Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC310BF8B36511F08D5F63E3DAE4EC9C.roa
File: EC310BF8B36511F08D5F63E3DAE4EC9C.roa (raw, json)
Hash identifier: xVvr4OZjtdlB2oi0gpua8kcgJA0uXliDCJ6PcwYTQkg=
Subject key identifier: 29:B0:53:68:5A:7F:E9:89:15:18:08:55:82:CA:A6:4A:4D:FD:76:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A579
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC310BF8B36511F08D5F63E3DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 18:51:35 +0000
ROA not before: Mon 27 Oct 2025 18:51:13 +0000
ROA not after: Mon 01 Dec 2025 18:51:13 +0000
asID: 62240
IP address blocks: 154.196.81.0/24 maxlen: 24
154.196.87.0/24 maxlen: 24
154.223.218.0/24 maxlen: 24
154.223.219.0/24 maxlen: 24
154.223.220.0/24 maxlen: 24
154.223.221.0/24 maxlen: 24
154.223.222.0/24 maxlen: 24
154.223.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107897 (0x1a579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 18:51:13 2025 GMT
Not After : Dec 1 18:51:13 2025 GMT
Subject: CN=68ffbf37-b541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:3e:93:b6:f8:fd:21:75:07:ee:55:62:21:
80:da:cb:f1:fa:42:00:c7:01:df:73:16:97:fd:5d:
ca:09:0c:bf:6c:b8:2a:8d:7d:e1:36:df:0c:e9:bc:
37:62:8c:dc:b3:f6:f2:21:56:96:04:bc:72:0f:20:
ba:da:b2:28:d7:10:fe:f1:bf:27:80:b7:e7:72:91:
a0:f8:9b:37:2f:5a:c3:6b:2d:0e:7c:3b:01:77:de:
0b:fc:c2:51:6f:63:ec:98:9b:a5:5e:a3:6b:52:24:
08:5c:34:b3:b6:c7:f1:6d:b2:9b:e9:7f:13:12:83:
a7:c8:ad:86:f6:3f:26:7d:ed:2c:43:e9:a6:cf:07:
a8:28:36:a5:86:c5:b1:6d:dd:85:8a:20:63:8e:9d:
49:59:a4:c3:bd:6f:cf:61:1b:60:db:6d:03:ec:a3:
ac:3a:25:a8:eb:47:cb:aa:42:b7:a8:39:e5:14:b0:
44:32:53:21:ef:31:b9:9f:7d:d1:a5:04:9b:46:c3:
eb:8a:13:c6:fd:71:4b:45:4e:79:8f:3f:58:9c:bc:
2c:8d:a7:7a:4f:d5:9b:05:c4:85:25:1b:09:42:39:
13:70:36:82:f2:ec:84:8f:54:40:12:e2:43:e8:4a:
25:6d:32:8f:7c:14:74:2c:e0:27:3b:ad:0f:ea:cd:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B0:53:68:5A:7F:E9:89:15:18:08:55:82:CA:A6:4A:4D:FD:76:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC310BF8B36511F08D5F63E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.81.0/24
154.196.87.0/24
154.223.218.0-154.223.223.255
Signature Algorithm: sha256WithRSAEncryption
c5:21:4a:c2:9d:f6:56:c8:ce:3d:29:95:42:d9:08:12:35:bb:
f1:75:7e:ad:49:2a:9d:66:f8:93:93:81:d5:4b:1e:52:e9:6a:
06:24:d9:9c:3f:cd:94:d9:4a:6e:66:90:95:b8:15:80:85:a7:
81:db:60:fd:62:2f:6d:fb:49:14:f0:56:ce:9f:78:65:7f:75:
c9:8c:69:5d:be:0f:f9:3e:f5:af:18:5f:e6:af:27:1c:23:03:
e6:b5:d9:05:98:6b:61:26:7a:a8:a3:90:13:d9:0e:99:00:ab:
f9:7e:84:94:04:82:94:68:9a:cc:98:87:52:f0:88:43:8e:0e:
98:0f:89:76:ec:2e:28:ba:c1:87:f8:61:a9:ba:0b:63:cb:7c:
3c:96:be:43:46:a3:ea:03:c0:22:54:6c:0f:8d:d3:1c:79:7a:
19:fe:25:9a:b4:d7:77:23:ce:08:a0:1f:fc:42:19:69:73:39:
eb:bf:7f:1f:47:4c:7b:ec:76:15:7a:e9:aa:a8:33:17:74:03:
83:b2:01:3e:9b:f8:f6:3d:3e:29:6d:a9:3d:5d:88:fc:de:73:
38:6b:ba:2a:16:5b:8c:76:e8:ec:c2:3b:f7:62:5f:34:ae:6b:
7c:aa:3f:5b:a7:a5:30:c0:75:38:30:69:44:23:2a:72:c0:b7:
90:83:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:47 2025 by rpki-client