Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62CAE84AB96211F0889CB496DAE4EC9C.roa
File: 62CAE84AB96211F0889CB496DAE4EC9C.roa (raw, json)
Hash identifier: vfqXlo0cX7O684qSM1xQBS4l2j6cbsaWHXA/F2eYEqY=
Subject key identifier: 85:D4:1B:AB:64:0C:8B:88:C4:41:35:E1:C7:4A:37:62:3F:BE:84:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A771
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62CAE84AB96211F0889CB496DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 09:41:08 +0000
ROA not before: Tue 04 Nov 2025 09:41:01 +0000
ROA not after: Tue 09 Dec 2025 09:41:01 +0000
asID: 200373
IP address blocks: 154.193.152.0/22 maxlen: 24
154.193.158.0/23 maxlen: 24
154.199.14.0/23 maxlen: 24
154.199.68.0/23 maxlen: 24
154.213.160.0/21 maxlen: 24
154.222.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108401 (0x1a771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 09:41:01 2025 GMT
Not After : Dec 9 09:41:01 2025 GMT
Subject: CN=6909ca34-04e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:30:a9:78:24:5a:38:d5:08:f7:6f:72:22:
26:46:bb:58:83:7f:61:7e:96:74:ba:38:b6:b2:1d:
9b:af:55:b6:f8:66:61:a5:bf:2c:1a:25:0b:3e:45:
e5:09:a5:db:2f:2f:cf:3b:f5:b0:91:16:76:9b:8b:
69:44:58:4f:91:60:d3:40:c4:08:85:8c:be:8b:98:
83:59:4c:9b:29:66:29:d5:e5:c2:8b:a4:ad:93:bd:
ee:6a:36:03:38:31:df:68:e4:4c:e3:af:db:6a:0f:
6c:49:4d:34:7c:6b:37:f2:d5:c8:e2:5b:58:6e:6e:
7f:ab:f2:b6:4a:d2:73:a6:d8:46:f8:13:d4:e8:0c:
9b:f5:a3:13:1a:75:34:c5:62:8c:68:83:ba:9a:39:
da:7d:48:24:32:2c:47:1b:80:d0:03:9d:11:49:02:
f1:04:a5:2e:15:7f:17:8b:55:ce:7a:d8:cb:6e:01:
18:f6:fc:51:44:0f:e2:04:d1:8e:d3:35:80:05:3c:
8e:ab:43:16:b6:b3:b5:4d:3a:5c:49:b2:4f:5c:04:
15:66:a4:15:67:1d:5f:5d:2f:17:b1:8f:cc:1c:f7:
dc:29:c6:71:2c:3a:90:a7:c6:c4:b5:9d:9c:9a:51:
e6:7f:14:ea:71:b6:4f:20:33:64:ba:d3:a2:02:5a:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D4:1B:AB:64:0C:8B:88:C4:41:35:E1:C7:4A:37:62:3F:BE:84:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62CAE84AB96211F0889CB496DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.152.0/22
154.193.158.0/23
154.199.14.0/23
154.199.68.0/23
154.213.160.0/21
154.222.132.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a1:47:02:83:70:53:7d:92:3a:73:7c:1e:92:66:ae:a0:06:
ca:4a:49:eb:24:49:a9:b2:ca:bd:9b:76:06:a0:30:8d:51:b9:
1a:15:8a:4c:e8:b1:c6:24:67:df:7e:05:27:ec:8d:22:60:a4:
75:70:f1:06:1b:ca:f7:b8:1a:15:60:f1:b5:69:4b:4b:6e:a9:
11:80:41:da:e1:46:0b:ea:ad:78:0b:bc:e6:15:6f:e1:33:0a:
f7:ac:12:6d:b9:4d:27:c7:60:c1:0c:49:53:d4:38:b5:5a:08:
fe:bc:d7:20:1c:b4:f2:18:5a:b5:85:e8:a1:81:93:89:f2:da:
07:98:83:44:fc:0b:2b:2a:92:b6:4d:7e:7c:ac:f8:b2:af:87:
af:db:6a:56:2e:8a:d5:c4:e0:c6:c3:b5:24:e4:a7:02:bb:32:
c8:9a:67:e8:47:db:ef:9c:69:d4:a8:88:23:2d:86:53:62:47:
f5:3b:54:5a:88:a2:eb:3d:be:b6:38:24:7f:9f:a8:92:dc:69:
db:03:65:1d:a3:d2:af:a1:28:39:91:3b:31:f4:9e:25:72:85:
a2:d3:d6:09:a2:8e:3c:c3:99:dd:8a:b5:64:25:b2:78:c3:ec:
bd:58:1f:9d:60:d3:ab:2b:70:a9:5c:fc:3f:fb:7c:20:18:ec:
56:5e:7f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:21:30 2025 by rpki-client