Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D20750CB4EA11F0A9F773EFDAE4EC9C.roa
File: 6D20750CB4EA11F0A9F773EFDAE4EC9C.roa (raw, json)
Hash identifier: B0OhtK66hCf5nUvMHb5EkuDYiBwnj35Do2sKgi8q9oA=
Subject key identifier: 1D:63:B2:91:25:73:8F:73:52:C5:52:C7:FE:A4:E4:CE:F7:65:38:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A686
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D20750CB4EA11F0A9F773EFDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 17:12:20 +0000
ROA not before: Wed 29 Oct 2025 17:12:15 +0000
ROA not after: Sat 06 Dec 2025 17:12:15 +0000
asID: 214238
IP address blocks: 154.219.23.0/24 maxlen: 24
154.219.25.0/24 maxlen: 24
154.219.30.0/24 maxlen: 24
154.219.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108166 (0x1a686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 17:12:15 2025 GMT
Not After : Dec 6 17:12:15 2025 GMT
Subject: CN=69024af4-fd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:9e:f3:2b:e4:35:5a:18:22:11:9b:67:30:
54:8d:5c:26:4f:7f:45:75:06:7b:34:c8:b7:a2:31:
ce:14:ae:4f:6b:8c:8d:82:43:db:81:4a:71:7a:48:
50:44:ca:fe:81:ef:33:f3:0a:2c:02:15:16:58:c6:
8f:f8:ea:9b:c9:60:53:18:6a:8d:4e:db:a3:93:b1:
fb:b1:35:02:ef:d3:2c:2b:82:28:83:19:64:d7:c2:
c1:1f:93:cf:8a:35:e3:72:08:dd:5d:fc:cf:76:50:
48:80:80:8d:1e:3a:0c:cd:8a:2f:0d:33:0a:70:81:
c2:1a:19:4e:ab:94:2a:00:90:c0:a5:c8:fc:26:42:
3d:66:11:7e:ac:0f:ab:11:37:d4:9d:f6:8d:0a:e8:
00:f1:0d:70:9c:38:88:b6:cd:98:0e:8e:e8:26:f1:
22:14:98:ab:c3:d8:15:1c:f4:76:6c:3c:52:3b:03:
d9:de:88:d8:a3:6c:b2:a2:fe:12:77:ea:69:73:63:
f1:de:57:88:83:7a:6e:58:bc:2e:00:8d:8a:a4:c0:
51:27:9c:44:ad:02:bd:18:f4:0f:1c:58:06:4f:b2:
fc:1e:91:3c:b7:e2:00:4e:c8:ca:85:c9:fc:04:2d:
12:ca:55:fa:a2:6a:ad:14:25:4b:cd:9e:ff:fd:8a:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:63:B2:91:25:73:8F:73:52:C5:52:C7:FE:A4:E4:CE:F7:65:38:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D20750CB4EA11F0A9F773EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.23.0/24
154.219.25.0/24
154.219.30.0/23
Signature Algorithm: sha256WithRSAEncryption
42:1c:f3:d0:ae:a4:64:ed:a1:99:e0:67:44:d5:a1:b6:2e:20:
1d:cb:99:e1:2e:7e:29:01:32:f6:f9:a2:95:c9:bc:b3:6e:f9:
af:f2:86:c1:25:ea:cc:dd:e0:05:da:6c:77:c3:50:91:d6:79:
17:d0:e8:17:c8:24:e2:e1:e3:80:df:44:6d:ac:61:94:f2:8b:
e0:7f:05:cc:62:7a:85:5c:14:db:14:a5:4a:35:ff:2a:a8:17:
89:5d:29:f4:28:d4:06:66:27:4f:94:da:ab:05:7c:be:60:9c:
bc:60:50:11:3d:e4:68:3d:2b:cd:c1:39:9a:f6:c1:70:c6:5d:
56:41:b9:95:06:07:32:3d:ae:f4:54:63:99:e7:38:86:93:e5:
74:c8:de:cf:aa:eb:7d:63:58:0a:2d:cc:20:8a:01:84:af:fe:
4d:2e:70:33:16:d0:c1:71:10:8f:22:76:1a:1f:de:d0:10:1a:
21:8f:e6:ee:88:ce:72:72:0a:cd:18:f7:4d:90:6c:ec:36:37:
e9:aa:d7:fe:ef:34:9d:e3:12:e9:44:61:93:99:16:d5:d5:62:
59:fb:60:13:09:61:c8:23:d8:3d:b4:a7:c8:48:67:91:f9:6b:
0e:06:89:46:21:79:be:b9:f8:82:a5:88:d6:2f:7b:f9:5e:99:
99:86:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:31 2025 by rpki-client