Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A08608B0B40B11F0969E6F7EDAE4EC9C.roa
File: A08608B0B40B11F0969E6F7EDAE4EC9C.roa (raw, json)
Hash identifier: fFrAWjm5kDdYkNdEC6dwX0ujs0klEZJMDVC5QXT/pTw=
Subject key identifier: 8A:32:C9:54:BA:78:80:7C:9B:69:EA:E5:42:A7:C3:7C:F3:BB:D0:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A605
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A08608B0B40B11F0969E6F7EDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 14:37:28 +0000
ROA not before: Tue 28 Oct 2025 14:37:18 +0000
ROA not after: Wed 17 Dec 2025 14:37:18 +0000
asID: 138915
IP address blocks: 154.206.74.0/23 maxlen: 24
154.206.76.0/23 maxlen: 24
154.206.92.0/23 maxlen: 24
154.206.94.0/23 maxlen: 24
154.206.98.0/23 maxlen: 24
154.206.102.0/23 maxlen: 24
154.206.104.0/23 maxlen: 24
154.206.106.0/24 maxlen: 24
154.206.108.0/23 maxlen: 24
154.206.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108037 (0x1a605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 14:37:18 2025 GMT
Not After : Dec 17 14:37:18 2025 GMT
Subject: CN=6900d528-97ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:3e:8f:ef:42:a7:67:cf:77:c1:83:a4:77:
1c:ee:88:7c:2c:51:16:6a:75:e6:0f:11:59:3a:ff:
8b:0a:55:a8:c6:f0:f2:d5:56:bb:4a:8f:30:66:32:
b8:f8:2a:82:da:1c:3b:07:23:b4:2b:6d:d8:21:58:
25:3a:e1:2a:8b:a1:02:e9:0c:30:46:92:fb:f5:10:
98:6c:74:f2:31:6b:bb:c5:ea:f6:fa:a0:73:ef:80:
25:61:5f:90:0c:2d:b2:8a:cf:24:e5:68:4e:ba:78:
a8:dd:5b:7e:eb:02:af:c2:c9:bf:f5:07:1c:b5:2b:
8d:cb:07:60:9f:68:9c:07:e7:7e:a7:58:d4:42:46:
23:7c:97:c2:71:ad:bc:3d:d6:9e:36:e6:d6:cb:d9:
8c:3c:dd:c6:e6:ee:83:38:32:18:d2:75:28:85:42:
9a:fd:8a:35:63:3c:42:8b:f8:81:27:b9:a6:aa:f4:
60:92:61:67:62:ea:75:4f:92:cf:76:66:ee:9d:75:
c4:e5:49:3e:03:1b:48:e2:8a:99:0b:16:61:0e:93:
aa:7f:95:ab:6b:b6:0b:c3:3f:cd:ac:ff:cc:01:3d:
04:ad:63:16:46:c2:c5:58:c2:ad:0b:67:66:db:3e:
1e:24:78:ee:18:a0:73:82:ed:33:54:21:fe:c7:f4:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:32:C9:54:BA:78:80:7C:9B:69:EA:E5:42:A7:C3:7C:F3:BB:D0:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A08608B0B40B11F0969E6F7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.74.0-154.206.77.255
154.206.92.0/22
154.206.98.0/23
154.206.102.0-154.206.106.255
154.206.108.0/22
Signature Algorithm: sha256WithRSAEncryption
66:a5:48:6c:f2:59:78:24:9f:f7:72:68:fe:da:51:46:5d:25:
de:d3:b2:00:13:4e:d2:8e:af:d2:03:03:d0:c9:e3:d8:c9:c5:
ea:3e:00:b3:db:a8:10:ff:8f:e7:5d:d2:8a:08:22:8d:eb:ad:
d6:d1:33:83:95:d8:f9:c0:82:5a:91:3a:e2:2c:ee:ca:cd:dd:
e0:3b:5f:bf:a0:20:cd:d4:41:ab:a0:41:50:36:48:f1:03:1c:
53:b3:03:a7:01:1b:b2:de:72:45:35:0a:f0:08:ee:63:33:8a:
66:38:d8:2b:20:77:75:e4:f4:bd:6f:31:21:75:2b:2b:f7:62:
a0:1e:cd:07:4a:13:dd:a9:da:f4:48:63:32:60:c9:8f:18:a7:
f6:2f:4d:ad:bf:4a:b7:0e:46:ff:28:95:ff:60:58:66:21:fa:
fb:d1:25:5c:7f:c7:97:27:78:7b:69:78:d5:20:8f:63:09:51:
46:c2:1c:33:24:6d:43:ea:ad:19:a7:e7:bb:c9:81:74:a2:3c:
3e:d6:92:3d:23:10:72:37:4c:ad:a4:7c:3c:e6:4d:f2:75:ee:
52:ee:7f:48:ed:71:fd:79:70:43:b0:25:37:cb:0a:6d:3e:10:
cb:cb:76:1f:37:67:80:5d:6a:9f:27:f7:d2:b9:65:86:68:db:
72:8a:eb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:40 2025 by rpki-client