Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F83530BC9AA811F09567BD9ADAE4EC9C.roa
File: F83530BC9AA811F09567BD9ADAE4EC9C.roa (raw, json)
Hash identifier: aPzApCFrP/3IYu7rfNGA3HcBwz90U37Sfv7Y+IFSzyw=
Subject key identifier: E2:16:11:86:AD:AA:F9:96:B8:B4:7B:44:10:98:D3:21:CB:37:85:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A108
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F83530BC9AA811F09567BD9ADAE4EC9C.roa
Signing time: Fri 26 Sep 2025 07:18:16 +0000
ROA not before: Fri 26 Sep 2025 07:18:11 +0000
ROA not after: Sat 01 Nov 2025 07:18:11 +0000
asID: 395793
IP address blocks: 154.200.2.0/23 maxlen: 24
154.200.4.0/23 maxlen: 24
154.200.6.0/23 maxlen: 24
154.200.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106760 (0x1a108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 07:18:11 2025 GMT
Not After : Nov 1 07:18:11 2025 GMT
Subject: CN=68d63e38-4fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:2e:ed:2b:ca:cc:6f:ef:64:f5:31:e9:96:
7a:41:7a:dc:1a:d6:d2:55:a3:94:ea:32:e6:e8:6b:
42:5f:c7:72:74:4a:a7:1d:54:79:71:0a:a7:e1:90:
18:ad:5e:5d:04:60:16:26:2c:7d:cb:f6:7e:26:ec:
a9:0a:9f:6c:23:eb:2c:41:e5:cb:8d:68:84:27:96:
66:2d:e8:bb:6d:c1:5c:00:cf:a9:18:44:08:88:cc:
1c:b6:02:0f:89:7a:1c:75:94:67:f5:d8:77:da:ce:
22:48:ef:84:6e:4f:40:11:d0:6f:68:27:b8:24:8d:
e9:55:68:7c:29:50:56:86:ff:26:cd:ea:84:a5:10:
c1:bd:47:4f:dd:d3:c2:6a:31:9d:f6:be:ec:86:aa:
ee:f7:56:6e:83:7e:e7:30:09:8e:9a:4c:75:06:88:
82:d4:7f:89:40:57:24:7a:54:74:ce:60:1e:13:dd:
1f:ca:49:0e:ba:ec:f0:15:22:97:0f:91:ca:75:2a:
ec:9f:a2:28:5d:ad:51:6a:bb:13:23:bd:88:ca:73:
ee:1f:f2:c4:05:a7:cc:66:4d:de:67:07:ab:9b:68:
bb:27:28:41:77:56:d3:2e:82:c4:35:13:18:32:9b:
5f:db:43:6e:9c:08:61:43:b9:d4:ba:92:f6:56:b0:
96:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:16:11:86:AD:AA:F9:96:B8:B4:7B:44:10:98:D3:21:CB:37:85:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F83530BC9AA811F09567BD9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.2.0-154.200.7.255
154.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
47:7a:75:fa:9b:3d:d0:d3:21:b9:4c:57:fe:54:cc:4d:72:12:
cc:d0:ea:1e:39:ef:75:a0:ab:5e:9a:84:b1:2c:92:97:c5:5a:
2e:46:72:1b:48:34:65:cf:36:69:b5:a7:a0:d0:51:32:44:97:
b5:3f:08:80:45:b5:30:06:d2:44:f4:b9:04:b3:9f:c0:8a:4b:
00:9e:90:1f:e7:f9:be:7f:00:f1:cc:01:75:55:e3:25:20:80:
27:21:d0:42:ea:cf:ee:8a:f1:ad:a6:60:1f:56:76:2c:67:87:
37:16:c2:24:40:95:9c:31:b9:53:a8:4e:42:60:f4:4a:66:f6:
a2:b5:25:f7:88:84:23:3b:66:1f:18:6b:4c:7c:13:92:9f:ae:
5a:c0:19:01:af:8d:45:bf:82:72:79:e2:09:e1:ab:b9:76:85:
18:95:12:0f:96:7b:84:16:cc:bb:6c:29:b9:39:3e:89:a8:b9:
44:a3:0d:64:44:e2:d7:70:9b:cb:6b:52:50:6f:f8:79:34:1d:
9b:45:f1:78:24:0a:1e:11:64:bf:bb:c2:51:16:f7:15:fc:68:
c0:d3:e5:46:14:69:8b:1f:a3:79:80:b3:a8:29:e1:3a:b2:c2:
1e:55:57:a9:31:cd:61:16:7c:04:cb:1f:99:29:22:76:57:c0:
e0:9b:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:31 2025 by rpki-client