Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB12B2AB40411F08D5397D2DAE4EC9C.roa
File: DAB12B2AB40411F08D5397D2DAE4EC9C.roa (raw, json)
Hash identifier: kLz9eksYu9WEIjKIW+qmvCb9FVx3BjGA0DwXVo5LRDg=
Subject key identifier: AA:42:2B:34:88:86:5E:01:16:F1:4E:80:98:3D:14:CD:23:12:61:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB12B2AB40411F08D5397D2DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 13:48:59 +0000
ROA not before: Tue 28 Oct 2025 13:48:53 +0000
ROA not after: Wed 10 Dec 2025 13:48:53 +0000
asID: 138915
IP address blocks: 154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
154.223.22.0/24 maxlen: 24
154.223.23.0/24 maxlen: 24
154.223.24.0/24 maxlen: 24
154.223.26.0/24 maxlen: 24
154.223.28.0/23 maxlen: 24
154.223.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108023 (0x1a5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:48:53 2025 GMT
Not After : Dec 10 13:48:53 2025 GMT
Subject: CN=6900c9cb-f548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:d9:3b:b7:e4:d3:27:d5:79:b0:01:04:6a:
d1:e7:a4:9c:2d:6b:54:58:1d:e0:30:50:b1:96:08:
14:af:12:6c:68:9f:54:58:8e:cf:6d:c3:dc:26:9d:
21:8c:c1:70:84:6f:93:bf:3a:02:ba:ff:3d:85:1e:
1a:31:e3:a8:96:f9:0e:ab:86:ac:db:5d:5e:1d:f6:
09:bc:c4:d1:f2:46:be:cd:ac:b7:6b:01:07:45:35:
87:b2:7a:13:4a:d5:76:42:42:9b:7a:51:8d:47:4b:
d5:12:99:87:1c:78:11:8e:90:95:07:b4:e4:b4:c3:
2c:e7:f5:d1:2b:8f:d8:50:55:ff:99:bd:b5:7e:75:
3e:0e:15:55:20:e2:e5:97:0e:15:00:0e:8c:9e:da:
74:81:3c:ea:67:f1:92:21:66:e0:82:10:68:5f:00:
4c:88:63:d7:59:4e:53:fc:92:f4:b2:74:ca:5a:00:
93:b5:58:af:41:d2:f5:28:51:7e:8e:03:82:ed:77:
97:97:0b:92:f9:9c:e6:af:7d:2b:c7:80:8a:96:10:
60:e0:a5:0d:49:f3:8b:c7:c9:b7:6f:f4:a9:5b:2a:
23:cb:04:f2:d0:8f:8e:d9:90:89:ab:e5:a6:b9:68:
14:1a:47:d4:11:6c:06:f2:30:77:42:8a:33:00:d6:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:42:2B:34:88:86:5E:01:16:F1:4E:80:98:3D:14:CD:23:12:61:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB12B2AB40411F08D5397D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.17.0-154.223.24.255
154.223.26.0/24
154.223.28.0-154.223.30.255
Signature Algorithm: sha256WithRSAEncryption
3a:e9:ab:61:a0:3b:10:5e:d6:7f:e3:ba:35:ec:7d:8b:44:c1:
16:a8:58:33:30:d4:12:93:28:ba:8a:74:2e:ab:64:02:fc:ba:
a3:bc:1a:bc:7c:cc:41:83:6a:3b:22:b8:80:13:a8:a2:fb:dc:
32:a2:01:c8:9f:72:62:8f:7c:a2:fb:c6:e0:07:9b:d5:f4:b4:
96:45:4e:b5:ab:ec:45:05:01:c9:43:7b:a1:7e:56:a8:73:68:
4e:bd:1f:90:43:6c:f0:e4:9d:b0:27:fb:21:6b:a4:90:64:c3:
28:d4:cb:a3:0f:0b:3d:ab:af:1b:ee:f0:aa:19:ae:a4:37:24:
2f:f2:77:3a:40:f3:df:87:64:76:6b:a9:c5:4b:11:a8:78:d7:
dd:07:81:90:d3:93:c9:ff:d6:cb:53:36:a9:a7:39:2b:52:8f:
a2:ba:ba:54:0e:6e:52:8b:03:20:52:0c:50:21:4c:6b:43:92:
cf:bf:e3:a7:4d:b2:08:f2:92:b7:1d:20:e3:44:44:e8:16:5f:
7b:c7:12:a5:0f:f6:ac:bd:4e:ac:fe:44:32:93:80:e3:97:ce:
4c:bc:ff:5a:86:81:3e:3e:3e:f6:ce:4c:6d:bd:3d:a5:bf:38:
f3:9c:43:1d:8f:0d:d9:bb:23:bb:f6:60:10:09:bb:7e:f3:47:
ca:da:4a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:39:47 2025 by rpki-client