Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F62141E2994211F097935682DAE4EC9C.roa
File: F62141E2994211F097935682DAE4EC9C.roa (raw, json)
Hash identifier: j8aOvACO9ZxufCq8CIfLjg96cme5p+apVfOzLijUKQ0=
Subject key identifier: C8:A4:A2:58:A3:DF:12:BE:64:01:F0:7D:6E:8E:A2:A6:A7:0A:DD:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A072
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F62141E2994211F097935682DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 12:35:33 +0000
ROA not before: Wed 24 Sep 2025 12:35:27 +0000
ROA not after: Sun 19 Oct 2025 12:35:27 +0000
asID: 11404
IP address blocks: 154.193.112.0/20 maxlen: 24
154.196.192.0/20 maxlen: 24
154.199.80.0/20 maxlen: 24
154.199.96.0/19 maxlen: 24
154.199.128.0/19 maxlen: 24
154.200.112.0/20 maxlen: 24
154.211.224.0/19 maxlen: 24
154.215.32.0/19 maxlen: 24
154.222.160.0/19 maxlen: 24
154.223.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Oct 2025 12:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106610 (0x1a072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 12:35:27 2025 GMT
Not After : Oct 19 12:35:27 2025 GMT
Subject: CN=68d3e595-48cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:8c:71:2d:65:47:93:f7:6f:9c:b8:c6:6f:
a4:9e:65:00:a2:98:34:37:f6:c3:40:cd:58:96:ce:
67:3f:30:63:7f:96:de:95:5d:44:87:1c:af:5b:19:
67:e1:19:af:a3:eb:1d:01:16:a6:74:5e:48:55:c2:
80:d4:46:34:62:4f:b9:9b:94:75:07:5a:b4:37:23:
98:16:8a:e9:97:ad:7e:19:d8:ea:4c:52:17:bb:f4:
29:d1:05:10:54:ce:5f:ce:67:1e:b4:72:2f:10:2a:
7e:9f:96:6e:a6:1a:c1:14:7b:40:2b:bf:88:81:b6:
ab:1c:d9:b6:64:83:9e:7a:67:0e:be:3d:5e:af:e8:
24:ad:87:b9:00:d4:9b:91:75:e2:80:aa:f5:0e:23:
11:e8:42:e1:a0:49:1f:d5:f8:a3:aa:cf:ae:69:ea:
e5:be:3c:b0:2b:98:0c:3d:1e:4e:eb:41:73:0d:d6:
db:a7:f9:76:ef:39:20:3f:17:18:5f:17:00:67:47:
ed:89:75:c8:dc:90:e0:68:5e:f8:0f:d7:51:37:db:
48:b2:4e:03:80:51:e1:50:9f:f1:55:11:ea:27:a9:
ea:7a:98:ad:ca:8f:d8:ea:e5:8a:a7:d3:d8:b2:e9:
9c:e1:d4:47:2b:f8:a7:43:82:3f:01:fe:dd:f5:17:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A4:A2:58:A3:DF:12:BE:64:01:F0:7D:6E:8E:A2:A6:A7:0A:DD:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F62141E2994211F097935682DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.112.0/20
154.196.192.0/20
154.199.80.0-154.199.159.255
154.200.112.0/20
154.211.224.0/19
154.215.32.0/19
154.222.160.0/19
154.223.96.0/19
Signature Algorithm: sha256WithRSAEncryption
c1:63:cd:a9:d2:34:b5:e2:35:84:38:90:4f:1c:62:ec:04:6d:
2d:1e:fa:38:26:83:55:88:39:4b:47:32:84:0b:93:1d:dc:2d:
ee:bc:ad:f9:af:a2:c5:0a:a7:75:4c:a2:d5:a6:4e:3e:d4:4e:
ff:3b:2c:f5:a9:86:9d:1f:ec:b0:d2:d7:5a:58:f1:47:3d:65:
17:20:51:4b:26:12:98:92:d2:1b:7f:05:e1:aa:fd:8f:df:f4:
e0:01:2b:51:fb:cf:ce:68:b6:12:33:9a:34:0f:d8:63:58:1d:
63:e1:d4:62:2c:dd:0f:5c:fa:2e:20:b0:35:fe:57:4a:fb:74:
53:78:aa:3c:23:9d:98:b2:2d:76:49:06:d9:ce:8e:7c:5c:1e:
e8:dd:36:cc:21:3c:56:be:c9:e7:5b:83:71:63:b4:b8:af:1e:
ab:65:20:00:52:50:fd:c3:bd:3d:c2:55:10:7b:7c:1a:7a:67:
63:b0:c1:92:42:a3:c8:8e:9c:fc:e3:f3:59:9a:86:d8:2f:5c:
df:07:a1:04:84:52:81:d8:a6:02:46:de:b8:eb:83:7d:0f:4c:
cf:18:68:b4:ca:26:86:ff:53:01:cc:fe:fe:5e:1b:4e:e1:da:
c5:ab:f0:ba:28:28:f3:cf:04:c8:f2:d2:5e:70:13:fe:8b:ef:
39:38:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:18 2025 by rpki-client