Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC68F5D49D8B11F0B3FB44BBDAE4EC9C.roa
File: FC68F5D49D8B11F0B3FB44BBDAE4EC9C.roa (raw, json)
Hash identifier: 8MzPIdIOG2QxS6XRgkvG465bqGHl1DklX+gRS1q2UNI=
Subject key identifier: C1:32:29:30:BF:E0:B7:CB:91:28:18:39:A4:B7:49:0B:01:A9:0F:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC68F5D49D8B11F0B3FB44BBDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 23:28:22 +0000
ROA not before: Mon 29 Sep 2025 23:28:16 +0000
ROA not after: Wed 05 Nov 2025 23:28:16 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
154.215.13.0/24 maxlen: 24
154.216.1.0/24 maxlen: 24
154.218.1.0/24 maxlen: 24
154.218.16.0/24 maxlen: 24
154.218.17.0/24 maxlen: 24
154.218.18.0/24 maxlen: 24
154.218.19.0/24 maxlen: 24
154.218.22.0/24 maxlen: 24
154.222.215.0/24 maxlen: 24
154.222.216.0/24 maxlen: 24
154.222.217.0/24 maxlen: 24
154.222.218.0/24 maxlen: 24
154.222.219.0/24 maxlen: 24
154.222.220.0/24 maxlen: 24
154.222.221.0/24 maxlen: 24
154.222.222.0/24 maxlen: 24
154.222.242.0/24 maxlen: 24
154.222.252.0/24 maxlen: 24
154.223.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106933 (0x1a1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 23:28:16 2025 GMT
Not After : Nov 5 23:28:16 2025 GMT
Subject: CN=68db1616-ba12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:69:83:8a:bc:38:ca:9f:f5:68:95:6e:99:
3c:1a:cd:09:95:88:3b:6d:94:16:26:a6:12:16:d6:
d6:ac:8f:42:06:ba:86:19:b0:15:67:3e:1a:17:33:
4b:f7:c0:36:e0:04:27:98:30:77:b5:1a:ab:82:2a:
79:1e:a8:a0:8c:c6:64:7e:42:ab:12:3f:f4:d8:59:
0a:44:2d:13:90:ae:b6:e2:12:e9:49:3f:41:7c:04:
38:1b:b5:fd:a5:cb:52:1c:98:82:1a:d3:8a:7e:80:
6e:12:91:bf:fb:9e:e2:99:75:4f:f5:3e:a3:70:23:
e9:18:88:46:95:8d:17:d1:7d:ab:fe:36:86:70:7e:
60:cb:ee:85:f4:50:6c:09:4e:d8:25:11:b6:b0:42:
b8:1f:f0:8f:d3:f9:90:bf:f2:f7:5a:12:cf:6e:f8:
aa:d7:71:74:23:ab:30:71:88:24:83:e3:16:58:a2:
86:64:e5:0c:af:77:ee:a0:0d:a2:ea:d9:04:34:4d:
7e:47:5d:a2:02:d2:85:ed:64:aa:8d:0f:4c:03:b4:
76:ca:c3:98:54:ed:09:4d:bd:8e:64:f0:cb:49:c9:
18:18:8f:e4:e5:8b:78:32:6e:23:06:cd:fb:e8:cd:
ec:9f:72:1c:80:64:a3:71:14:a9:2d:7a:92:b2:77:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:29:30:BF:E0:B7:CB:91:28:18:39:A4:B7:49:0B:01:A9:0F:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC68F5D49D8B11F0B3FB44BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/23
154.216.1.0/24
154.218.1.0/24
154.218.16.0/22
154.218.22.0/24
154.222.215.0-154.222.222.255
154.222.242.0/24
154.222.252.0/24
154.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8a:63:20:01:5d:d5:74:5b:b4:df:78:82:4c:19:fa:54:87:
8b:15:55:f8:70:11:f7:67:38:b3:14:97:48:41:e6:53:63:a8:
de:28:a5:6a:7b:ca:b1:13:b2:5b:d1:fb:2d:75:ea:81:1f:3f:
74:f2:88:d1:16:f5:1e:1b:05:9b:5f:09:16:dc:dc:db:dc:13:
3b:37:45:c1:e0:aa:c4:9a:8d:02:2e:ac:c1:4d:4d:46:7b:59:
c9:3f:38:4c:8d:01:58:c4:57:fb:bf:c6:43:72:fd:e8:4c:ff:
7e:a3:e4:ee:96:1d:01:21:d1:c9:11:16:90:47:e1:29:e1:ae:
50:39:86:af:a7:9a:e5:6e:12:e1:24:c6:c5:f8:1f:dd:98:a9:
12:25:dc:10:fe:93:08:35:c4:7f:67:c8:6d:11:9e:ce:10:01:
29:47:be:f3:12:fb:0f:e1:24:63:fd:7d:ff:ee:c4:45:5b:53:
55:9a:d8:41:4a:00:e2:35:e7:3d:70:8e:c2:33:c5:62:7d:cc:
0f:ca:99:bd:25:d2:8f:99:bc:e6:8f:11:d0:59:10:2f:76:d9:
63:98:06:b4:15:bd:78:80:d3:19:00:bd:de:da:67:d8:c4:91:
96:5c:02:0c:92:6f:f7:17:00:56:7f:04:cd:e7:fa:69:2b:a2:
3f:fe:8e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:01 2025 by rpki-client