Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17269660B32B11F08BD585DFDAE4EC9C.roa
File: 17269660B32B11F08BD585DFDAE4EC9C.roa (raw, json)
Hash identifier: t6AZ3/ZoDMtXRFQHZH1E6tTGRpWzwGR1YPreHok2aY8=
Subject key identifier: A3:FD:55:47:CE:57:CB:D5:9D:39:F4:FC:D9:EA:9C:F6:FB:A2:CF:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A519
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17269660B32B11F08BD585DFDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 11:50:10 +0000
ROA not before: Mon 27 Oct 2025 11:50:06 +0000
ROA not after: Mon 29 Dec 2025 11:50:06 +0000
asID: 20326
IP address blocks: 154.193.134.0/23 maxlen: 24
154.193.156.0/23 maxlen: 24
154.222.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107801 (0x1a519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 11:50:06 2025 GMT
Not After : Dec 29 11:50:06 2025 GMT
Subject: CN=68ff5c72-e0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:84:32:b1:73:ce:56:ea:6d:22:cc:c6:e4:c8:
7b:27:61:3a:19:00:cb:9e:28:45:67:d3:b3:8e:ed:
f4:9b:3e:71:c1:ae:a0:c2:49:6d:9a:0f:c0:fa:41:
6e:02:30:54:22:be:89:68:55:34:c6:20:6d:41:22:
15:b3:b6:50:15:ed:21:d5:98:73:11:09:44:15:74:
f3:91:0a:1f:d0:3d:7f:50:a6:ba:6f:df:bd:98:fd:
66:89:14:51:4d:2b:92:82:6a:65:61:77:4c:84:53:
ac:7f:40:aa:bd:8b:23:d7:1d:07:9e:29:18:b5:35:
39:09:bc:f3:02:6e:43:77:3a:6a:89:2e:56:80:3c:
cb:fe:3b:3f:f0:40:b5:50:44:49:c4:d3:71:c4:f8:
0b:e3:cd:17:2a:11:ad:02:d2:ae:83:3e:56:f3:26:
b1:65:f6:97:31:05:22:85:0d:b2:45:90:19:ad:6c:
f2:ae:34:25:28:8e:5b:63:00:50:d7:e6:36:b9:38:
60:c7:31:9f:9c:33:61:4d:6b:fc:f0:f2:83:5d:50:
94:fb:19:2e:f3:de:61:43:df:63:b3:83:84:34:e8:
dd:51:91:a0:a2:b0:74:c2:14:e0:92:03:48:fb:52:
7c:16:58:9f:53:64:b7:7b:3c:96:b5:74:63:ff:3a:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FD:55:47:CE:57:CB:D5:9D:39:F4:FC:D9:EA:9C:F6:FB:A2:CF:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17269660B32B11F08BD585DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.134.0/23
154.193.156.0/23
154.222.118.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:d3:04:51:d7:fc:92:9e:95:0c:d3:f3:56:44:32:d5:e4:6c:
0e:55:54:9f:0c:a0:d1:e8:b8:d0:92:94:b3:00:4b:52:9f:64:
a9:39:51:c4:e0:2b:2c:84:71:24:1b:a1:47:5f:c3:66:8d:ee:
43:1d:7b:93:af:63:58:bf:8a:a0:b6:ba:38:51:93:25:e2:31:
0a:af:fb:e3:dc:9e:2f:f8:0e:c5:a0:8b:71:49:95:3b:62:f4:
d7:0c:20:1c:cf:10:20:c1:b4:25:0e:23:77:67:3c:39:7e:c6:
61:be:0d:00:8b:33:c2:7b:f1:2a:ad:bb:64:e1:88:b8:3e:38:
1f:89:9e:dd:90:40:9d:dc:3f:30:0b:33:f2:ec:f9:f8:a8:c8:
3c:7d:50:d2:8c:d7:e3:03:fc:0a:34:e8:a5:d9:70:e2:f6:84:
e0:15:82:02:72:5a:13:f9:b9:c4:c1:74:4a:0d:c7:91:75:00:
1c:ef:59:3f:8b:aa:35:f4:d5:ad:82:f8:1d:c9:cd:3b:ed:30:
a5:17:a0:1f:41:5d:47:d9:80:56:aa:ce:73:02:ee:d2:8e:16:
fe:2c:c1:10:c0:73:71:78:f3:43:3e:75:73:bb:eb:e4:9d:bc:
a9:06:b5:6e:5b:78:04:d0:fd:26:c1:87:d8:ef:11:67:da:95:
a0:5d:a5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:47 2025 by rpki-client