Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45176D029D5E11F0A88F2D9BDAE4EC9C.roa
File: 45176D029D5E11F0A88F2D9BDAE4EC9C.roa (raw, json)
Hash identifier: 9+GWBPlLVBamtinylgDG5EdahvjUFSBhxXeMBwFvGKI=
Subject key identifier: 2A:D3:14:30:CB:33:27:D1:CB:AE:39:1F:6C:B9:7E:8B:52:FF:8C:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A16D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45176D029D5E11F0A88F2D9BDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 18:01:06 +0000
ROA not before: Mon 29 Sep 2025 18:01:01 +0000
ROA not after: Fri 31 Oct 2025 18:01:01 +0000
asID: 214238
IP address blocks: 154.81.193.0/24 maxlen: 24
154.81.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106861 (0x1a16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 18:01:01 2025 GMT
Not After : Oct 31 18:01:01 2025 GMT
Subject: CN=68dac962-ee9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:cf:3a:a8:8f:b7:20:8e:78:ce:f9:df:4b:
fa:34:7b:ec:a5:12:0f:0d:e0:85:2e:dc:ae:fd:d8:
8f:12:95:65:0d:92:cc:a8:20:40:9f:37:ff:c7:d9:
d0:5c:31:31:08:ad:ca:b7:f7:27:4f:5f:69:bd:2e:
f2:c1:d1:bd:40:ec:24:c4:90:eb:e3:48:93:0b:42:
a0:ca:9b:83:3f:04:5a:ac:e7:72:18:dd:8a:df:e7:
ff:8d:eb:49:1c:86:25:f8:71:54:59:6c:9b:f3:5e:
a9:0c:17:26:4b:72:07:3e:22:2e:21:0e:0d:22:35:
45:18:09:84:60:05:3a:90:b7:6e:ef:b3:d6:f1:1d:
7e:b2:43:28:d9:a2:4e:9e:45:3b:97:56:03:ab:8d:
0a:aa:e4:06:92:4b:fd:23:e4:f9:fc:a2:1b:04:2d:
c1:50:fb:55:92:6d:e6:66:ba:3a:bd:a5:5d:03:ed:
cf:14:46:10:74:10:50:cb:36:08:89:6d:e6:34:a1:
7c:79:8b:08:07:5d:5c:8a:6e:d1:a7:c3:cf:83:e1:
a6:42:ce:f1:cb:fc:52:50:76:de:b0:95:15:9c:a3:
88:f5:f7:46:83:33:8c:a2:2b:1c:f4:7c:d2:5f:9d:
ca:da:bc:d4:3c:5b:c2:eb:b2:d4:3b:31:a8:8c:6a:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D3:14:30:CB:33:27:D1:CB:AE:39:1F:6C:B9:7E:8B:52:FF:8C:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45176D029D5E11F0A88F2D9BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.193.0-154.81.194.255
Signature Algorithm: sha256WithRSAEncryption
b3:55:f2:5b:22:83:74:ed:b0:87:c2:34:db:9b:d4:f8:86:8c:
93:e1:f4:0e:f4:67:f8:84:27:07:06:4f:07:0a:77:6a:7d:64:
0e:6e:80:49:6e:a3:8e:47:3d:10:0c:63:0e:eb:ce:5c:fe:82:
16:fa:5b:e4:b7:a4:75:4a:2c:64:80:44:66:1c:e3:63:d0:85:
6f:fb:36:c9:4f:eb:a4:4e:31:d9:4b:6e:e0:9b:b8:1c:2a:05:
02:39:52:82:88:88:91:cd:e0:02:70:34:50:5f:19:9a:88:a0:
f5:d5:d0:5f:2c:48:d3:9c:b4:3d:8a:95:63:23:18:d3:4e:0f:
7c:5a:9d:dd:a9:24:51:bc:87:f1:60:19:50:ad:41:d9:ec:6e:
42:33:d0:54:ca:26:ec:66:d6:2e:79:32:33:a1:d0:62:78:4b:
ab:6b:bd:0c:da:4d:56:37:3c:16:93:bc:88:9a:81:4e:03:40:
54:96:0f:15:d8:79:f2:c8:b1:28:98:af:2c:b0:51:19:af:ae:
45:0d:6c:60:2e:41:6b:d1:0d:4e:26:1f:d8:d8:ea:95:c9:78:
33:a5:61:e8:48:0d:c9:fb:45:85:f3:35:57:bc:5a:80:c3:c1:
9d:a7:65:f7:0a:d9:09:fe:1e:15:7b:69:bc:5e:34:36:7c:c4:
9f:5d:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:05 2025 by rpki-client