Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E23AA9A9D5F11F0AFD1AD9FDAE4EC9C.roa
File: 4E23AA9A9D5F11F0AFD1AD9FDAE4EC9C.roa (raw, json)
Hash identifier: ocd+8FgW7ZZ92t17HJtl3NF50TqZnWVhG12ngf7iMRE=
Subject key identifier: C4:EA:45:AE:62:76:2B:86:EF:69:93:2E:FC:65:15:19:E5:99:D4:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A16F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E23AA9A9D5F11F0AFD1AD9FDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 18:08:31 +0000
ROA not before: Mon 29 Sep 2025 18:08:26 +0000
ROA not after: Fri 31 Oct 2025 18:08:26 +0000
asID: 62240
IP address blocks: 154.85.26.0/24 maxlen: 24
154.85.97.0/24 maxlen: 24
154.85.99.0/24 maxlen: 24
154.90.1.0/24 maxlen: 24
154.90.129.0/24 maxlen: 24
154.90.130.0/24 maxlen: 24
154.90.131.0/24 maxlen: 24
154.90.142.0/24 maxlen: 24
154.90.143.0/24 maxlen: 24
154.90.172.0/24 maxlen: 24
154.90.173.0/24 maxlen: 24
154.94.34.0/24 maxlen: 24
154.94.39.0/24 maxlen: 24
154.94.42.0/24 maxlen: 24
154.94.45.0/24 maxlen: 24
154.94.57.0/24 maxlen: 24
154.94.58.0/24 maxlen: 24
154.94.61.0/24 maxlen: 24
154.94.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106863 (0x1a16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 18:08:26 2025 GMT
Not After : Oct 31 18:08:26 2025 GMT
Subject: CN=68dacb1f-1012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:fd:90:82:74:fc:05:a8:2d:ac:39:01:a0:
f6:db:fb:90:e0:d2:e6:c1:d6:f4:60:81:35:0d:af:
09:85:7f:62:19:45:1f:95:e1:ad:e1:99:1e:da:3f:
ff:8c:64:ae:b6:bd:03:fe:32:90:fb:6b:13:98:09:
c2:10:5c:5c:37:84:64:e2:98:9e:a2:7d:6e:4f:95:
fe:ee:ce:da:be:e0:dc:4c:19:f9:5e:77:2c:fe:09:
35:d2:54:1a:da:8b:8d:aa:e0:30:a7:de:82:d7:31:
40:7c:eb:54:f7:77:d0:1b:d6:00:ad:96:93:00:e9:
2d:77:7e:b1:f9:2f:b2:d8:d2:bd:00:78:6b:44:71:
6a:e1:77:9f:3c:70:29:39:af:0c:a3:79:f3:3c:ee:
8f:10:f7:c1:66:92:c0:24:74:17:cf:da:7a:ea:01:
2b:90:5b:d4:95:e6:5e:de:72:5f:11:23:2c:2b:26:
01:6f:9c:4d:b5:56:fc:3e:cc:8f:e4:8c:28:cc:a8:
38:70:f3:64:e6:a3:91:25:c3:88:8d:ab:40:76:e2:
78:ba:69:5e:48:5d:80:06:d8:85:b6:b4:a4:87:3d:
fa:24:e1:36:27:9b:24:f7:06:14:60:7f:52:d0:a7:
3b:65:d9:1c:a5:3e:96:2e:1e:a9:2c:65:0a:ad:ac:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EA:45:AE:62:76:2B:86:EF:69:93:2E:FC:65:15:19:E5:99:D4:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E23AA9A9D5F11F0AFD1AD9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.26.0/24
154.85.97.0/24
154.85.99.0/24
154.90.1.0/24
154.90.129.0-154.90.131.255
154.90.142.0/23
154.90.172.0/23
154.94.34.0/24
154.94.39.0/24
154.94.42.0/24
154.94.45.0/24
154.94.57.0-154.94.58.255
154.94.61.0-154.94.62.255
Signature Algorithm: sha256WithRSAEncryption
61:bb:fb:ac:47:d8:84:a0:ce:f6:0f:26:62:78:26:f9:bc:ed:
5d:51:4c:41:fa:42:39:7d:86:b9:b8:fd:40:81:03:10:60:64:
40:ac:7a:16:ea:cc:af:d4:8e:29:cf:66:e2:06:c8:9e:2f:e2:
10:dd:be:5f:be:cd:93:fa:6e:d2:8b:b5:4f:ca:4b:04:ec:14:
e8:c5:45:c7:f3:35:29:29:49:38:0a:fe:4b:f4:b2:d9:38:8d:
13:b0:4f:e2:c6:1e:4a:b3:f0:7c:bf:ac:26:95:b0:3b:8c:de:
03:2e:e9:0b:b8:4a:cf:3e:cf:93:09:bb:e1:89:2b:c8:c5:f4:
50:d2:dc:6d:71:b4:9a:d8:ad:0b:39:72:d9:d3:90:12:02:5a:
0b:d6:77:43:7d:a9:f7:f9:6b:32:3a:58:9f:c9:24:f1:5f:05:
08:2d:75:80:8b:20:9a:e8:e9:48:92:9c:5b:d5:21:71:1c:c0:
66:0f:df:3b:f2:2d:6b:22:bb:87:11:40:64:34:27:28:6a:8e:
b8:ce:d9:31:72:f8:71:8e:f8:ee:64:1c:b2:94:e6:47:4f:0e:
e1:08:22:a2:65:85:ef:fb:64:39:bd:e7:a6:3d:8a:80:5f:3b:
ff:b5:ab:73:ab:86:5a:38:be:da:fb:89:9f:a9:c3:f7:78:eb:
91:e4:06:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:16 2025 by rpki-client