Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86E8ED1C994111F0B2DC03F6DAE4EC9C.roa
File: 86E8ED1C994111F0B2DC03F6DAE4EC9C.roa (raw, json)
Hash identifier: oG38G+2X2lBehsE7o1mWp3jLZmUM9PjRw/9cvnRkLVY=
Subject key identifier: 48:B0:00:24:8B:56:CD:45:CB:AD:56:A4:D2:40:B4:93:13:CB:D2:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A06C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86E8ED1C994111F0B2DC03F6DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 12:25:17 +0000
ROA not before: Wed 24 Sep 2025 12:25:12 +0000
ROA not after: Mon 27 Oct 2025 12:25:12 +0000
asID: 3257
IP address blocks: 154.206.240.0/21 maxlen: 24
154.206.248.0/21 maxlen: 24
154.208.64.0/21 maxlen: 24
154.208.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106604 (0x1a06c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 12:25:12 2025 GMT
Not After : Oct 27 12:25:12 2025 GMT
Subject: CN=68d3e32d-4795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:8c:08:e6:0e:cf:98:57:54:9a:46:ea:6e:
41:dd:c2:37:4e:2c:11:39:6f:e6:95:52:07:10:6e:
a8:70:e8:bd:e1:67:87:29:1d:54:5b:5b:36:1a:3f:
ab:c5:93:58:a4:04:e3:72:fb:f1:21:64:80:c9:93:
18:b9:03:cb:02:d5:c8:7d:cf:7c:75:c1:7d:7f:96:
65:b7:8a:02:b4:23:ae:22:1d:b7:bc:5d:af:c4:4c:
c9:94:cb:92:4d:80:35:1b:a4:c5:be:a8:e0:1c:52:
4b:f1:1d:e6:0c:c0:79:0c:3f:8b:82:66:7f:35:9c:
5f:11:d1:62:3a:25:5f:37:06:e9:14:11:71:c4:be:
32:f7:20:8c:cb:a1:a9:c8:c9:cf:58:2b:cf:71:54:
2e:6c:9d:60:08:8c:8b:8b:00:91:15:82:7d:d3:bf:
e7:9e:23:d3:91:4f:9c:e9:aa:87:a1:2c:29:36:83:
6a:5c:1f:5c:d3:b5:89:2a:0e:3d:a7:bd:fd:63:af:
76:96:8a:a8:b6:dd:a5:c2:b4:5b:67:e4:d5:4a:c1:
f3:a4:4f:9f:3a:4c:62:1b:8a:a0:c5:f9:9a:f3:ca:
00:d2:c0:c0:a4:3f:1b:a3:c0:02:d1:93:a1:6e:ee:
47:47:bf:44:c1:72:04:51:0b:0f:48:d7:bd:b2:8c:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B0:00:24:8B:56:CD:45:CB:AD:56:A4:D2:40:B4:93:13:CB:D2:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86E8ED1C994111F0B2DC03F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.240.0/20
154.208.64.0/21
154.208.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:44:89:b5:d4:a8:c7:b1:76:3b:24:66:47:8a:cd:91:a2:71:
46:47:5a:e2:ce:0d:1b:ce:04:b2:e1:3c:0b:16:4b:6c:fa:db:
aa:ca:f3:17:12:b2:d0:fe:36:d2:91:54:a4:28:99:8b:f4:cd:
ca:07:e3:99:c3:d5:15:53:d0:87:5e:0f:7b:67:21:7f:03:a6:
c1:83:d1:a1:03:61:0f:8f:51:67:ab:5b:f9:32:10:08:a9:6d:
f7:cf:1a:f0:4a:f5:ef:a3:90:5b:4c:71:a0:29:42:ac:10:47:
05:a5:1d:14:4c:54:c9:c8:16:91:c8:9f:dd:bf:1f:10:d8:d5:
e9:ea:2d:b4:17:c5:44:c8:4e:b6:61:5f:38:32:14:08:f4:f2:
94:3d:b4:fb:9d:55:19:c1:e2:a9:7e:14:c9:47:92:0d:1b:45:
1c:7b:39:9b:f0:3c:43:6a:62:8e:8d:5f:54:b1:51:ac:8c:d2:
c5:cb:3d:70:cb:13:a1:63:7d:de:82:91:de:30:fe:95:d0:51:
de:66:54:fa:2a:14:b2:78:11:38:d3:91:2f:a2:9f:14:57:4b:
e6:92:b3:18:26:ba:57:99:91:ee:df:a1:a8:df:0a:df:40:ab:
61:bf:03:da:5c:d8:c6:87:65:08:c3:2f:04:6c:a1:b2:06:fa:
f1:00:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:22 2025 by rpki-client