Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C1DD834B38711F084D8BEAFDAE4EC9C.roa
File: 1C1DD834B38711F084D8BEAFDAE4EC9C.roa (raw, json)
Hash identifier: 5qotsLzOgLju4hmsO1AY6X7O6q6GXkE/qmkCWtfoGss=
Subject key identifier: 18:EA:58:C5:7D:55:73:B3:D6:3D:87:54:76:69:77:7C:D1:6A:F4:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C1DD834B38711F084D8BEAFDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 22:48:53 +0000
ROA not before: Mon 27 Oct 2025 22:48:45 +0000
ROA not after: Wed 10 Dec 2025 22:48:45 +0000
asID: 138915
IP address blocks: 154.93.42.0/23 maxlen: 24
154.93.44.0/24 maxlen: 24
154.93.45.0/24 maxlen: 24
154.93.46.0/24 maxlen: 24
154.93.48.0/24 maxlen: 24
154.95.70.0/23 maxlen: 24
154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107944 (0x1a5a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 22:48:45 2025 GMT
Not After : Dec 10 22:48:45 2025 GMT
Subject: CN=68fff6d4-8ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:36:52:b7:c0:74:8e:36:8f:bc:59:fd:3b:
54:27:07:d8:bf:4f:d1:43:11:47:de:b0:a4:69:61:
7f:28:4e:47:09:e1:6a:ab:7e:87:38:a3:45:05:37:
15:04:dc:b5:9a:01:e4:9a:5f:9f:79:b2:ae:4a:88:
85:19:2e:cc:a3:0b:a8:98:af:53:55:15:fd:3a:df:
c7:ba:e1:c3:17:75:3c:fb:f4:36:14:30:ba:86:4c:
a7:3c:c6:27:6c:41:a5:f0:a6:6c:80:69:f0:74:15:
35:21:2d:c9:bd:67:4f:e3:45:8f:11:15:8d:aa:88:
64:0f:ec:2b:ae:52:d0:7c:22:15:2a:41:75:18:de:
47:63:ca:01:8d:76:68:e7:34:b8:8c:13:bb:d5:37:
55:fc:c1:38:2f:08:28:92:ce:02:25:2f:3a:62:6e:
da:fb:3f:48:a6:b1:86:db:d6:d4:db:05:c1:9e:85:
d5:67:dc:4c:4c:8e:50:79:d3:c6:c0:e5:2f:e6:07:
0c:ce:17:fd:ff:af:7c:d2:35:3f:1c:c2:f6:12:75:
d6:ff:aa:4e:02:be:ec:40:66:cc:3b:c6:bd:fb:90:
a9:af:c5:05:af:ba:71:19:f2:bb:a6:16:a9:53:9e:
12:47:25:ba:96:bf:47:af:31:8c:2f:33:04:ef:06:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EA:58:C5:7D:55:73:B3:D6:3D:87:54:76:69:77:7C:D1:6A:F4:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C1DD834B38711F084D8BEAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.42.0-154.93.46.255
154.93.48.0/24
154.95.70.0-154.95.75.255
154.95.96.0-154.95.107.255
Signature Algorithm: sha256WithRSAEncryption
10:da:03:b9:64:6d:43:69:fd:bc:01:55:97:d6:ab:60:2f:08:
fa:30:f8:89:05:62:1c:33:0c:be:74:f1:7d:a5:30:33:6b:56:
bb:79:c5:f3:06:43:34:fc:d6:43:8a:5b:63:3e:69:81:65:da:
f2:32:bb:10:f7:13:3a:5e:5c:c3:13:16:b5:77:12:46:f0:9c:
39:e6:6e:0c:06:f8:2d:c3:5b:e1:0b:e0:2c:1f:69:4c:83:27:
c9:fb:0f:76:2d:49:49:02:22:5d:87:bd:cb:ee:29:59:0b:f6:
56:5f:78:5e:4d:9b:7c:0c:33:68:be:49:13:9a:cf:b5:e3:df:
fd:4f:3b:36:ae:aa:11:b8:af:49:58:90:2e:0f:11:ce:0c:72:
79:1a:bd:cd:10:19:af:6c:38:7a:7e:f6:51:13:6f:29:d0:b4:
3d:55:56:19:ac:6f:39:8a:16:6b:9c:62:2e:36:38:d0:c2:9b:
b1:62:e2:e2:6c:c0:59:bb:59:47:d9:e4:6a:67:1c:55:43:29:
8a:75:e9:ae:73:cb:49:aa:91:5f:84:f5:b6:cf:72:50:43:0d:
13:d1:b8:55:65:ab:bf:c1:1d:34:3b:0e:72:00:41:73:5d:70:
52:4b:98:75:1f:1d:8c:7b:9c:f7:1e:37:5d:b0:4e:2c:09:e6:
42:f4:f1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:37:49 2025 by rpki-client