Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D62A48BAAB6811F081B029E2DAE4EC9C.roa
File: D62A48BAAB6811F081B029E2DAE4EC9C.roa (raw, json)
Hash identifier: 1HEHsmMualinUIrYq1QsP7lhO9CyMbK7XvkDcH+Cdh8=
Subject key identifier: 70:CC:50:4C:3A:D3:85:19:02:0D:EC:3B:5D:CE:5D:0A:EE:94:47:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A440
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D62A48BAAB6811F081B029E2DAE4EC9C.roa
Signing time: Fri 17 Oct 2025 14:52:01 +0000
ROA not before: Fri 17 Oct 2025 14:51:56 +0000
ROA not after: Tue 25 Nov 2025 14:51:56 +0000
asID: 203020
IP address blocks: 154.194.214.0/23 maxlen: 24
154.194.232.0/23 maxlen: 24
154.194.242.0/23 maxlen: 24
154.198.174.0/23 maxlen: 24
154.198.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107584 (0x1a440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 17 14:51:56 2025 GMT
Not After : Nov 25 14:51:56 2025 GMT
Subject: CN=68f25811-70b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:56:c9:31:e5:45:07:19:46:b6:9b:8f:0c:
fd:19:3a:9d:d4:40:45:a7:25:b3:64:33:e8:37:51:
55:9e:dd:c1:b0:35:49:fc:e1:0c:07:a0:e3:f1:e0:
c2:4f:52:5a:89:87:be:20:b3:d9:55:5a:cc:e7:5d:
75:4c:36:24:c3:3e:ea:4e:54:4a:e7:82:65:c5:ca:
e3:f3:36:da:c5:4b:a9:b5:1e:39:a4:49:11:d4:ea:
4c:3c:06:b6:98:45:1f:ae:53:92:e2:ae:3e:f4:8e:
0a:61:d1:2a:76:2b:73:a6:c7:23:59:0f:97:36:5d:
93:13:10:6a:a7:1c:72:85:38:d1:e5:01:7b:b0:c1:
bd:54:f2:8d:8d:17:2c:89:cd:d3:28:b3:99:62:47:
c2:c0:13:22:cb:6f:93:c1:b4:f1:37:99:20:1f:f4:
53:3c:e9:58:dc:70:77:2c:1e:e0:34:75:16:ef:49:
e0:4c:f7:d0:d4:af:49:09:1b:c9:22:7d:c7:2b:8b:
51:82:28:46:21:f7:7c:66:91:48:c7:9b:c1:6a:f6:
fe:5e:8f:63:85:ae:65:00:6f:8d:5b:e5:cc:5b:a9:
a6:99:24:57:81:db:c7:ab:b8:34:70:f8:04:d2:eb:
bc:25:65:fc:95:a8:2a:57:a9:b4:c9:10:34:75:b0:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:50:4C:3A:D3:85:19:02:0D:EC:3B:5D:CE:5D:0A:EE:94:47:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D62A48BAAB6811F081B029E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.214.0/23
154.194.232.0/23
154.194.242.0/23
154.198.174.0/23
154.198.184.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:03:95:02:e2:ad:8e:1f:aa:a7:64:42:45:2d:50:b0:35:b5:
07:ac:17:9a:91:c5:34:64:1e:92:dc:92:1d:bc:ef:df:df:b4:
cf:23:80:bd:56:30:eb:55:4b:a2:b9:ef:0c:dc:ed:51:b2:15:
7e:0e:3e:63:ec:11:6c:21:1c:d5:d1:79:0e:85:ea:ab:19:61:
39:ec:01:95:93:ba:56:12:f5:73:8f:0f:7a:dc:22:f7:f1:26:
63:cb:b7:9c:8a:28:e3:1e:d3:56:b8:6e:c3:10:37:1c:d6:21:
0a:a2:f2:4e:5c:aa:98:5c:b0:2f:55:85:43:d8:bf:d6:44:59:
9e:3f:7f:19:4a:43:f8:40:e4:aa:f2:81:96:b4:07:a1:1c:83:
5f:8d:52:25:1b:db:5b:af:9f:80:65:72:d6:4c:55:78:09:9a:
24:38:b8:95:9f:b5:3c:60:fc:28:26:45:2d:8d:c9:95:36:35:
8c:fb:63:f2:0c:77:d7:c1:96:54:90:cb:58:40:e9:87:1a:ae:
d2:42:e5:d2:b0:1b:21:d3:30:a1:7b:50:b6:a9:59:13:21:1f:
98:23:35:d2:1f:69:f6:8e:96:ee:60:04:65:2b:58:13:d6:13:
f0:95:fb:b7:08:5c:db:e7:31:8f:4d:df:03:5d:36:43:1d:21:
45:f3:6d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:11 2025 by rpki-client