.52.0/24 maxlen: 24
154.196.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107881 (0x1a569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 18:01:01 2025 GMT
Not After : Dec 1 18:01:01 2025 GMT
Subject: CN=68ffb362-449f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5f:fc:a1:6b:4e:ad:6a:eb:25:2e:9e:55:ca:
ae:e2:bb:79:44:84:24:38:c6:b9:9c:74:d1:19:56:
85:c4:93:60:6e:f0:83:0d:45:59:e5:08:82:d7:60:
e6:85:4d:0e:4b:bd:cd:fb:4d:d0:ce:ff:69:0f:36:
69:33:97:db:f0:a1:0e:e6:ea:ab:5e:c5:c5:e6:5d:
f6:f2:87:7d:53:e7:75:7a:e8:a7:cc:72:e8:98:89:
f9:fc:4e:0b:21:14:d3:4a:ef:34:18:e7:98:6b:1a:
11:df:dc:80:75:88:10:09:f0:7b:af:25:c2:49:a7:
27:b3:34:87:9d:e6:97:75:09:8a:a3:f4:5b:7e:ae:
9b:d0:f1:dc:29:6d:90:43:3c:19:7c:89:df:e7:0b:
7f:84:8f:bc:15:63:24:4f:ab:74:68:64:bb:37:d0:
1a:4a:4f:26:fe:70:8d:2f:fb:4f:f6:ab:b0:25:81:
e9:14:ee:78:d0:a5:9b:53:d9:39:4c:45:34:53:1d:
c3:36:ac:70:df:a0:1d:f1:85:05:6c:c9:b9:21:0e:
40:7d:63:a3:e5:3e:83:ce:2d:83:f4:73:ff:c3:95:
4b:64:86:34:7b:20:fd:3d:73:50:05:8f:c6:c0:67:
60:e6:82:8c:59:f8:5e:d7:b4:3d:59:d4:04:9a:67:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B3:91:DE:C2:4F:75:5F:CB:E9:D9:E7:52:48:17:5C:3A:2F:9E:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8A11CF0B35E11F0B6030EB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.21.0/24
154.196.23.0-154.196.28.255
154.196.51.0-154.196.53.255
Signature Algorithm: sha256WithRSAEncryption
22:dd:b2:db:69:5f:97:4b:62:5a:d5:40:08:d8:e3:c8:ba:62:
37:e2:50:d1:3c:ff:39:54:29:bb:46:be:14:de:0c:69:98:5f:
7f:f3:75:0a:1b:78:8c:47:2c:05:5e:e8:be:e5:2f:a9:b1:b5:
bb:b4:1b:74:d0:b6:8e:23:11:5f:89:79:f1:37:d8:43:ed:65:
33:a0:54:cf:77:d1:7e:e1:cc:05:69:98:0c:96:67:00:e4:4c:
7e:dd:82:e0:ff:3d:bb:d9:5a:c0:46:b9:2c:aa:47:df:f6:f8:
3f:3a:05:1d:d8:ef:4a:43:c6:9a:18:9d:42:d2:f3:4e:65:ae:
84:e9:b4:06:81:7e:2f:86:2f:aa:40:41:c5:7d:be:54:2c:c9:
3d:f9:c6:e2:eb:d1:49:9f:da:da:dc:d0:91:53:9b:0b:b0:cf:
8c:3d:88:a2:cd:16:80:bd:8d:46:46:b6:99:0a:89:c9:70:89:
dd:4e:0c:25:39:b3:1f:02:85:7a:fa:30:41:52:da:39:09:3c:
ce:39:cf:d6:29:ab:9a:3d:ac:23:5e:9d:34:ce:fd:44:15:cb:
53:67:ad:a5:42:48:ab:4c:a8:31:29:a4:a2:f3:2e:93:2c:14:
7d:60:10:51:35:78:3f:f1:c8:cd:3d:17:eb:3a:1b:2e:e8:c7:
f9:a2:b7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:47 2025 by rpki-client