Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0B04220B37B11F09A8C2CE9DAE4EC9C.roa
File: D0B04220B37B11F09A8C2CE9DAE4EC9C.roa (raw, json)
Hash identifier: Ggrsv7Qu5XYDtQHoiwYwt7XkMmXNNhG434Yh1qZx7Pc=
Subject key identifier: 7D:5E:BD:08:7A:A4:41:F4:B0:E1:61:06:01:E3:FC:AE:FC:A3:C0:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A592
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0B04220B37B11F09A8C2CE9DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 21:28:01 +0000
ROA not before: Mon 27 Oct 2025 21:27:56 +0000
ROA not after: Sun 01 Feb 2026 21:27:56 +0000
asID: 2914
IP address blocks: 154.214.194.0/24 maxlen: 24
154.214.195.0/24 maxlen: 24
154.214.196.0/24 maxlen: 24
154.214.202.0/24 maxlen: 24
154.214.203.0/24 maxlen: 24
154.214.208.0/24 maxlen: 24
154.214.209.0/24 maxlen: 24
154.214.216.0/24 maxlen: 24
154.214.220.0/24 maxlen: 24
154.214.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107922 (0x1a592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 21:27:56 2025 GMT
Not After : Feb 1 21:27:56 2026 GMT
Subject: CN=68ffe3e1-314f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:50:10:61:f4:9c:ce:82:23:1a:bd:72:17:a1:
85:d5:85:a9:e7:41:0c:68:08:47:29:91:24:8a:cf:
c7:ee:fe:ed:68:ad:ae:03:eb:32:ef:b0:e1:63:b0:
53:66:04:68:76:7f:33:9e:7f:61:02:95:3b:85:45:
26:df:a4:41:f3:c7:cf:a6:bf:83:e7:33:9f:83:fd:
6f:ec:6a:93:94:74:8c:c5:1c:18:4e:f8:69:5f:8c:
3b:63:16:33:81:f0:d8:1d:cd:4b:dd:12:32:2c:27:
e7:98:bb:dc:ae:10:94:f2:a9:41:2e:2d:bc:5b:97:
a0:f7:b5:9b:62:ca:43:65:51:69:0f:eb:04:ca:13:
5a:fb:96:d5:68:a8:02:c8:98:18:9c:ea:d0:82:eb:
bf:bf:05:77:c8:76:38:c5:53:fa:5d:d4:69:d0:6f:
5d:0c:4c:21:b8:26:65:59:5e:d1:17:ae:47:5f:6a:
0e:de:d8:70:b7:47:f9:92:50:a3:86:46:04:f6:42:
4d:70:8c:5c:f2:8b:33:eb:a1:eb:a9:c6:26:90:01:
eb:1b:28:41:69:63:61:47:a7:4f:9e:48:33:a4:00:
9c:d4:35:58:db:b3:11:84:27:6e:86:90:e2:52:1d:
ef:f3:35:2b:48:78:7e:bd:50:74:12:8c:69:07:2f:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5E:BD:08:7A:A4:41:F4:B0:E1:61:06:01:E3:FC:AE:FC:A3:C0:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0B04220B37B11F09A8C2CE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.194.0-154.214.196.255
154.214.202.0/23
154.214.208.0/23
154.214.216.0/24
154.214.220.0/23
Signature Algorithm: sha256WithRSAEncryption
82:38:4b:ca:4e:fb:f7:0b:ba:0c:4d:d1:36:e3:1f:fa:8d:cf:
b6:69:64:62:07:b0:3d:0c:0b:7e:3c:25:f5:71:d6:57:dd:d8:
49:5f:5c:d5:e1:62:0d:4b:f5:bb:6d:82:be:3b:fd:b4:5b:1e:
49:b7:6d:eb:63:82:c3:c5:ba:ed:78:50:f6:cc:01:a9:f8:c9:
60:ac:52:a9:f6:f2:40:2d:2e:87:18:24:33:e3:6b:b6:07:27:
88:bb:76:e5:f1:b2:25:74:0e:a0:ce:4d:13:45:8e:dc:3e:ba:
a4:a6:ec:88:aa:ec:26:54:41:08:15:c2:fa:65:86:44:59:5e:
f2:b9:93:05:2c:d1:9a:38:5d:d2:04:ed:96:ee:e7:14:8b:c0:
d9:3d:99:89:ef:d1:2c:a5:5a:42:98:18:a8:71:51:aa:ab:3b:
29:a3:6b:93:67:5a:20:66:66:7c:f2:4e:ac:9b:99:47:e2:a7:
9c:70:66:68:e4:a3:2c:7c:a5:71:39:1c:8e:b1:f3:88:b2:dd:
d0:c6:60:77:0b:4c:c3:b1:d1:53:38:7d:27:c2:59:3a:e9:d6:
78:26:c6:38:58:6f:9d:89:36:ce:60:5e:26:ea:1f:48:ab:db:
7e:06:7e:b1:6b:68:1d:94:1b:63:18:22:e1:65:34:f1:1b:50:
ba:af:8c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:34:39 2025 by rpki-client