Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E74B3270B4D811F09FDD5B84DAE4EC9C.roa
File: E74B3270B4D811F09FDD5B84DAE4EC9C.roa (raw, json)
Hash identifier: cBZnsl0cKZ8Z59P+tDF+dOqn+xrV36UDZYuOHXbL4Gw=
Subject key identifier: 7D:31:31:2F:C2:A4:EC:21:0E:AB:A2:12:10:19:D7:89:72:89:01:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A65A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E74B3270B4D811F09FDD5B84DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 15:06:54 +0000
ROA not before: Wed 29 Oct 2025 15:06:49 +0000
ROA not after: Sat 06 Dec 2025 15:06:49 +0000
asID: 49505
IP address blocks: 154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.209.223.0/24 maxlen: 24
154.211.9.0/24 maxlen: 24
154.211.10.0/24 maxlen: 24
154.211.11.0/24 maxlen: 24
154.211.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108122 (0x1a65a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 15:06:49 2025 GMT
Not After : Dec 6 15:06:49 2025 GMT
Subject: CN=69022d8e-1d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:8e:d0:dc:cf:3e:20:b2:a0:6c:88:e5:a0:
d7:fe:4e:f0:4a:58:a9:d4:dc:6d:a1:75:e2:a5:5d:
9e:e0:f2:e1:76:51:d5:9c:98:10:a1:be:e9:75:9d:
d4:48:63:5e:f7:7e:71:b5:68:62:cb:05:ac:2e:da:
8c:dc:61:d1:56:ee:20:cd:e8:07:a9:ac:5d:f5:26:
8f:48:d5:fa:30:d8:1c:4f:28:8e:18:ef:ea:44:22:
c4:25:2a:e2:d4:1d:c7:e9:fe:6a:0a:1c:30:45:b3:
21:10:a6:b8:4f:a5:cc:de:d8:b0:21:8b:6a:ce:2e:
d7:f6:64:16:8b:c2:98:80:e7:c3:ef:50:cf:db:a5:
4c:60:3c:31:b9:6e:92:39:6b:ff:f9:82:fe:1f:3a:
54:d3:ed:ee:5f:55:22:92:bc:05:40:db:e3:35:8d:
b6:54:a7:b0:19:a3:7d:f8:34:5c:c4:a6:fc:dd:9f:
bb:ed:b7:24:9c:83:3c:cd:6a:91:6d:77:28:6e:73:
7f:85:7a:6c:7d:c1:5c:ce:83:2e:0d:de:38:f9:7b:
80:63:b8:89:e0:c8:0b:52:9e:23:50:dc:3d:e2:d8:
15:ba:17:59:0d:e3:f7:b9:38:13:dc:d4:f3:99:dc:
b5:3b:ac:ed:03:24:2e:19:4a:b7:37:f7:09:69:34:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:31:31:2F:C2:A4:EC:21:0E:AB:A2:12:10:19:D7:89:72:89:01:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E74B3270B4D811F09FDD5B84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.218.0-154.209.223.255
154.211.9.0-154.211.11.255
154.211.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:52:cd:93:37:6d:34:74:22:61:3d:bb:e1:a6:be:2e:5b:21:
ea:70:f6:6b:20:39:f1:73:be:33:cb:c2:8b:e4:74:4a:b4:f8:
4f:cd:6a:e4:3f:c3:f0:0f:13:41:9f:75:52:1e:e7:c7:9c:a0:
db:2f:f0:b0:86:2a:ab:00:74:bf:af:50:e1:49:7c:f4:cf:b0:
88:24:5b:9d:92:30:c5:da:2a:bc:0d:a9:e0:50:c2:83:7b:53:
2c:2d:5e:c7:cb:38:79:78:96:4b:00:3c:26:6f:c2:ac:4a:d6:
47:42:7b:e4:bc:b7:a5:e3:2c:35:fa:ae:db:71:3a:71:13:1d:
65:4a:bf:8f:5e:f2:7e:61:6a:cc:9c:a6:f2:5d:3d:c1:55:be:
94:7a:65:f9:20:e9:dc:a8:9f:bd:bc:6e:64:57:eb:76:d4:28:
a9:7d:70:6d:18:c7:d3:b0:07:f3:e7:f9:b0:e3:41:cd:72:f8:
b1:90:01:11:51:2f:e8:2f:a4:83:01:76:92:f5:65:ed:e0:0d:
4d:95:1a:c5:f2:df:f3:63:10:e7:7c:65:13:89:3c:d1:06:d7:
99:ef:f3:da:c0:ce:5a:c8:71:9c:e4:d7:cf:ad:40:a0:99:61:
65:2a:ab:ac:40:25:e8:93:ab:5a:c5:ec:6c:17:0c:05:00:b7:
2b:d5:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:11:40 2025 by rpki-client