Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48D0D054AD9011F08F3222DBDAE4EC9C.roa
File: 48D0D054AD9011F08F3222DBDAE4EC9C.roa (raw, json)
Hash identifier: KlzdpdhIbdmD8Mib/mvz6Bhrd50HFITr8Uz2aTWt68Y=
Subject key identifier: E3:20:42:6B:67:61:81:15:30:18:03:A4:23:4E:DD:3D:71:55:E7:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A44B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48D0D054AD9011F08F3222DBDAE4EC9C.roa
Signing time: Mon 20 Oct 2025 08:39:26 +0000
ROA not before: Mon 20 Oct 2025 08:39:20 +0000
ROA not after: Sun 07 Dec 2025 08:39:20 +0000
asID: 20326
IP address blocks: 154.83.130.0/24 maxlen: 24
154.83.133.0/24 maxlen: 24
154.84.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107595 (0x1a44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 20 08:39:20 2025 GMT
Not After : Dec 7 08:39:20 2025 GMT
Subject: CN=68f5f53e-620a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:1f:80:b0:d1:04:a0:06:cf:93:c1:5f:02:
2c:ee:5a:f3:47:cb:d3:08:1e:60:03:9c:93:53:a3:
85:cd:c7:03:ad:98:5d:18:cd:be:9e:65:21:2f:9c:
d5:11:69:cc:25:9c:a1:e7:0d:80:36:29:86:a8:5e:
9b:fc:0e:aa:98:ac:aa:32:0b:ec:bd:88:80:c1:87:
a3:aa:76:2f:dc:ac:7a:c9:fc:f1:cc:d5:1b:f5:1d:
45:59:62:14:8b:c4:bd:e7:21:c0:4e:3f:2a:11:74:
74:80:83:23:38:4a:53:06:8a:6e:78:9f:c6:1b:1e:
2d:76:2a:bd:46:a9:d4:c1:0b:fd:da:6f:75:01:27:
11:1c:1d:f2:d8:18:8a:67:ae:1b:d7:a2:38:6a:85:
30:1f:89:ec:ac:68:4f:35:51:49:f0:84:53:e6:f3:
32:35:12:17:56:f2:e9:38:12:1f:1f:40:ba:e0:02:
42:38:0f:f1:82:e0:7f:0d:75:b5:69:8f:35:09:c5:
a8:8b:fb:e4:f2:76:6c:ce:29:5d:4e:d5:34:96:50:
51:d9:1b:00:76:ec:e9:48:d4:26:75:bb:96:9a:4d:
29:99:92:a6:0d:73:73:4d:cc:33:ba:51:f8:ec:6c:
d8:3d:c2:97:89:3d:a6:b5:5c:c4:b0:a8:4c:00:05:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:20:42:6B:67:61:81:15:30:18:03:A4:23:4E:DD:3D:71:55:E7:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48D0D054AD9011F08F3222DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.130.0/24
154.83.133.0/24
154.84.188.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:f9:10:6d:ab:7c:f8:57:17:ef:60:44:ee:5e:be:47:d3:18:
d5:a0:ec:ae:5c:58:b7:7b:9f:45:fd:e3:4d:04:e6:1f:77:04:
fe:29:6f:81:ee:25:38:91:66:b3:d3:e1:55:ba:ec:93:a8:a6:
63:c0:e9:46:8a:ee:61:33:e5:41:ef:0e:ac:18:78:04:de:ac:
da:52:c9:0e:f4:06:66:c7:ab:80:c3:a4:57:be:cc:4d:f7:00:
ee:d4:9f:ce:36:62:81:37:2c:28:fb:b2:ea:ae:03:3b:94:a6:
e0:ff:2a:d9:cc:60:8f:18:d5:e7:a3:9a:b8:d3:4f:1a:6b:f6:
6f:b8:bd:b2:c3:1e:47:72:a4:02:cc:01:b3:33:90:9e:d3:a3:
59:be:08:cb:31:bd:f8:fa:35:17:ca:9d:2c:c7:16:13:99:a9:
ac:43:92:fb:73:55:fa:04:ff:de:0b:b6:c4:4a:17:79:82:b4:
21:67:af:bc:ed:fc:61:4a:c6:54:c1:12:7d:af:f5:36:b8:f4:
22:e1:5d:3a:77:c5:03:fa:31:91:c7:91:8b:6c:e6:e4:fd:49:
62:9f:98:b5:75:b6:24:e5:37:f4:36:4e:35:d5:b9:5c:5d:17:
56:49:88:fa:fe:77:4f:58:26:94:81:45:f2:ec:8d:5b:a8:57:
c8:8f:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:49 2025 by rpki-client