Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86DF17F4B33811F0A42543BFDAE4EC9C.roa
File: 86DF17F4B33811F0A42543BFDAE4EC9C.roa (raw, json)
Hash identifier: mUE7Lo5IKS5ZNM6GtMyKURG8WxZ+a0O9ZJFr9pPBrkE=
Subject key identifier: 58:F3:8C:1A:45:B5:4D:F5:C7:7E:47:AC:94:09:E9:85:1B:65:46:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A529
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86DF17F4B33811F0A42543BFDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 13:26:21 +0000
ROA not before: Mon 27 Oct 2025 13:26:16 +0000
ROA not after: Sun 30 Nov 2025 13:26:16 +0000
asID: 401783
IP address blocks: 154.82.153.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107817 (0x1a529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 13:26:16 2025 GMT
Not After : Nov 30 13:26:16 2025 GMT
Subject: CN=68ff72fd-a429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:b0:4b:3b:77:4b:09:d7:33:7c:04:77:f2:
2f:7d:54:cb:d4:17:05:c2:b9:19:ee:9d:77:0b:e6:
9f:9f:df:4a:b4:47:54:f2:8a:5e:55:c2:ae:e7:71:
21:25:37:ae:08:2f:cd:2f:84:68:89:13:88:40:4a:
05:08:bb:0c:9c:bb:d7:3c:47:8a:1d:68:d4:09:94:
b7:90:e6:3a:76:17:a1:9e:56:87:a3:35:69:20:50:
58:27:e5:b8:79:31:41:1c:91:3a:eb:2c:a7:0f:ff:
83:31:5a:e1:49:74:e9:60:e4:e2:c6:bc:80:ca:23:
d9:77:91:9a:cb:e8:67:3a:49:e4:b2:55:30:12:4c:
25:d7:5b:28:98:1d:9c:9a:9a:28:fa:7f:32:bd:5e:
a8:20:76:3e:c1:52:02:71:c1:79:6b:bc:38:43:0f:
3b:0e:d6:5c:c3:b4:a9:d4:6f:c1:c4:b5:2c:41:15:
c3:5b:6b:11:85:d2:12:6e:bb:a0:a4:1d:0b:3c:69:
da:55:6c:0d:28:37:89:19:5d:fd:66:32:42:09:9e:
7e:82:89:7d:6c:4b:5c:19:50:fd:b0:46:25:84:26:
fa:bd:84:23:4f:74:e0:95:f7:6f:2a:95:00:8f:e8:
6d:96:2a:6a:ee:82:ef:9d:17:af:b9:a9:d0:18:f7:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F3:8C:1A:45:B5:4D:F5:C7:7E:47:AC:94:09:E9:85:1B:65:46:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86DF17F4B33811F0A42543BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.153.0/24
154.82.196.0/22
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
Signature Algorithm: sha256WithRSAEncryption
01:65:e5:52:10:11:c0:f2:f5:5e:b9:f6:66:f4:c4:0a:13:a6:
96:ba:29:3b:5b:d6:a8:57:05:ef:63:55:5a:40:96:f3:60:3f:
6b:79:ce:3c:be:83:9f:f0:26:56:d2:5a:81:1a:56:82:bf:8b:
ea:0d:e5:9c:fb:48:7e:9a:d6:0e:e6:81:1f:0f:a8:6a:eb:65:
12:50:66:bd:68:b9:1c:69:4f:f2:ec:61:7f:e1:1c:98:e7:3c:
9f:e8:bc:0d:45:92:b8:2a:78:d3:44:53:a5:a4:c9:2d:74:c1:
2a:51:fd:a6:a5:40:d4:5c:85:1e:b1:77:fd:dd:c0:8b:59:23:
09:27:07:f0:0e:11:65:db:21:d1:31:9b:96:2b:24:be:2c:c9:
02:97:3c:41:4d:eb:ff:52:1b:62:91:3e:eb:e8:e8:d5:98:fe:
66:03:a2:a7:29:89:f9:71:9d:ef:ed:d7:77:87:bd:fb:b6:38:
a0:66:d6:59:53:32:65:00:0f:c6:a5:a8:79:12:5b:b2:d6:25:
f4:1c:59:c0:39:bf:c4:84:da:0d:2d:e7:1d:1a:55:d9:45:65:
92:de:98:c2:f0:bd:64:0a:2a:7c:df:db:8b:05:cb:ad:e3:fe:
ac:41:44:a1:27:d8:b8:e1:fb:4f:f8:36:8b:9f:82:38:73:67:
fa:11:2c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:27 2025 by rpki-client