Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA9A4FE4A42211F098528389DAE4EC9C.roa
File: FA9A4FE4A42211F098528389DAE4EC9C.roa (raw, json)
Hash identifier: LblBZk0AGT08UjFFgCzUlMrUsqNE7PjvNdtOO/eTvuw=
Subject key identifier: 16:47:A0:9D:BC:BE:91:B9:61:24:08:A4:67:7F:98:20:86:F4:0B:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA9A4FE4A42211F098528389DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 08:44:19 +0000
ROA not before: Wed 08 Oct 2025 08:44:12 +0000
ROA not after: Mon 10 Nov 2025 08:44:12 +0000
asID: 203020
IP address blocks: 154.217.72.0/24 maxlen: 24
154.217.73.0/24 maxlen: 24
154.217.74.0/24 maxlen: 24
154.217.75.0/24 maxlen: 24
154.217.76.0/24 maxlen: 24
154.217.77.0/24 maxlen: 24
154.217.78.0/24 maxlen: 24
154.217.79.0/24 maxlen: 24
154.217.80.0/24 maxlen: 24
154.217.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107189 (0x1a2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 08:44:12 2025 GMT
Not After : Nov 10 08:44:12 2025 GMT
Subject: CN=68e62463-06e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:80:de:bb:ef:8d:e6:32:23:f9:d8:6c:90:
80:10:65:3b:26:fa:f3:79:5b:55:e7:fb:0d:32:27:
4e:8b:a9:5b:10:64:3f:4d:62:94:14:63:a1:7f:ee:
36:9d:29:1a:d2:b2:9e:3c:f6:f2:a7:09:76:65:d1:
c1:67:28:2b:a5:92:77:26:19:1c:ec:7f:66:44:1e:
e2:ae:87:d5:d1:5a:55:70:d0:07:92:29:b6:0a:32:
0a:3a:37:10:99:50:86:20:30:6e:a7:60:52:11:7f:
b6:1e:4d:a4:e1:1e:01:4d:26:af:22:b6:60:d1:00:
2d:d5:a4:51:88:8b:16:e3:64:4b:04:12:70:d0:d0:
4a:25:5a:8a:98:d3:f2:e7:37:77:6b:e8:78:97:84:
db:cd:71:6b:60:83:06:03:66:59:60:63:2f:73:4b:
70:a1:86:b2:f9:a4:6d:5b:1d:68:f4:11:39:f8:6e:
db:3e:1e:88:61:c9:4b:6f:f5:7b:8f:97:cf:ab:7f:
f9:27:2e:bc:3f:6c:46:b5:5e:c1:35:aa:a0:8c:bd:
5e:24:d3:ce:cd:30:ff:1d:48:5d:d3:f3:de:c3:5c:
9a:e8:48:1e:e9:e4:01:6e:66:81:65:79:0d:4c:8c:
0f:b5:31:65:7a:8c:72:98:45:d4:a2:4c:d1:64:8e:
bd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:47:A0:9D:BC:BE:91:B9:61:24:08:A4:67:7F:98:20:86:F4:0B:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA9A4FE4A42211F098528389DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.72.0-154.217.81.255
Signature Algorithm: sha256WithRSAEncryption
5a:4f:71:a8:f8:e8:1c:58:36:75:c6:76:6b:82:57:0e:82:6c:
2c:fc:bc:00:06:5d:00:0c:70:62:99:5a:5f:53:1a:6f:47:31:
cc:e7:21:f0:05:d1:47:2a:29:6f:63:fc:d5:78:a0:a9:5e:57:
23:3d:91:ad:ae:08:a9:53:c5:45:ef:71:21:46:b6:19:c2:d0:
98:41:ee:d1:63:9a:f0:ce:ad:e6:4a:ae:c6:2c:1e:39:dd:a3:
79:23:ee:d8:61:60:af:6b:6d:30:2d:16:72:0f:61:c1:fc:13:
ea:41:2c:34:6c:d9:b2:93:7f:27:c6:ac:33:3a:c0:68:2a:48:
2f:51:db:c6:11:47:06:c7:fe:6c:a1:19:af:20:39:d8:08:e5:
01:93:ae:9c:a6:75:53:9c:ac:c9:64:7c:2e:16:df:8a:00:90:
b2:99:3e:7b:cc:87:97:11:40:93:97:9e:e6:ca:41:4e:d1:ab:
ba:c5:11:64:12:60:fc:89:fd:7d:c1:bb:7c:8e:c5:9d:41:a5:
6d:7b:a5:d2:8e:c5:6f:18:9a:4c:1e:84:75:61:5f:57:ae:d8:
80:52:d7:6c:23:aa:b0:58:01:b0:e7:23:92:57:78:ba:f4:df:
6a:c5:79:d9:71:64:97:04:7e:fc:53:d1:99:fb:59:5b:fc:ab:
e1:ab:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:06 2025 by rpki-client