Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B999A982B4D911F0B872B188DAE4EC9C.roa
File: B999A982B4D911F0B872B188DAE4EC9C.roa (raw, json)
Hash identifier: r6W/TTsUJFG5hwcLAWLAgv5YbDqGDqF3t82H0a/f5Bs=
Subject key identifier: 01:BC:FA:78:35:FD:EF:9C:4B:97:89:F6:A3:83:7E:61:43:6C:E6:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A65C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B999A982B4D911F0B872B188DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 15:12:47 +0000
ROA not before: Wed 29 Oct 2025 15:12:42 +0000
ROA not after: Sat 06 Dec 2025 15:12:42 +0000
asID: 49505
IP address blocks: 154.211.17.0/24 maxlen: 24
154.211.18.0/24 maxlen: 24
154.211.19.0/24 maxlen: 24
154.212.28.0/24 maxlen: 24
154.212.29.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.212.31.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108124 (0x1a65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 15:12:42 2025 GMT
Not After : Dec 6 15:12:42 2025 GMT
Subject: CN=69022eef-3360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:97:c2:04:c3:e2:51:98:aa:e2:80:3c:a0:
f2:d2:5d:65:a5:bb:93:bc:88:df:01:46:e7:0f:a5:
66:b5:d3:e7:7f:a7:3e:e1:84:63:70:1d:bd:cb:23:
76:ef:ac:9a:6f:c5:7e:b3:af:c8:e9:dd:47:43:70:
c0:04:7c:32:99:e3:44:bd:02:11:df:c9:f8:7e:50:
84:58:d2:08:67:89:50:1a:f8:e9:74:bb:b4:72:96:
6d:9d:1e:11:09:b2:02:c8:12:b4:e9:c8:1f:95:83:
dd:b5:42:26:4d:6b:32:dc:b7:5a:20:1b:64:a4:bb:
2a:75:d4:de:a4:41:cd:4c:03:07:55:ff:b7:74:5b:
dd:c3:53:a2:35:be:b2:e6:66:c1:fa:8b:5d:17:31:
b9:9b:95:42:34:9b:82:46:a5:97:e7:7f:28:e1:8b:
b9:80:17:29:73:ad:e1:90:c2:f4:38:e8:55:8f:c2:
e0:e1:e2:d8:1a:01:19:13:08:1f:b5:2b:8c:3a:73:
ca:77:e1:dd:83:a8:fc:47:ab:c8:37:9b:63:e2:a7:
ec:6a:48:3d:56:0a:65:fc:ce:82:ae:30:bd:08:2e:
5e:b9:38:36:5b:16:29:6d:6f:1a:b8:85:36:8b:ef:
31:ae:34:fb:aa:4f:57:02:5d:de:b5:27:38:04:b2:
89:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BC:FA:78:35:FD:EF:9C:4B:97:89:F6:A3:83:7E:61:43:6C:E6:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B999A982B4D911F0B872B188DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.17.0-154.211.19.255
154.212.28.0/22
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
90:99:df:7a:dd:4d:3b:c2:fa:d6:bf:f1:bc:ce:c2:11:8a:3d:
e9:95:8c:df:e3:17:5c:49:38:d8:37:ec:75:b7:69:0a:3a:97:
2d:b4:4a:49:ef:75:97:88:d4:ce:53:f2:54:ab:6c:40:ab:df:
07:c2:d6:85:02:27:ce:79:79:c0:a6:31:0f:57:89:b0:35:1b:
40:8e:78:8a:11:93:18:e9:1b:fc:34:61:c5:63:e0:ce:ad:8d:
32:22:0d:68:af:65:95:e2:2c:26:34:11:c2:de:df:88:58:c2:
24:00:a4:32:21:9d:fa:5a:83:de:a0:bd:35:05:06:e4:58:e8:
ab:ae:f1:16:cc:7d:c0:ac:70:4c:8e:c9:b7:04:27:84:dc:bb:
97:bd:5d:cc:da:b4:75:56:c0:16:37:66:62:ed:c5:c2:32:b3:
20:2a:e8:45:8b:73:47:d0:3e:48:d0:92:3f:80:60:21:15:e0:
38:1e:ea:52:37:58:42:8f:72:c4:f0:e7:50:34:e0:7f:18:fe:
ce:d4:6e:66:68:24:a2:ff:fb:5a:17:bc:a0:da:6c:39:53:9a:
a4:fa:dc:97:1c:54:76:8e:13:90:d5:e3:04:71:f1:ea:f0:ab:
8a:28:88:4c:18:94:24:55:59:8e:fe:79:d8:5e:73:74:3c:e3:
61:bc:3c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:35 2025 by rpki-client