Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAD05DE8B4E711F09444C2DEDAE4EC9C.roa
File: FAD05DE8B4E711F09444C2DEDAE4EC9C.roa (raw, json)
Hash identifier: aim2KwN2f974p+ppkD5B9/hSds64kHN6uLsA4fyeLh0=
Subject key identifier: 34:0D:08:54:67:1E:92:09:72:F9:EB:02:FB:2D:16:50:EE:EF:FB:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A680
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAD05DE8B4E711F09444C2DEDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 16:54:49 +0000
ROA not before: Wed 29 Oct 2025 16:54:42 +0000
ROA not after: Sat 06 Dec 2025 16:54:42 +0000
asID: 48031
IP address blocks: 154.218.20.0/24 maxlen: 24
154.218.21.0/24 maxlen: 24
154.218.23.0/24 maxlen: 24
154.218.24.0/24 maxlen: 24
154.222.207.0/24 maxlen: 24
154.222.208.0/24 maxlen: 24
154.222.209.0/24 maxlen: 24
154.222.210.0/24 maxlen: 24
154.222.211.0/24 maxlen: 24
154.222.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108160 (0x1a680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 16:54:42 2025 GMT
Not After : Dec 6 16:54:42 2025 GMT
Subject: CN=690246d9-74c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:6a:3e:8b:1b:f9:f6:62:50:1f:bd:30:bd:
88:1f:88:4b:7c:62:44:2b:26:ad:ef:6b:18:e1:87:
1b:6f:cc:6b:82:a2:15:dc:1f:e4:ed:2d:4c:9a:87:
17:dd:8d:8f:f3:4a:6d:d8:01:59:f7:f2:8b:80:24:
4b:99:d1:6f:0d:d7:6a:5d:c9:02:1e:bd:6f:d0:f6:
7e:8b:5f:0a:2b:a3:72:01:1a:e7:82:c0:b9:e0:02:
d7:31:fd:8b:fb:bc:70:4e:7a:23:0f:6c:76:55:90:
40:f0:23:14:cc:02:e6:76:56:4c:bf:3a:85:02:51:
5d:9c:99:0b:fc:60:f6:ef:99:80:27:e4:fe:7c:ed:
25:97:ef:e7:c4:7b:70:71:65:0c:b0:a7:3f:47:6a:
de:7e:cc:2c:34:d6:f9:79:5d:ac:6d:ad:ad:0f:5d:
4e:49:e8:27:86:b3:57:21:3b:0b:87:84:b8:ba:07:
ab:ea:ff:ab:97:c5:cb:7a:c0:de:5d:7e:b7:c4:a3:
66:32:24:bc:38:01:64:48:ca:35:49:02:b5:84:ce:
68:70:3f:c3:13:10:d5:37:ab:41:47:7a:7f:ff:f9:
95:f4:9a:c6:5c:f6:23:76:49:67:e5:58:e2:39:84:
1d:12:c2:54:90:71:c9:82:30:82:21:d3:89:ef:31:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0D:08:54:67:1E:92:09:72:F9:EB:02:FB:2D:16:50:EE:EF:FB:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAD05DE8B4E711F09444C2DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.20.0/23
154.218.23.0-154.218.24.255
154.222.207.0-154.222.212.255
Signature Algorithm: sha256WithRSAEncryption
bb:b2:e3:79:cd:56:4e:13:e9:a4:2b:2b:a9:23:ff:f3:23:7f:
f8:25:35:6b:01:a6:73:74:04:54:3d:5e:e1:32:d9:ed:cd:b2:
45:88:df:ae:e7:72:8d:6f:7b:b5:b5:85:51:08:bc:5a:25:ea:
79:a3:63:76:0f:b7:14:d6:5c:d9:05:74:9c:51:c0:f5:62:3c:
fa:d0:59:b4:64:ae:d2:b0:cc:91:b4:bb:6f:44:dc:c9:52:9b:
96:e1:11:44:fe:cf:0e:a9:1a:18:40:68:59:87:e0:d0:e7:13:
28:5e:3e:60:3c:bb:8f:85:6b:75:e4:4a:9d:a2:42:03:d1:b4:
73:57:66:cb:45:47:81:78:b7:3e:6b:95:7f:52:e1:f2:50:db:
70:35:dd:f2:42:40:5e:6d:d7:c0:f4:47:aa:35:25:ed:ac:a7:
81:60:a5:b9:ba:51:c5:b6:84:55:ef:12:fc:59:df:3a:78:ce:
f5:39:e8:5e:e0:7d:2c:f2:de:a0:7f:e4:89:6a:e5:44:7c:44:
fa:af:b1:d9:e0:2b:c6:c0:89:60:86:69:30:be:9d:08:d3:55:
92:85:f0:30:f3:5b:7a:56:33:ed:dc:93:0f:7a:1c:a2:d0:41:
0a:96:ee:92:57:a1:02:47:36:0c:1c:5e:32:32:93:c8:2e:40:
14:e2:2a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:22:54 2025 by rpki-client