Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23E26CF8B3D511F09DA598ADDAE4EC9C.roa
File: 23E26CF8B3D511F09DA598ADDAE4EC9C.roa (raw, json)
Hash identifier: 5dlfisEVxSyVj6VpWQ53vCgQFQ1ZkOTKmLd/mGBAOH0=
Subject key identifier: 91:D5:15:40:E8:35:EE:53:FB:90:BE:D0:78:95:FA:24:A1:A7:43:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23E26CF8B3D511F09DA598ADDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 08:07:26 +0000
ROA not before: Tue 28 Oct 2025 08:07:19 +0000
ROA not after: Tue 02 Dec 2025 08:07:19 +0000
asID: 44559
IP address blocks: 154.198.37.0/24 maxlen: 24
154.198.38.0/24 maxlen: 24
154.198.39.0/24 maxlen: 24
154.203.206.0/24 maxlen: 24
154.203.207.0/24 maxlen: 24
154.203.212.0/24 maxlen: 24
154.203.213.0/24 maxlen: 24
154.203.214.0/24 maxlen: 24
154.203.215.0/24 maxlen: 24
154.203.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107987 (0x1a5d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 08:07:19 2025 GMT
Not After : Dec 2 08:07:19 2025 GMT
Subject: CN=690079be-6ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:46:9a:e9:75:85:35:63:fb:a5:95:6a:eb:
8e:15:fa:6e:c6:29:ac:27:34:25:ea:c9:ce:2b:01:
20:f8:7c:eb:e4:13:69:eb:bd:ed:a1:21:8d:0f:54:
06:8d:2a:e0:f9:14:ac:97:a7:cd:01:79:fa:e8:55:
62:0f:99:fe:fb:1f:53:73:13:52:19:67:2a:d4:ad:
7d:8a:9f:0d:93:09:7c:ab:b7:11:92:55:d1:ed:bf:
4b:85:77:0b:82:f2:b1:4c:22:d1:80:72:fa:65:b9:
a8:b1:24:45:c8:e2:d0:aa:74:95:67:6b:ff:15:69:
b8:72:74:df:cf:6d:08:f6:1e:e3:3f:07:e4:78:3f:
c5:c2:61:05:a3:f2:a8:17:cd:e5:29:c9:81:cc:49:
ee:07:be:81:10:ae:10:90:91:c8:41:fb:59:f1:8f:
fa:77:61:2f:09:67:62:34:6f:43:56:54:86:32:76:
ba:2a:68:e8:f3:bf:12:fc:b8:ad:bd:5b:c0:c4:c0:
fe:8a:ae:a4:df:2c:6a:55:05:d6:8c:a9:0e:16:08:
a0:15:80:34:22:94:eb:92:92:27:28:fc:0a:69:32:
0c:be:94:6b:86:25:6c:d5:2c:7a:85:d7:a6:8b:a6:
56:76:d5:7a:2e:4e:c3:a9:c4:19:ba:82:5c:f0:3b:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:15:40:E8:35:EE:53:FB:90:BE:D0:78:95:FA:24:A1:A7:43:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23E26CF8B3D511F09DA598ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.37.0-154.198.39.255
154.203.206.0/23
154.203.212.0/22
154.203.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:bc:79:d6:73:42:08:b6:91:ec:56:2e:d8:48:9b:d0:44:dd:
4e:42:1d:74:3d:8e:a7:a6:db:ed:cc:2c:21:3d:00:76:04:46:
1a:8d:c1:be:96:20:2e:13:ff:99:ef:46:85:75:b6:29:e6:47:
38:1f:93:0d:6a:77:9f:a1:93:70:e1:93:59:dd:29:01:95:43:
58:38:34:73:9c:23:81:99:dc:bb:3f:19:8f:ad:51:43:fc:8e:
92:fb:2e:d7:53:fd:37:24:4e:b2:9e:42:b4:f2:94:43:06:2c:
d6:59:5a:bf:57:25:86:84:87:ca:53:c3:52:25:89:2f:5b:95:
ea:0f:04:58:d2:7a:aa:75:cc:47:97:6c:5c:65:1d:f1:18:03:
3f:3d:b9:77:ca:3e:4c:a1:20:85:16:9a:4e:e7:83:9f:b6:2d:
dd:b1:d2:6b:49:1a:64:d8:59:15:83:a3:ce:c4:b8:0e:dd:a5:
1a:16:f5:70:01:a6:fa:d4:5d:b4:78:25:20:46:68:aa:1a:4f:
e8:44:90:29:1c:37:b5:6f:fe:15:6a:1a:17:d7:52:f9:6b:ac:
5b:f1:44:34:d0:6e:5d:38:c2:8e:81:e9:b5:63:63:d7:27:c8:
e1:a4:d8:42:f7:0e:20:d6:9f:aa:da:16:7a:42:ba:7e:c3:9d:
07:e3:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:56 2025 by rpki-client