Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A3F106B95311F0B0154EB9DAE4EC9C.roa
File: A6A3F106B95311F0B0154EB9DAE4EC9C.roa (raw, json)
Hash identifier: BMhAzrce3owDQhwVITogmIOf6Ja6dQE1zUYPGk5vNzs=
Subject key identifier: DF:37:05:6E:30:5B:38:C3:80:24:33:89:EA:04:1D:DD:66:16:F5:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A75D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A3F106B95311F0B0154EB9DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 07:55:38 +0000
ROA not before: Tue 04 Nov 2025 07:55:33 +0000
ROA not after: Sat 06 Dec 2025 07:55:33 +0000
asID: 45194
IP address blocks: 154.84.234.0/24 maxlen: 24
154.84.235.0/24 maxlen: 24
154.84.236.0/24 maxlen: 24
154.84.237.0/24 maxlen: 24
154.84.238.0/24 maxlen: 24
154.84.239.0/24 maxlen: 24
154.84.240.0/24 maxlen: 24
154.84.241.0/24 maxlen: 24
154.84.242.0/24 maxlen: 24
154.84.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108381 (0x1a75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 07:55:33 2025 GMT
Not After : Dec 6 07:55:33 2025 GMT
Subject: CN=6909b17a-b29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:d1:39:b1:49:04:ce:e9:11:3c:5c:17:bf:
3c:cd:dd:f0:b6:50:86:4c:41:66:09:0b:69:a0:43:
c6:76:78:ef:e6:1a:c1:84:01:e6:9c:25:01:c7:51:
e2:d0:4c:76:2e:7d:83:46:54:ce:87:a2:03:cb:e7:
c8:3e:29:64:57:80:b0:2d:14:6d:f1:09:95:34:e9:
55:10:47:54:d9:45:6f:0f:b9:94:4c:60:d0:09:dd:
b4:b1:40:14:7b:2b:6c:c5:d7:bf:0b:ad:f0:96:c4:
9d:82:6b:5d:a3:58:81:56:e4:f4:ec:11:87:59:27:
6a:04:0a:a5:96:29:90:4f:f3:3f:ee:71:b6:f7:41:
5e:43:f0:a7:9d:3c:e4:23:3a:bb:2a:28:07:51:ca:
f8:5e:de:ca:93:11:28:79:1b:9c:ec:9e:1a:54:dc:
16:4a:98:33:70:5f:fd:dd:cd:56:62:58:87:66:c9:
b5:ed:41:08:2e:1f:31:b8:70:71:a2:ca:b6:5a:65:
f3:ec:05:b2:7c:27:b5:5e:bb:fb:7d:d6:34:02:76:
cd:e1:45:f0:e8:d0:b7:3e:94:04:fe:4b:7a:85:5b:
1b:f8:00:60:16:d1:ef:b1:bc:00:d7:0b:be:3d:8b:
ae:92:ed:2c:24:1a:65:76:a4:67:43:77:ab:d4:3b:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:37:05:6E:30:5B:38:C3:80:24:33:89:EA:04:1D:DD:66:16:F5:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A3F106B95311F0B0154EB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.234.0-154.84.243.255
Signature Algorithm: sha256WithRSAEncryption
58:58:bd:eb:fe:36:57:e7:18:24:a6:ff:d2:c7:db:47:97:df:
a7:dd:8e:f1:3b:54:33:21:20:9c:08:fa:ce:90:2f:8f:b2:23:
1e:fd:90:25:29:bd:41:93:c4:69:04:6f:7f:76:bd:97:b2:fe:
f7:55:f1:44:0b:75:05:0f:88:69:95:22:09:a7:4e:68:19:af:
8f:a0:df:85:12:c7:86:2f:b3:dd:48:ef:4c:df:b8:2a:84:f8:
04:3f:c5:c1:f9:eb:c5:ce:95:fb:09:ec:d2:3c:ae:f2:85:61:
26:a8:47:6f:10:8b:2c:c2:ec:eb:29:37:ce:23:70:c7:78:e2:
34:34:dc:06:37:b4:c4:ee:5c:3b:c1:39:b3:17:f7:ac:78:95:
e3:3f:11:99:3b:02:eb:a5:2f:94:0a:f5:4d:d2:02:99:13:ce:
b8:51:b4:93:f8:61:4d:02:fa:f8:14:94:94:00:f8:66:c5:ed:
24:e7:cf:ed:57:5e:d0:5a:91:30:87:2c:60:50:30:73:f6:37:
cc:49:5e:d1:5a:a5:f9:5d:31:65:3b:63:9c:1f:67:d2:71:d7:
bf:b7:7c:dc:04:f5:c0:ce:88:9b:74:2d:55:05:f6:e5:51:da:
06:19:fb:18:e3:d2:75:c3:34:c7:15:74:2f:f0:eb:d7:0b:a0:
41:37:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:12:54 2025 by rpki-client