Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07BA7D82B4D311F08B46C6DCDAE4EC9C.roa
File: 07BA7D82B4D311F08B46C6DCDAE4EC9C.roa (raw, json)
Hash identifier: TBc7v5TlKxPQfyS9kJatnbBPXZD1/Bycdbd4Y3qwYsA=
Subject key identifier: 14:4F:29:70:BA:C6:61:04:4D:1A:6D:14:2F:FC:D5:54:F2:DA:23:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A64C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07BA7D82B4D311F08B46C6DCDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 14:24:51 +0000
ROA not before: Wed 29 Oct 2025 14:24:46 +0000
ROA not after: Sat 06 Dec 2025 14:24:46 +0000
asID: 44559
IP address blocks: 154.209.19.0/24 maxlen: 24
154.209.95.0/24 maxlen: 24
154.209.132.0/24 maxlen: 24
154.209.133.0/24 maxlen: 24
154.209.135.0/24 maxlen: 24
154.209.147.0/24 maxlen: 24
154.209.149.0/24 maxlen: 24
154.209.156.0/24 maxlen: 24
154.209.159.0/24 maxlen: 24
154.209.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108108 (0x1a64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 14:24:46 2025 GMT
Not After : Dec 6 14:24:46 2025 GMT
Subject: CN=690223b3-d5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:77:b1:a2:2f:ca:ab:fa:9f:97:4e:47:4e:
0e:c2:4a:e1:ec:27:c0:50:1a:34:91:e5:9b:ef:8d:
0c:74:ed:92:d1:0c:f2:51:f9:5c:45:eb:b2:88:c3:
59:2f:b8:ac:04:62:3a:31:e5:44:7e:39:fd:4a:53:
a4:71:71:9d:06:76:82:d2:9e:55:93:32:e3:22:8d:
47:c6:53:30:59:e4:07:1f:18:8b:6d:7f:ed:7d:ae:
78:3d:08:b3:23:57:df:23:6d:3f:fe:b3:48:ba:1b:
83:27:cd:95:d2:de:c1:34:d2:9f:fe:46:11:f9:16:
6a:89:6d:d3:f8:35:bf:bf:de:69:62:bb:79:fd:ce:
aa:27:a3:21:16:b3:42:8b:0c:4e:e0:cf:ad:50:c9:
f1:e6:d7:dc:b8:d4:ca:de:99:44:8d:cc:08:3c:8e:
7e:dd:22:00:57:ce:97:ae:78:25:b2:69:ff:7a:65:
c6:f9:6b:81:ea:53:fb:24:f5:51:0b:90:b0:79:8c:
2c:06:64:07:6c:73:7f:be:51:41:b6:22:d7:a7:63:
79:3b:47:08:56:0e:1d:d3:a3:a1:a8:6b:3f:bf:58:
00:4d:24:98:48:2c:94:45:b9:7e:0f:50:69:f3:c6:
40:6b:34:7d:fc:d9:98:3f:90:9a:fd:bc:6c:c4:d8:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4F:29:70:BA:C6:61:04:4D:1A:6D:14:2F:FC:D5:54:F2:DA:23:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07BA7D82B4D311F08B46C6DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.19.0/24
154.209.95.0/24
154.209.132.0/23
154.209.135.0/24
154.209.147.0/24
154.209.149.0/24
154.209.156.0/24
154.209.159.0/24
154.209.192.0/24
Signature Algorithm: sha256WithRSAEncryption
08:04:39:91:6b:ff:d3:e8:60:6b:5c:f3:b3:b1:bc:e7:dd:c1:
a1:a1:b6:7e:9d:71:72:e2:29:26:82:a9:49:e7:a6:fa:40:4b:
36:b5:36:c4:ce:fc:88:93:28:dd:3c:34:34:b4:a2:2b:ae:d5:
73:0a:c2:8b:36:83:79:5f:65:ff:aa:04:f3:f7:7e:23:2a:4e:
13:f2:b0:c6:24:b6:c0:64:17:54:8e:1a:3f:69:09:94:71:91:
b6:bf:2d:6c:0c:9c:4d:f2:c0:58:bf:30:f7:94:07:67:42:06:
c8:71:bb:41:e2:bf:02:0d:aa:5c:e6:23:d5:4b:d4:79:7f:79:
9b:2c:8f:e2:ae:77:d7:3c:83:d7:d8:64:8b:8f:96:e6:2a:ed:
eb:2f:e2:ad:a8:ab:13:65:29:25:d0:f1:5c:cd:d3:47:5c:51:
c8:f7:85:9b:1f:b1:2c:9d:c1:e2:5c:55:45:5b:ff:12:d4:2d:
f1:d2:ac:0e:9a:97:95:ec:c0:0d:2a:84:b8:71:ab:b4:48:66:
27:07:bb:e9:fb:48:a4:82:c4:4b:7f:78:f6:18:e9:61:12:73:
f2:3e:1b:46:ef:55:c6:28:24:c7:70:6d:f7:25:c6:85:b5:1f:
dc:98:2a:9a:8d:11:db:7a:30:50:9a:5c:1f:03:cb:59:17:64:
a5:56:3e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:29:42 2025 by rpki-client