Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B161C430B38911F085E190C0DAE4EC9C.roa
File: B161C430B38911F085E190C0DAE4EC9C.roa (raw, json)
Hash identifier: syaox5V5i5w7ZFU6CuegaFpv81mlUiBxpf5PU0FxWpQ=
Subject key identifier: C0:75:43:9D:88:F5:48:C1:63:31:8A:02:C4:1D:DE:EE:6B:25:24:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B161C430B38911F085E190C0DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 23:07:22 +0000
ROA not before: Mon 27 Oct 2025 23:07:16 +0000
ROA not after: Wed 10 Dec 2025 23:07:16 +0000
asID: 138915
IP address blocks: 154.90.42.0/23 maxlen: 24
154.93.50.0/24 maxlen: 24
154.93.60.0/24 maxlen: 24
154.93.61.0/24 maxlen: 24
154.95.69.0/24 maxlen: 24
154.95.76.0/24 maxlen: 24
154.95.77.0/24 maxlen: 24
154.95.78.0/24 maxlen: 24
154.95.79.0/24 maxlen: 24
154.95.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107950 (0x1a5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 23:07:16 2025 GMT
Not After : Dec 10 23:07:16 2025 GMT
Subject: CN=68fffb2a-bb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:b9:3f:fb:e8:9f:f9:e7:48:5e:b9:2d:c7:
f6:ca:48:e1:a9:1a:18:21:16:df:37:5a:3e:fb:23:
07:bc:6b:93:ba:b0:31:b3:5a:58:38:fc:0d:4f:38:
50:68:70:87:9b:2a:9e:30:2f:50:73:5c:d0:d1:e9:
9d:a7:e3:b9:4f:11:f7:15:e4:65:ce:bb:59:a4:6c:
c2:2b:4f:a8:55:a3:47:c1:e4:be:83:ad:81:0d:b6:
53:4d:47:58:12:2e:9c:6e:0d:8a:ee:db:da:09:a7:
b1:d7:e0:3a:b4:89:f6:cb:d0:24:83:2d:17:47:93:
76:f8:30:83:93:e9:42:db:3e:dd:cd:15:8d:43:66:
47:05:9c:15:a6:d2:cd:0d:99:08:dd:af:3b:2a:47:
49:e2:35:bd:71:56:40:41:37:40:c2:db:c0:8a:5c:
b0:98:47:ed:f0:5d:cd:29:e7:4e:e1:ce:86:da:39:
a5:61:1c:e3:3d:c4:ec:59:71:9a:4d:38:1e:9e:4b:
fb:b7:e2:99:fa:d3:0f:50:b7:03:6a:3c:8d:bc:70:
81:a5:9c:0e:20:c3:7b:57:b7:f8:2e:6e:a2:3c:fd:
9a:d1:c2:91:16:7f:69:5c:3b:3e:57:13:81:ba:be:
bb:b4:2e:5f:d6:ba:03:ed:2d:38:e0:24:d5:b8:ad:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:75:43:9D:88:F5:48:C1:63:31:8A:02:C4:1D:DE:EE:6B:25:24:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B161C430B38911F085E190C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.42.0/23
154.93.50.0/24
154.93.60.0/23
154.95.69.0/24
154.95.76.0/22
154.95.120.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:41:81:aa:c9:03:f0:d1:14:03:71:88:9b:b6:bd:1c:8c:5a:
88:71:68:2a:91:2c:13:c4:29:3a:4d:4d:24:f3:3d:ab:28:8d:
20:4a:ed:07:7b:05:8c:45:c5:79:83:2f:0f:24:6c:c6:5a:f8:
3c:87:a3:dd:93:5d:34:6c:42:af:c1:78:3c:54:81:08:1a:ea:
bc:cd:5e:53:3c:69:a2:ca:4b:08:64:f5:16:f8:e5:b7:cc:c6:
ca:30:c0:71:2e:e4:8b:85:47:cf:18:b1:2b:8f:f5:25:25:8d:
a7:c1:ca:0f:4d:3c:c8:ab:2e:20:3b:f2:91:1a:87:0d:2a:f2:
72:c5:06:1a:ee:b1:6c:19:0a:8b:6e:0b:10:1f:4a:8a:69:81:
19:3d:b8:cf:f1:50:46:17:6e:17:32:19:06:a4:59:06:32:24:
b1:24:a3:d6:49:7b:14:56:2c:4e:85:33:ea:5d:b6:ee:ce:04:
fa:c4:00:a6:5a:9f:e3:9e:d2:be:37:41:4d:e8:2f:fe:5e:f1:
6a:5e:a3:4e:d4:d6:67:3d:2e:c3:22:1a:fe:0f:45:f7:36:19:
8b:a5:fb:33:f9:2a:58:c6:90:7f:ee:86:f2:a4:26:4c:19:cb:
33:aa:cb:1e:e6:6b:02:a3:2e:9b:cb:be:a6:4f:ad:b6:28:3c:
e9:72:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:48:57 2025 by rpki-client