Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4EEF2D2B32E11F0AACE707CDAE4EC9C.roa
File: F4EEF2D2B32E11F0AACE707CDAE4EC9C.roa (raw, json)
Hash identifier: 3MMIE4xMXWYPWSFlZ3Tor2syw4JpMv7SQZ+fLNZEe68=
Subject key identifier: 77:29:97:AE:44:68:73:B3:2E:98:8F:80:D9:B8:77:D4:79:7D:F5:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A521
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4EEF2D2B32E11F0AACE707CDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 12:17:51 +0000
ROA not before: Mon 27 Oct 2025 12:17:46 +0000
ROA not after: Sat 29 Nov 2025 12:17:46 +0000
asID: 59187
IP address blocks: 154.221.32.0/22 maxlen: 24
154.221.32.0/23 maxlen: 24
154.221.32.0/24 maxlen: 24
154.221.33.0/24 maxlen: 24
154.221.34.0/23 maxlen: 24
154.221.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107809 (0x1a521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 12:17:46 2025 GMT
Not After : Nov 29 12:17:46 2025 GMT
Subject: CN=68ff62ef-9a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:de:4c:c5:e2:9a:63:5e:c2:41:19:70:c5:
c1:94:53:ae:dc:fb:d6:bd:1f:0e:fe:17:ec:f7:4a:
ae:1d:80:db:4b:28:9d:d5:c2:7e:8d:cb:18:ac:fc:
cd:25:fd:e4:b5:89:14:8b:5b:e2:46:77:1b:d7:b6:
b7:12:b5:c0:a0:72:23:d7:e1:fd:64:2c:30:1b:36:
b4:1b:30:25:9f:a5:1c:7b:27:22:b5:cf:c8:93:24:
91:04:f7:71:00:b2:f4:cb:cf:f8:83:67:2c:76:fd:
18:81:ac:ca:50:62:a7:c0:79:b5:8b:0b:04:de:a0:
8e:0e:65:36:6a:db:fe:43:11:32:8a:66:2e:aa:ad:
f7:54:2e:95:a2:c5:26:c6:16:c2:a4:63:59:d7:86:
55:ed:29:aa:00:b0:f4:b5:1f:91:b7:e9:22:56:00:
40:9a:ab:f7:a0:44:8b:e5:f5:e0:24:68:bd:75:b2:
f2:25:93:36:7d:9d:e2:24:ad:6f:b9:c5:0a:48:3a:
ee:e5:5f:04:75:02:9b:9a:d9:f2:df:89:4b:f9:79:
88:79:06:4c:cf:d2:e2:65:b7:90:23:38:16:d9:e4:
79:62:3a:a0:e6:20:b0:df:3f:37:2e:cd:24:64:99:
ce:c0:a8:6b:a5:65:80:14:fd:a1:e4:9a:29:8d:dc:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:29:97:AE:44:68:73:B3:2E:98:8F:80:D9:B8:77:D4:79:7D:F5:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4EEF2D2B32E11F0AACE707CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:3f:d6:dc:40:98:58:32:5a:84:f5:c1:8c:04:be:bc:87:28:
c0:f8:f3:70:d0:58:92:ed:14:eb:20:fb:01:7c:a0:51:37:31:
31:cc:e6:48:f8:41:60:48:e5:18:3c:cc:50:97:49:cc:c3:90:
9d:e6:41:bc:3f:97:0f:5b:c6:c2:f6:1a:a8:fc:76:e8:34:22:
93:f7:38:73:15:36:e2:99:e4:c5:f5:01:be:9d:6c:c3:89:68:
5c:32:1e:f2:9d:c1:fc:e2:0a:88:3f:16:cc:e3:e7:39:24:e3:
5c:d3:2e:c2:3d:bf:77:fe:d4:73:25:5e:68:99:cf:40:ad:07:
58:04:9b:6a:4c:0d:38:b2:7e:df:ed:15:03:19:b4:31:8e:59:
5f:db:4b:15:2d:81:64:ca:08:d9:79:e8:34:7c:a4:d3:32:7c:
c4:f8:ee:a7:34:83:ae:d2:f6:03:e7:19:11:fb:a3:d8:84:62:
02:e2:91:27:38:0f:b0:1c:c5:fb:49:79:34:07:b1:6e:93:4f:
37:58:08:07:1c:6e:e1:1b:52:17:40:6a:65:1f:6f:bc:77:d5:
03:96:39:8d:a9:15:83:82:9f:a2:30:69:5b:40:30:a9:ec:94:
1b:8e:76:57:ce:86:53:0b:5a:49:c0:b7:4b:d9:04:18:63:da:
30:a0:06:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:09 2025 by rpki-client