Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D055872B4E311F09B1D61C3DAE4EC9C.roa
File: 2D055872B4E311F09B1D61C3DAE4EC9C.roa (raw, json)
Hash identifier: vI8cr+URvRQrmzik4gWeQITPKBuv02Z0G6pobCr3gXo=
Subject key identifier: 9B:ED:5F:F1:B6:A5:EF:8A:C0:34:67:6A:8E:6F:41:B6:AA:30:E5:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A674
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D055872B4E311F09B1D61C3DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 16:20:26 +0000
ROA not before: Wed 29 Oct 2025 16:20:21 +0000
ROA not after: Sat 06 Dec 2025 16:20:21 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.218.26.0/24 maxlen: 24
154.218.31.0/24 maxlen: 24
154.219.237.0/24 maxlen: 24
154.219.238.0/24 maxlen: 24
154.219.239.0/24 maxlen: 24
154.219.240.0/24 maxlen: 24
154.219.241.0/24 maxlen: 24
154.219.242.0/24 maxlen: 24
154.219.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108148 (0x1a674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 16:20:21 2025 GMT
Not After : Dec 6 16:20:21 2025 GMT
Subject: CN=69023eca-bb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:99:55:00:20:31:92:20:a9:c6:55:9f:49:
8b:73:53:2f:bc:45:df:2b:ad:2d:bb:80:a3:b4:c2:
bd:d2:df:09:c2:e3:63:b1:33:d0:eb:e8:6d:64:cb:
28:15:79:13:c9:18:6b:76:81:07:a1:d5:f1:f0:81:
c8:f5:90:db:49:65:1a:7d:3d:5d:33:57:59:e4:83:
e9:e0:f5:1f:0c:8c:22:01:0b:7c:59:fb:fc:12:8f:
66:55:d6:7a:42:fc:99:d9:50:d5:08:a1:0d:f5:f4:
bb:0a:15:c7:71:9c:ec:f2:f8:5a:a1:f0:d3:5b:cc:
e6:dd:01:bc:b2:dd:85:a9:16:06:3f:6b:d7:40:66:
7f:d9:0e:6b:1b:62:4b:0d:ca:fc:de:e7:0b:db:b6:
1d:cb:95:8a:cd:44:59:a9:9e:33:6c:fe:1b:46:31:
44:2b:44:56:55:99:41:b2:21:43:67:e2:6e:be:90:
77:f9:82:71:f2:7b:a1:38:3f:39:5d:9b:ef:bc:91:
82:58:5d:2b:35:12:b6:10:8c:8a:ba:22:0d:a6:40:
91:8f:dd:69:65:2c:63:65:23:ce:0e:f5:a7:bf:15:
59:34:47:ca:f7:87:af:de:a3:98:b8:12:8b:82:14:
c4:8e:f9:ae:e8:6e:be:f5:55:76:eb:3f:fc:dc:10:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:ED:5F:F1:B6:A5:EF:8A:C0:34:67:6A:8E:6F:41:B6:AA:30:E5:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D055872B4E311F09B1D61C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0-154.218.26.255
154.218.31.0/24
154.219.237.0-154.219.243.255
Signature Algorithm: sha256WithRSAEncryption
6b:2a:fc:8b:91:6a:3e:e6:39:5a:d7:83:07:7a:6b:dc:8f:9f:
7e:6b:4f:c8:1b:64:af:da:08:d1:e6:e6:33:6c:34:3b:70:ab:
5e:38:15:9b:8d:9a:46:2e:ba:5c:57:5a:02:77:c9:68:a3:43:
a9:3d:b5:3a:6d:9e:de:05:42:13:6a:fe:7a:38:0c:9d:32:d5:
2d:b9:a3:5b:b1:0f:ff:11:4b:c7:40:dc:5e:a2:01:13:0e:02:
9f:a0:89:7e:97:42:d3:c0:8f:35:80:73:97:6c:c1:90:c2:92:
53:d9:cf:e5:bd:fa:75:cc:84:a1:7e:2f:17:64:eb:15:45:60:
6b:6e:40:56:38:d0:1f:98:e4:25:94:44:4a:de:6f:bd:af:e8:
51:d4:c7:30:e1:57:b4:05:71:f5:5e:19:83:15:18:3d:ef:d9:
24:b2:6d:7b:d7:bc:fc:01:31:cf:34:f3:48:3a:62:79:9f:41:
76:a8:1f:0b:4c:76:38:f9:c4:23:b0:11:70:57:45:e8:dc:29:
fc:de:61:e1:aa:1f:cf:f9:d0:c2:ab:25:8b:cd:f4:fc:ed:cb:
0d:48:58:6b:e4:33:1e:8d:6f:5e:ab:c9:20:9f:29:97:17:dc:
cf:98:6d:11:29:f3:33:be:98:1e:cf:28:8f:d5:47:62:c9:ec:
b6:8f:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:19:33 2025 by rpki-client