Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0AD2C8EA4EC11F08BECFBA5DAE4EC9C.roa
File: F0AD2C8EA4EC11F08BECFBA5DAE4EC9C.roa (raw, json)
Hash identifier: RSzJpPsmW/n//8bAA9a0oMnqDtRo8AAPeG1iLQRvT/k=
Subject key identifier: 7C:AC:67:2E:1E:22:AF:C2:EB:F9:C7:EA:72:5D:60:BF:67:3B:00:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0AD2C8EA4EC11F08BECFBA5DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 08:50:01 +0000
ROA not before: Thu 09 Oct 2025 08:49:56 +0000
ROA not after: Sun 16 Nov 2025 08:49:56 +0000
asID: 22773
IP address blocks: 154.198.20.0/24 maxlen: 24
154.198.21.0/24 maxlen: 24
154.198.22.0/24 maxlen: 24
154.198.23.0/24 maxlen: 24
154.198.24.0/24 maxlen: 24
154.198.25.0/24 maxlen: 24
154.198.26.0/24 maxlen: 24
154.198.27.0/24 maxlen: 24
154.198.28.0/24 maxlen: 24
154.202.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107258 (0x1a2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 08:49:56 2025 GMT
Not After : Nov 16 08:49:56 2025 GMT
Subject: CN=68e77739-c859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:8b:58:3e:07:f5:60:97:8e:19:72:85:a3:
6b:3e:fb:07:b0:d7:43:c6:a7:be:e9:d6:39:ad:b3:
40:5a:e3:7d:0a:7e:2e:20:69:c0:5f:7a:11:77:e2:
9a:80:a6:40:74:77:eb:dd:22:8a:fa:f8:1b:30:67:
4c:47:8b:cf:5d:f2:c5:ad:95:da:4d:8f:c8:12:ab:
bb:66:d2:0e:1a:c6:b6:b1:71:13:a3:29:a1:48:a7:
3c:77:fc:46:f3:b0:d3:94:11:47:78:2a:40:77:ea:
1f:34:77:1b:c5:fc:dc:58:73:f3:3d:1f:95:59:bc:
88:09:bb:cc:71:9a:c5:f2:70:6d:41:a7:ae:4a:08:
0a:17:6c:df:e2:14:c2:f5:49:28:31:e5:de:f5:be:
70:14:ce:e6:1b:e8:a4:cb:02:9f:5f:84:8c:59:f8:
30:17:6c:e9:ca:f1:b7:7a:49:80:3b:0f:d2:14:82:
db:fc:53:d7:47:3a:72:a7:6c:2e:e5:af:20:e0:46:
4b:8f:9a:10:68:0f:48:31:7f:f1:29:b1:6d:31:58:
ae:4c:e6:78:51:78:c4:62:cb:93:ca:99:03:92:c9:
2c:98:8a:a6:11:f2:51:55:4c:73:a1:64:0c:ae:de:
66:0b:42:ca:09:84:1a:e3:26:63:3c:f4:71:10:c9:
24:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AC:67:2E:1E:22:AF:C2:EB:F9:C7:EA:72:5D:60:BF:67:3B:00:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0AD2C8EA4EC11F08BECFBA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.20.0-154.198.28.255
154.202.108.0/24
Signature Algorithm: sha256WithRSAEncryption
00:61:e9:0a:c4:d6:6d:68:73:59:a4:12:51:8f:fb:5b:53:df:
63:ba:5f:2d:d0:a0:b3:e1:9e:49:33:b3:c5:ca:11:be:a2:20:
85:fe:0a:27:5a:72:39:f2:2e:c3:96:a3:d2:15:47:8a:01:82:
e5:7c:ee:f9:62:29:f3:0a:6e:ff:8d:b1:8c:d6:f8:46:a4:36:
d6:8d:ed:4f:aa:b3:a8:c5:be:25:93:b0:c6:1c:f6:e7:d5:db:
19:fe:d0:41:7b:01:6b:43:17:33:8c:bb:4f:ec:c7:66:71:f4:
f5:fd:90:06:cf:57:d2:6a:10:05:dc:a7:41:42:da:f1:12:9c:
9e:83:a1:da:9c:b3:cb:5c:6d:f7:da:b1:11:93:ab:09:c8:66:
19:1f:0f:35:b0:a1:ad:ba:ff:7f:9c:52:72:53:a8:b6:43:88:
19:bd:3f:d1:2d:87:6c:fb:e8:59:9d:08:fa:2b:48:6d:36:51:
0a:a1:0c:00:8e:bd:f4:a3:b4:4c:22:9d:32:13:f1:2d:03:ab:
15:39:02:20:80:97:1d:8f:7a:06:ac:2c:13:d0:4f:4f:18:d7:
a3:a9:37:e8:90:6d:71:21:c6:cd:e6:9d:cf:ea:03:c3:2a:92:
16:a1:7a:e0:4b:ba:93:f5:a9:b8:dd:8a:74:78:a7:21:41:22:
88:9c:70:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:03 2025 by rpki-client