Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE5BE16B95611F080950AC8DAE4EC9C.roa
File: 5CE5BE16B95611F080950AC8DAE4EC9C.roa (raw, json)
Hash identifier: mryQamwr6yxIwMhuY6FSpw3+oATocT0zu6d4wBf1LQ4=
Subject key identifier: 1B:C5:8C:D6:EF:E0:D0:67:01:2D:12:F5:FF:1F:33:00:49:E7:2F:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A767
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE5BE16B95611F080950AC8DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 08:15:03 +0000
ROA not before: Tue 04 Nov 2025 08:14:57 +0000
ROA not after: Sat 06 Dec 2025 08:14:57 +0000
asID: 45194
IP address blocks: 154.84.200.0/24 maxlen: 24
154.84.201.0/24 maxlen: 24
154.84.202.0/24 maxlen: 24
154.84.203.0/24 maxlen: 24
154.84.204.0/24 maxlen: 24
154.84.205.0/24 maxlen: 24
154.84.206.0/24 maxlen: 24
154.84.207.0/24 maxlen: 24
154.84.208.0/24 maxlen: 24
154.84.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108391 (0x1a767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 08:14:57 2025 GMT
Not After : Dec 6 08:14:57 2025 GMT
Subject: CN=6909b607-12ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:9b:31:57:50:e3:c5:3f:74:8b:98:8c:57:
e3:f1:e3:19:2c:cf:40:08:7a:c6:6d:49:5f:83:7f:
36:b0:c3:17:0c:a7:b9:7c:26:09:75:96:c7:07:cc:
9e:fa:a2:1a:a3:40:d8:ce:de:7a:99:9b:8d:c7:0a:
93:6c:01:0c:9a:bc:0c:7d:68:3e:2e:72:8b:ed:81:
5e:0a:ed:18:33:d4:45:16:db:30:34:95:6c:7a:e2:
7a:e6:ce:78:58:f2:68:12:c2:93:16:70:7f:66:b4:
a0:22:6d:b8:44:54:37:05:36:c4:cb:0c:57:46:92:
c7:db:59:16:33:5c:14:1f:eb:73:54:9d:6a:63:a7:
86:c5:ae:04:b0:bc:85:e4:6c:af:a1:e0:59:43:de:
f2:4e:e3:8c:8f:4f:ac:bf:d4:57:e5:03:52:ab:25:
9b:6b:79:e4:59:e4:b6:4b:14:0b:85:cd:f3:6a:dc:
91:32:75:00:75:67:9b:0c:c9:56:f3:6a:d7:f1:72:
5f:77:22:e7:95:af:e1:85:9c:c7:fa:f6:e0:25:7b:
09:d4:c9:93:f1:e3:52:44:28:49:6d:aa:0c:8c:8c:
9e:4b:e7:21:2b:91:19:d9:6f:6a:c2:cb:74:db:0e:
a0:9d:a5:f7:86:7d:d4:74:cd:4f:32:8f:35:de:f2:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C5:8C:D6:EF:E0:D0:67:01:2D:12:F5:FF:1F:33:00:49:E7:2F:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE5BE16B95611F080950AC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.200.0-154.84.208.255
154.84.213.0/24
Signature Algorithm: sha256WithRSAEncryption
84:37:02:45:06:7d:4f:03:41:b5:2a:8a:02:f6:e0:ae:ce:47:
27:84:ab:46:86:39:ce:7e:70:45:50:ec:bc:f7:1e:31:7c:63:
5f:6d:e0:eb:41:68:a5:12:3e:e2:50:41:34:9d:9c:5c:50:97:
d8:da:bf:b9:13:08:f3:a8:7c:23:81:d0:a7:cd:da:d8:b6:6e:
c1:5c:34:53:55:ea:4c:86:84:26:92:d4:5c:20:73:27:b0:7d:
02:9e:de:17:cf:f7:96:85:2f:b6:2d:d7:11:e9:df:6b:6b:3b:
a8:df:c5:58:bf:27:bb:64:02:bf:35:32:be:24:34:78:cd:7b:
b9:87:42:20:8a:fa:ac:10:ef:cd:76:ba:74:06:19:b6:3e:fb:
27:27:b2:20:16:41:72:d0:9c:ac:7e:50:1e:0d:77:ba:a0:84:
75:1a:49:27:d3:de:5c:ee:7a:6a:26:75:71:1e:34:e6:1c:c9:
51:3a:2a:33:46:ec:99:03:94:5c:16:20:be:88:16:0c:cf:d7:
0b:ab:c6:a0:25:17:7c:9c:68:c0:18:ae:1a:e8:52:b5:e2:de:
76:63:ef:d0:a9:7e:d0:b0:0e:fa:5a:c4:98:93:45:ce:16:a3:
77:fd:0e:bc:2d:75:66:dd:ba:da:f9:08:30:45:a6:35:e4:38:
06:76:e3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:31 2025 by rpki-client