Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084560DEB41311F09C0A5FACDAE4EC9C.roa
File: 084560DEB41311F09C0A5FACDAE4EC9C.roa (raw, json)
Hash identifier: cpchgoqDXfGAkypKRzFM/Pt8PMsXG1rWvgUaUxGD9n8=
Subject key identifier: 7F:8F:37:43:8D:1C:9A:81:58:6B:A9:7B:39:86:6E:BE:6F:16:D0:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A617
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084560DEB41311F09C0A5FACDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 15:30:29 +0000
ROA not before: Tue 28 Oct 2025 15:30:24 +0000
ROA not after: Mon 15 Dec 2025 15:30:24 +0000
asID: 138915
IP address blocks: 154.205.141.0/24 maxlen: 24
154.205.144.0/24 maxlen: 24
154.205.146.0/24 maxlen: 24
154.205.147.0/24 maxlen: 24
154.205.148.0/24 maxlen: 24
154.205.149.0/24 maxlen: 24
154.205.150.0/24 maxlen: 24
154.205.151.0/24 maxlen: 24
154.205.152.0/24 maxlen: 24
154.205.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108055 (0x1a617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 15:30:24 2025 GMT
Not After : Dec 15 15:30:24 2025 GMT
Subject: CN=6900e195-1e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:2e:69:49:8b:e0:87:fe:4e:e7:2a:81:81:
f6:38:79:8d:d1:6a:43:49:5c:42:8b:aa:c1:53:39:
d3:b4:08:3e:d5:73:62:fb:ec:e8:9a:cc:f0:77:56:
ff:4d:fc:d4:9b:09:3f:29:ee:31:3f:f7:2f:77:44:
59:97:b8:65:2d:e3:29:7b:e6:88:b1:d6:15:f7:cf:
c4:91:ca:f6:55:4f:bb:b3:15:87:8b:c1:69:f4:e1:
be:76:15:6a:0f:a1:84:e1:08:73:c8:53:48:41:aa:
09:03:5f:90:29:83:46:34:f9:e9:07:d3:b5:8a:7b:
7b:f8:26:ea:b4:c5:e6:43:79:33:ef:4a:4a:a8:3c:
59:21:1c:31:d7:c4:a9:7f:79:48:6b:74:98:cf:c2:
f5:bc:c6:83:a4:0b:d2:ab:c7:8e:e0:ab:86:5e:b2:
7a:e0:5f:e3:05:fb:b0:03:a4:3f:54:dd:a0:a2:13:
65:d7:86:49:37:d7:f1:54:f3:82:41:dd:bd:0f:ef:
27:41:b0:d6:74:d4:21:1a:8a:77:81:4e:56:79:7c:
0d:5b:6c:95:f6:de:19:ca:d0:5f:f2:03:e7:93:88:
1e:98:5b:16:b4:91:2e:91:46:db:ab:a9:b7:67:33:
c4:2a:8b:19:09:fb:ca:87:73:25:6d:6b:af:3b:3b:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8F:37:43:8D:1C:9A:81:58:6B:A9:7B:39:86:6E:BE:6F:16:D0:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084560DEB41311F09C0A5FACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.141.0/24
154.205.144.0/24
154.205.146.0-154.205.153.255
Signature Algorithm: sha256WithRSAEncryption
1f:35:37:e3:21:1c:19:29:76:b4:36:e8:39:10:4a:d7:92:2d:
8b:63:98:77:6b:39:2a:50:c4:ba:22:b3:56:fc:bd:0a:d8:f8:
e0:72:33:a1:14:4b:f2:1c:ee:b6:75:7b:a7:b6:10:13:de:38:
80:b9:5f:46:33:cb:fc:49:1c:ca:7e:c1:96:48:f5:08:2a:11:
cc:68:b0:a5:8a:2a:fa:f1:34:3c:06:de:a8:de:1e:5e:22:c2:
aa:de:86:bc:f8:a9:61:4e:59:91:08:f2:0c:90:aa:43:a3:32:
1b:3e:8a:cc:ba:f0:8b:3d:05:ba:7e:a7:bd:25:12:e7:1d:ae:
d5:4d:bc:0b:70:93:2f:75:47:65:20:dc:dd:25:d4:a2:da:15:
df:6b:be:cf:de:9b:72:ca:22:17:e6:1d:76:33:77:23:da:a1:
c2:ca:e2:9c:d1:49:1c:c6:84:03:93:2e:1b:43:48:c8:e0:eb:
1a:7e:37:d1:fd:f1:b0:76:d3:3e:a3:83:af:38:01:cc:b4:fd:
c9:66:15:76:70:3e:68:eb:dd:8c:e8:2b:c4:5a:4d:0f:95:98:
e4:d6:34:62:75:27:a4:5a:17:e3:2b:0e:0f:3d:23:05:78:2b:
95:e4:c4:fc:dd:f5:c9:ef:1f:6b:a9:e2:36:73:9c:3f:48:f3:
4a:39:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:37:42 2025 by rpki-client