Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366622A4B34C11F08BE342C4DAE4EC9C.roa
File: 366622A4B34C11F08BE342C4DAE4EC9C.roa (raw, json)
Hash identifier: IlVcfIelLlCBS1X/TMsR5pbLaK1Vm/QNxyEcn5B1NGY=
Subject key identifier: CB:FE:DD:3B:B2:E0:94:AE:85:23:21:DB:9A:EB:8C:64:92:52:18:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A53D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366622A4B34C11F08BE342C4DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 15:47:16 +0000
ROA not before: Mon 27 Oct 2025 15:47:12 +0000
ROA not after: Mon 17 Nov 2025 15:47:12 +0000
asID: 54801
IP address blocks: 154.81.136.0/24 maxlen: 24
154.81.166.0/24 maxlen: 24
154.81.181.0/24 maxlen: 24
154.81.191.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107837 (0x1a53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 15:47:12 2025 GMT
Not After : Nov 17 15:47:12 2025 GMT
Subject: CN=68ff9404-919f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:36:43:83:f3:ad:43:b8:cb:3b:17:12:9a:
41:e4:ec:79:c7:fa:36:22:d6:cc:6a:41:0c:db:14:
c2:f9:06:6b:6c:f6:cf:07:92:97:a6:c4:00:57:c0:
e7:6a:45:9f:18:63:23:6b:63:68:1d:90:ee:bb:09:
dd:b1:0c:0d:08:da:fb:f2:d3:65:f8:82:ce:5c:51:
b6:7f:b5:d9:f9:e5:0d:c3:cb:f0:80:d0:92:9e:9a:
51:c2:a0:21:c1:9e:40:df:7e:e6:e5:2e:e3:e3:9e:
e0:74:e1:c5:41:59:16:a1:aa:86:b3:95:37:d8:74:
21:bd:d4:1a:7e:8f:60:a9:21:d3:54:50:78:a4:43:
a4:bd:31:a0:3c:ba:fd:9e:8c:d0:43:99:78:d1:7c:
b7:e5:61:dc:5e:6d:3b:dd:93:1f:93:6b:fa:10:97:
e4:26:b9:62:35:51:1b:93:3b:9a:74:43:a9:f8:9a:
5e:21:fd:c7:17:79:ee:fd:97:79:5a:d3:35:aa:8b:
cb:43:25:bd:30:4e:23:a0:72:85:64:56:67:17:4b:
b1:84:bc:8f:01:61:d1:53:d2:ef:fd:81:00:e4:0e:
8f:a5:38:e6:15:c0:24:6b:8a:7b:ce:34:36:ef:9b:
a3:04:09:42:24:ec:fc:cb:e1:56:6f:f8:6c:fd:f2:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FE:DD:3B:B2:E0:94:AE:85:23:21:DB:9A:EB:8C:64:92:52:18:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366622A4B34C11F08BE342C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.136.0/24
154.81.166.0/24
154.81.181.0/24
154.81.191.0/24
154.82.18.0/24
154.82.20.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:d9:00:3d:36:d9:c0:3e:d1:10:c2:b4:71:a2:b8:c4:4f:ac:
5a:f9:11:7a:2c:78:42:58:cf:ac:37:38:b3:5e:b4:34:de:00:
c6:89:3e:ca:b5:47:56:23:da:e5:40:63:08:72:c6:bb:8a:ae:
2b:ce:d1:78:78:3c:98:6d:11:ab:4d:53:84:d4:06:d7:52:9f:
eb:cd:1d:01:ac:b9:f2:85:5f:a4:6a:87:59:8e:8d:0f:4e:a6:
2d:24:bf:c6:e0:a9:41:6a:62:f2:3e:03:c7:bd:4c:1f:53:65:
bb:8e:61:9c:ea:75:b5:a1:e5:f8:28:5d:40:5e:61:e2:3b:9d:
b3:1b:a7:f6:ca:ab:8d:bb:87:55:2c:a0:67:6c:28:bf:ac:9b:
7b:de:c8:fb:ed:a1:1e:a8:5e:97:32:1e:4e:f4:5c:46:b3:a6:
eb:39:c8:7d:93:b0:f5:aa:73:94:10:d7:f4:44:86:2d:13:20:
ee:1a:c8:8e:9e:55:3b:64:ce:78:09:bf:a8:b6:97:32:91:a9:
2f:81:53:e2:fd:3e:48:59:f4:7e:71:fc:6e:28:ca:55:4e:dc:
8b:84:c2:a8:db:c3:12:6a:1a:8b:51:2d:d5:37:08:01:ab:97:
2f:34:e5:69:5f:78:04:7a:a7:36:a7:de:c0:dd:f9:84:88:7e:
16:71:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:37:16 2025 by rpki-client