Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB4AA5CB40E11F0A2D6DB93DAE4EC9C.roa
File: EEB4AA5CB40E11F0A2D6DB93DAE4EC9C.roa (raw, json)
Hash identifier: 9EOO+WfKMYl0T7JEcQZEUr/ewu2jpjfI8+XaDuXoCfA=
Subject key identifier: B1:F9:6A:75:E9:A3:1C:E4:DE:D6:94:BD:A1:84:EC:48:7D:22:99:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A60D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB4AA5CB40E11F0A2D6DB93DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 15:01:08 +0000
ROA not before: Tue 28 Oct 2025 15:01:03 +0000
ROA not after: Mon 15 Dec 2025 15:01:03 +0000
asID: 63139
IP address blocks: 154.203.161.0/24 maxlen: 24
154.203.171.0/24 maxlen: 24
154.203.173.0/24 maxlen: 24
154.203.174.0/24 maxlen: 24
154.203.175.0/24 maxlen: 24
154.203.176.0/24 maxlen: 24
154.203.177.0/24 maxlen: 24
154.203.178.0/24 maxlen: 24
154.203.180.0/24 maxlen: 24
154.203.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108045 (0x1a60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 15:01:03 2025 GMT
Not After : Dec 15 15:01:03 2025 GMT
Subject: CN=6900dab4-9066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7a:31:35:3b:95:b7:82:e1:d8:d4:80:10:fd:
30:05:57:80:e3:fe:4a:22:98:62:d2:c5:ba:b1:96:
87:a2:9c:28:b8:dd:7a:65:d1:7d:ef:e2:d0:75:6a:
ac:78:4c:7c:07:e9:c9:ea:5f:75:0b:af:22:48:3c:
ad:c4:e0:29:41:76:9e:c8:a1:60:a9:5b:a9:f9:0c:
a8:2f:92:c7:f2:da:fd:51:37:a2:86:c4:dd:91:f0:
c3:34:0b:57:78:f1:98:c1:c3:98:b3:bc:67:e2:a3:
c0:df:70:27:ba:7f:43:74:3c:45:ba:12:87:d2:3f:
7f:10:df:b0:4c:0a:a9:ed:66:ce:77:01:2f:d2:4a:
65:1f:ce:fe:85:d0:a8:33:89:60:bf:00:21:32:8f:
00:94:23:70:a4:63:4f:07:11:ff:12:bd:7b:16:f9:
a1:76:3b:cd:72:1d:5a:30:bf:de:c0:36:4c:02:e0:
4d:42:53:d4:fb:bb:73:22:60:1c:fc:28:3a:86:b6:
ee:51:f1:5f:ab:02:26:34:6f:63:2a:5a:7d:df:00:
a6:ad:7e:b5:34:d2:26:af:b9:6e:c6:a2:71:1d:e6:
0f:f4:7a:74:24:a9:77:d5:32:84:98:74:11:1a:a2:
22:02:99:3e:c6:2f:c5:94:e8:48:1c:78:65:60:cb:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F9:6A:75:E9:A3:1C:E4:DE:D6:94:BD:A1:84:EC:48:7D:22:99:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB4AA5CB40E11F0A2D6DB93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.161.0/24
154.203.171.0/24
154.203.173.0-154.203.178.255
154.203.180.0/23
Signature Algorithm: sha256WithRSAEncryption
be:cf:e4:92:e2:3b:eb:06:10:ea:60:06:60:36:7d:0b:d9:52:
c6:a1:79:08:cc:ea:2a:a0:98:ab:2f:c8:65:d8:7d:01:31:ac:
f9:59:ef:45:ee:13:3a:b6:07:a4:4c:c6:a9:7b:44:69:27:58:
66:9c:47:86:f4:e0:67:10:a6:df:ed:f4:de:b3:eb:a6:ba:ea:
1c:26:39:3b:aa:2e:7f:42:7d:6b:d4:fe:f1:e8:f8:ff:c0:ee:
38:b0:29:6b:1e:8b:d8:76:e9:7c:29:f3:06:64:37:37:91:d0:
3a:04:f3:14:d3:11:2f:f4:2a:bf:77:1a:bd:2d:b9:18:67:3f:
76:9b:fc:e2:4d:41:d5:44:5d:a4:e7:85:8a:c4:4d:cb:c5:2b:
a0:c0:86:a6:75:a6:8a:9c:99:ae:8f:78:bf:0e:cd:f7:a7:2e:
48:02:e8:cd:36:17:51:37:b3:93:8c:25:aa:4a:3b:e5:dd:10:
e7:d5:b1:35:61:7e:c5:58:f0:e3:88:2e:65:d8:09:40:32:15:
02:24:29:43:82:1c:e2:33:ae:ed:8f:fc:99:2a:d9:e8:5d:bb:
09:45:9c:13:a5:43:6f:cd:ad:0c:6f:e9:46:8d:6b:23:27:39:
33:b9:6e:f2:1e:e0:f2:d7:cb:59:51:1e:76:7f:c8:8d:74:73:
bc:69:50:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:37 2025 by rpki-client