Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/660C4A6CB89A11F0867067A6DAE4EC9C.roa
File: 660C4A6CB89A11F0867067A6DAE4EC9C.roa (raw, json)
Hash identifier: hYuGsEojmEDLKPJsCtMb0qHW1uIjgPLnQcYkoju5MKk=
Subject key identifier: 0A:9C:8B:79:07:8E:01:4A:41:4D:4A:47:63:70:23:3E:4B:80:99:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A71A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/660C4A6CB89A11F0867067A6DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 09:49:33 +0000
ROA not before: Mon 03 Nov 2025 09:49:28 +0000
ROA not after: Sat 15 Nov 2025 09:49:28 +0000
asID: 135377
IP address blocks: 154.82.21.0/24 maxlen: 24
154.85.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108314 (0x1a71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 09:49:28 2025 GMT
Not After : Nov 15 09:49:28 2025 GMT
Subject: CN=69087aad-796f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:1b:81:19:e6:45:ea:5c:01:5b:e8:35:75:
8c:4a:10:d7:8d:80:78:72:bf:7a:ee:12:7c:31:ca:
82:68:2c:63:4b:28:64:68:b5:5b:b3:71:b9:56:2a:
26:e1:42:b2:25:70:0c:31:6a:38:01:1b:5e:31:ac:
ed:d1:a2:d3:3a:66:71:8d:1a:1e:5f:07:00:6d:d6:
56:67:b6:77:e2:65:81:b4:0a:54:85:68:4d:ca:17:
10:b9:65:93:87:ae:b2:19:0e:39:ec:f6:44:c0:90:
6d:17:53:82:91:09:2c:d7:b6:64:34:99:2f:d4:de:
3e:18:68:1b:6b:28:17:cc:63:03:06:54:7b:e5:22:
a3:96:a7:48:e9:40:df:40:bf:5f:15:ca:b5:27:2f:
2b:7e:5e:8d:1e:45:01:2e:42:66:79:d9:8b:7f:83:
4a:82:ac:c9:59:4f:07:40:a2:0e:6f:92:af:87:ed:
4e:06:ea:b7:72:a0:34:dd:66:5e:fb:99:ed:d0:3e:
8a:28:04:09:c4:19:27:af:fd:7d:31:34:33:db:2d:
43:5e:fe:ed:2b:85:e5:fc:4d:94:8b:45:81:b8:ea:
57:28:1b:0d:e1:07:b0:7a:10:f5:b0:cc:11:d2:ef:
c8:db:50:93:88:2a:c2:18:60:e7:bf:44:24:c0:da:
32:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:8B:79:07:8E:01:4A:41:4D:4A:47:63:70:23:3E:4B:80:99:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/660C4A6CB89A11F0867067A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.21.0/24
154.85.27.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:ed:e0:a0:00:eb:82:cb:43:a9:52:69:c4:2f:09:9c:b8:5b:
f2:21:32:ec:cf:f0:b0:93:e5:35:7c:96:c0:23:85:09:bf:6b:
15:17:64:c4:1b:ae:ac:f2:08:b8:25:77:dc:34:11:ad:bd:a6:
8d:f9:7e:35:39:35:3c:0d:60:7a:fd:2a:73:88:c9:17:75:ff:
6e:fd:23:c3:92:80:4f:ba:d6:e5:4d:ca:b0:4b:6f:e1:30:53:
1d:78:db:d6:1e:91:bc:94:60:12:9e:a5:8e:e3:5e:82:e2:46:
23:be:7b:17:cc:9f:de:72:74:5a:cf:44:82:a1:a4:f0:0f:21:
df:46:fc:fc:08:94:df:f5:40:81:b0:7d:6e:07:f3:ef:2e:08:
f6:58:09:1b:26:56:76:55:92:b0:c6:2d:a4:62:76:e7:71:93:
40:36:7f:71:8b:b8:f6:b3:bf:e2:f8:5a:d4:2c:57:94:62:93:
59:68:04:dd:c9:15:79:bd:de:93:58:6f:87:96:ab:45:bf:31:
b9:2a:8b:ae:ff:9f:80:8f:ca:14:1e:3e:9f:45:e4:20:96:c1:
79:78:78:79:f3:5b:6e:83:65:11:46:3d:ac:11:a4:c4:4a:d4:
85:dc:bc:89:18:c2:7c:bc:0c:f8:38:33:d3:aa:a5:30:ab:16:
cb:a7:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:00:09 2025 by rpki-client