Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4281781EB62F11F081E91FF4DAE4EC9C.roa
File: 4281781EB62F11F081E91FF4DAE4EC9C.roa (raw, json)
Hash identifier: vMP6cgm0WBjBToVDo2iS3vhjU/8SFwPGq7bGUkziQes=
Subject key identifier: B0:FD:18:FF:9C:B7:B2:09:EA:22:F4:81:19:93:15:D6:18:D6:3F:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4281781EB62F11F081E91FF4DAE4EC9C.roa
Signing time: Fri 31 Oct 2025 07:57:35 +0000
ROA not before: Fri 31 Oct 2025 07:57:30 +0000
ROA not after: Mon 10 Nov 2025 07:57:30 +0000
asID: 214143
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108220 (0x1a6bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 31 07:57:30 2025 GMT
Not After : Nov 10 07:57:30 2025 GMT
Subject: CN=69046bef-7531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:bc:e2:9a:e4:2f:17:9e:c1:43:31:ce:38:
fe:30:a9:04:de:0e:be:87:01:48:c5:97:9e:57:e8:
7a:ab:27:6c:b8:1d:4b:be:ca:56:6c:ff:4e:22:fd:
e8:f4:4a:4b:ce:30:fa:48:1b:6f:8f:14:ab:de:96:
6d:5c:39:d1:38:b4:b2:36:59:a9:05:54:68:60:76:
18:44:45:bf:4b:1f:83:cb:c0:d9:48:c3:05:f6:d1:
95:9d:69:6b:c3:c5:b3:62:b3:d2:c4:6a:f7:02:b8:
84:5f:b4:fa:4f:75:7b:ee:b3:bd:df:76:4b:de:e4:
d7:18:f6:c1:79:9c:70:e3:88:ba:90:27:aa:98:53:
db:a1:b5:a3:c8:bc:52:b1:86:94:17:78:85:bc:13:
bc:e0:b8:77:c6:43:22:83:a0:83:72:b5:e9:7c:9e:
52:58:d6:f5:46:ee:54:b1:b6:10:96:3e:6c:dd:54:
98:79:32:39:37:d5:8e:26:32:ed:ee:24:47:61:a7:
4e:c2:69:8a:4d:59:60:91:b9:ba:1a:05:69:3b:a1:
fd:67:26:fb:fe:9a:4c:71:ac:a5:0a:83:5e:49:40:
ed:97:ec:e6:d9:47:3b:5a:a3:c0:97:16:e0:13:6d:
93:2c:68:9c:ff:d7:6a:b0:97:0d:7a:50:18:43:60:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FD:18:FF:9C:B7:B2:09:EA:22:F4:81:19:93:15:D6:18:D6:3F:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4281781EB62F11F081E91FF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
Signature Algorithm: sha256WithRSAEncryption
44:ea:ab:13:0e:c7:d1:cd:30:a2:f4:9e:25:a0:b3:84:85:7c:
dc:c3:10:75:6d:ee:42:ab:fc:14:6a:c7:61:f1:cb:a6:94:47:
e2:d1:68:d4:4f:11:53:9d:ff:a0:2d:8c:76:64:8e:99:58:75:
13:0a:76:15:e6:cb:1b:d9:43:99:24:f8:7b:6b:79:ee:da:2d:
ae:d2:30:ac:ca:0f:d7:d4:c8:17:d4:72:f9:04:ca:c7:29:ae:
8b:e7:2a:4e:83:a8:6d:10:87:ce:f8:f8:e5:c3:96:76:38:89:
45:1b:6c:d2:53:44:4e:9f:ca:c0:0d:fc:51:a1:8c:21:dd:e1:
8c:7d:38:9b:42:12:a7:15:01:52:01:f8:1b:87:a3:3c:d8:c3:
cb:de:fa:d2:dd:e9:74:18:13:1f:46:83:70:c0:a6:e7:6f:59:
64:cc:f4:25:85:98:01:d4:e9:b3:4d:d5:07:be:56:fc:8b:34:
44:5b:24:21:22:a5:18:d5:b7:ce:8b:29:3e:64:14:6f:73:c5:
5a:52:a5:ee:ee:e0:be:30:b1:4b:39:e4:f6:b9:69:80:55:d1:
8f:fb:34:aa:28:b6:d7:77:04:e0:df:1f:a8:f4:bc:18:24:57:
fe:da:c5:ac:98:27:db:85:b2:8d:ff:0e:57:1f:eb:70:d5:c3:
51:f1:46:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:52 2025 by rpki-client