Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB5B152B8B511F097362ACDDAE4EC9C.roa
File: 1DB5B152B8B511F097362ACDDAE4EC9C.roa (raw, json)
Hash identifier: j6Y9zEsKl1WXSjyvAgq1Z0BiXCPvx9p2YkMY0sYCNjo=
Subject key identifier: A6:49:8E:E3:A2:1C:32:3D:59:F9:6B:E8:10:53:CA:89:AC:79:FC:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A73E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB5B152B8B511F097362ACDDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 13:00:48 +0000
ROA not before: Mon 03 Nov 2025 13:00:43 +0000
ROA not after: Tue 13 Jan 2026 13:00:43 +0000
asID: 25818
IP address blocks: 154.91.204.0/22 maxlen: 24
154.91.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108350 (0x1a73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 13:00:43 2025 GMT
Not After : Jan 13 13:00:43 2026 GMT
Subject: CN=6908a780-c09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a2:3c:07:db:8e:73:32:21:67:0b:6d:02:ef:
2e:6d:cd:e0:d6:d5:46:c6:c3:02:d5:1f:b7:5e:00:
37:bf:09:9f:41:9d:2c:48:e9:82:08:eb:5c:d1:e7:
1e:66:8d:64:77:a1:26:15:2f:53:93:26:ad:5b:80:
fb:a9:07:0f:2c:e8:1d:ce:a4:ee:a8:7b:e1:d6:46:
78:af:34:32:bc:f8:7f:d4:5e:66:8e:92:df:d4:ed:
f5:01:c5:19:22:46:c2:5b:a5:24:7a:81:fe:8e:70:
fd:3f:71:6c:57:f2:44:b9:52:4d:c9:60:5c:e4:dc:
f2:c1:a2:ed:a2:45:90:ab:8e:2f:43:c4:20:f4:aa:
04:e0:61:1a:63:d3:c3:b4:c2:a7:a9:25:2e:53:8c:
dc:dc:06:09:2f:5b:8e:40:73:f3:d1:95:03:b2:2d:
85:b5:ba:6b:5d:f0:b0:e1:2f:09:bd:25:ae:db:46:
41:af:7d:5a:b4:5e:6a:f7:f4:d4:b0:6d:31:43:71:
ad:fd:35:c8:f9:bc:c2:33:aa:86:c6:df:c6:b5:46:
a3:a6:50:9f:f2:17:d0:04:74:59:f9:f7:cb:54:a1:
5e:5c:d0:dc:d9:a2:42:b1:c1:be:a5:06:e5:20:40:
32:d8:b3:b6:ce:cb:53:9b:c0:bd:74:ea:b1:dc:96:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:49:8E:E3:A2:1C:32:3D:59:F9:6B:E8:10:53:CA:89:AC:79:FC:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB5B152B8B511F097362ACDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0-154.91.223.255
Signature Algorithm: sha256WithRSAEncryption
7d:66:12:30:ec:e8:aa:53:9d:ca:3d:95:38:e4:1a:4f:06:e9:
a5:00:99:1e:3f:2b:6c:20:05:29:24:d2:eb:fa:24:4d:36:d2:
f0:78:ba:c6:d3:9c:cd:93:a3:25:e6:5d:f1:db:21:26:cb:83:
1a:24:dc:e6:2d:a8:16:ce:70:ad:f7:6e:39:40:94:48:5d:a6:
d6:4d:e0:b8:66:a2:62:3b:32:5e:37:32:ca:70:95:d2:2b:e5:
75:76:43:6b:e8:53:56:2b:d2:26:37:63:c9:1e:47:af:d2:9e:
55:10:ea:b6:43:42:08:4a:da:4f:10:98:ad:fa:b2:24:32:94:
2d:e3:f4:ab:13:f1:03:c8:ce:01:be:a6:9f:72:0c:a3:65:be:
2a:40:13:6e:d7:7f:7e:7d:40:13:3e:50:c8:84:ed:23:55:d7:
45:e3:5d:41:ca:41:01:d1:b1:88:c5:92:dd:de:ed:e8:48:7c:
69:e0:7c:4a:b7:bc:94:64:68:fb:07:87:06:1f:42:45:03:fa:
05:c1:43:8b:db:62:11:60:26:1b:65:c4:d5:14:3e:05:3c:5e:
ee:4d:23:8e:fd:2b:72:57:a6:69:99:bc:4e:90:34:c3:4a:61:
d8:0b:5d:5d:2b:fb:a4:ef:d8:95:f0:3d:5c:c8:81:21:0d:5f:
06:54:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:52 2025 by rpki-client