Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F151D4E09D8611F096E8D79CDAE4EC9C.roa
File: F151D4E09D8611F096E8D79CDAE4EC9C.roa (raw, json)
Hash identifier: n1CUXjOc9rhwwS6BQ0a+5KnjMm+jxcfr4hCDVRXAVUE=
Subject key identifier: 5A:5E:5B:2C:BF:80:87:CA:CF:DE:59:81:2E:B0:75:E5:2B:81:D1:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F151D4E09D8611F096E8D79CDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 22:52:15 +0000
ROA not before: Mon 29 Sep 2025 22:52:10 +0000
ROA not after: Wed 05 Nov 2025 22:52:10 +0000
asID: 202656
IP address blocks: 154.218.28.0/24 maxlen: 24
154.218.29.0/24 maxlen: 24
154.219.196.0/24 maxlen: 24
154.219.198.0/24 maxlen: 24
154.219.199.0/24 maxlen: 24
154.221.56.0/24 maxlen: 24
154.221.57.0/24 maxlen: 24
154.221.58.0/24 maxlen: 24
154.221.59.0/24 maxlen: 24
154.221.61.0/24 maxlen: 24
154.222.1.0/24 maxlen: 24
154.222.12.0/24 maxlen: 24
154.222.13.0/24 maxlen: 24
154.222.14.0/24 maxlen: 24
154.222.15.0/24 maxlen: 24
154.222.43.0/24 maxlen: 24
154.222.44.0/24 maxlen: 24
154.222.45.0/24 maxlen: 24
154.222.46.0/24 maxlen: 24
154.222.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106923 (0x1a1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 22:52:10 2025 GMT
Not After : Nov 5 22:52:10 2025 GMT
Subject: CN=68db0d9f-1faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:12:9c:03:f8:7c:78:19:02:e5:14:cf:67:
9e:06:ce:25:1c:81:33:74:d2:96:06:78:a7:dc:b1:
35:8f:d2:39:be:1b:c0:4e:f4:36:d5:13:cf:6a:9e:
1e:fc:0d:2e:1f:49:10:05:10:1b:6e:cc:43:99:90:
b8:a2:ee:30:ba:11:5b:54:02:00:69:f8:26:90:f1:
c2:ed:71:e9:c6:46:8a:7f:2f:6b:d6:42:09:af:15:
06:73:d4:75:49:84:02:f8:f4:d1:28:b4:77:e6:06:
fe:7b:2b:39:b3:27:56:24:fd:16:cb:1f:f2:d2:bd:
53:ee:0e:15:fb:72:90:ce:06:39:e2:09:c9:d6:5d:
be:95:73:cb:11:65:1f:4d:ca:ce:dd:f2:98:05:4c:
d1:d5:95:5c:f8:5a:30:2c:4e:1c:05:fc:97:9a:c2:
8e:0e:c9:b6:f7:87:6d:1e:b3:ab:1b:13:ba:23:54:
cf:6b:e6:00:17:47:b7:63:e9:bc:4b:0f:0c:45:67:
72:2a:e5:e3:a4:ad:23:94:c4:c3:c8:29:9a:86:bb:
81:61:42:8d:37:31:8f:4d:27:8b:7c:3b:cd:86:ee:
23:98:13:bb:1c:b0:53:ac:35:d8:c0:f4:53:bc:cc:
b1:c9:09:76:b6:6c:15:78:bf:f2:16:7c:c9:60:91:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:5B:2C:BF:80:87:CA:CF:DE:59:81:2E:B0:75:E5:2B:81:D1:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F151D4E09D8611F096E8D79CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.28.0/23
154.219.196.0/24
154.219.198.0/23
154.221.56.0/22
154.221.61.0/24
154.222.1.0/24
154.222.12.0/22
154.222.43.0-154.222.47.255
Signature Algorithm: sha256WithRSAEncryption
76:9f:77:63:a8:8e:27:b9:7f:ce:6b:02:0a:69:a1:6f:c0:1f:
3b:13:e9:e0:bd:4c:91:c7:13:87:54:3a:52:70:28:8f:13:5d:
c3:9d:39:f3:36:60:3c:c8:95:8d:ec:44:9b:ab:7c:d5:7f:e3:
d2:c5:38:6f:e9:89:dd:61:97:9c:2d:b4:88:32:f9:61:1e:d9:
2e:a9:06:b4:dc:d4:43:1b:80:e1:b0:8b:51:ba:95:d0:42:a6:
d5:e7:e5:b7:3a:e2:30:ab:55:91:67:61:d1:38:e0:1e:9a:a8:
5e:3d:f4:e9:1b:62:ab:04:4c:5d:7d:22:92:7b:69:9a:36:ff:
28:86:3e:68:ec:df:0c:2e:4e:c7:7e:ab:84:6e:a0:e3:1c:a5:
21:2d:62:f6:6a:9a:80:22:8c:5f:9a:3f:73:69:35:8f:21:26:
60:7d:22:80:45:73:0d:31:d0:be:8e:7c:12:f6:af:c1:c3:b4:
e2:68:86:e1:da:25:a2:ab:e3:7b:12:a7:90:d9:93:94:7b:53:
bd:0b:98:86:d5:90:fd:5d:1b:8f:69:89:c8:3d:e1:3e:a4:a6:
95:ea:7e:fa:c1:cc:fe:bf:c7:70:7e:b7:e5:13:a0:20:79:7d:
4f:1d:ea:b1:58:bc:b2:65:0c:88:54:a6:54:2f:d3:2f:54:50:
f3:7b:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:54 2025 by rpki-client