Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5644A968B38511F0973E34A6DAE4EC9C.roa
File: 5644A968B38511F0973E34A6DAE4EC9C.roa (raw, json)
Hash identifier: KqRqPvB6VqHH847UNcerwgz1obk63MHBHag41J/S2Ug=
Subject key identifier: 45:5C:72:14:9D:25:24:E8:13:0F:34:9C:B5:61:8A:B8:92:F8:88:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5644A968B38511F0973E34A6DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 22:36:11 +0000
ROA not before: Mon 27 Oct 2025 22:36:03 +0000
ROA not after: Sat 03 Jan 2026 22:36:03 +0000
asID: 136907
IP address blocks: 154.93.100.0/23 maxlen: 24
154.93.104.0/23 maxlen: 24
154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107940 (0x1a5a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 22:36:03 2025 GMT
Not After : Jan 3 22:36:03 2026 GMT
Subject: CN=68fff3db-9421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:1a:e3:74:82:84:53:32:b0:5c:04:6f:e1:
73:d0:e7:f4:41:52:5a:1f:07:0b:25:46:ae:18:d9:
84:85:42:f3:4b:00:6e:06:ce:1f:bb:38:46:93:99:
a6:24:17:2e:bb:0f:34:cd:86:be:00:90:bb:0a:f2:
87:fb:5d:3c:61:ab:25:d3:f5:90:7f:5c:c0:cf:e9:
9e:36:2c:6e:ad:29:dd:21:ec:e0:42:e2:6a:79:0d:
a7:a4:ec:2b:30:7f:a9:e3:af:ac:88:7a:e9:f0:0e:
bd:d8:88:50:24:8b:57:83:95:75:94:f9:d9:54:33:
0f:4a:5a:8d:22:a1:e6:ed:ca:fc:5d:9c:50:8e:84:
2e:8d:76:1c:53:ab:14:9f:3c:44:aa:84:a1:58:20:
24:47:da:94:6f:35:81:35:bf:3f:c0:7c:7d:49:9b:
b8:48:46:9b:08:0a:7a:cf:05:56:5d:37:c5:b5:49:
0a:09:8e:86:5c:33:39:fb:3b:f0:99:3d:c2:9b:1a:
29:03:0c:2d:19:fd:f0:9f:b6:08:b8:06:74:31:42:
0b:a0:5b:f5:d9:e2:df:40:20:8a:2b:fc:b0:ff:49:
e3:09:5d:11:db:bd:6c:d9:45:82:7f:45:e9:8e:12:
0a:86:f0:2e:e1:b3:e0:fd:7e:f9:dc:f0:c2:58:4e:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5C:72:14:9D:25:24:E8:13:0F:34:9C:B5:61:8A:B8:92:F8:88:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5644A968B38511F0973E34A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.100.0/23
154.93.104.0/23
154.95.72.0/22
154.95.96.0-154.95.121.255
Signature Algorithm: sha256WithRSAEncryption
8a:1f:55:c3:e7:b4:08:0d:66:fa:e6:6e:78:15:bb:32:8d:8d:
b5:23:a2:61:89:e6:bc:5a:91:04:a8:39:76:c0:aa:a4:ce:43:
9e:0a:e8:cf:f8:6b:98:b7:c2:6a:77:6c:73:34:4d:fb:b3:49:
17:c1:8a:7d:41:87:d7:82:56:ce:7e:fb:dc:6d:55:f7:6d:6c:
7b:d7:ed:90:e4:83:91:28:8f:74:60:65:9e:05:86:d7:72:04:
dc:ca:e6:b0:c6:68:83:a5:3f:e7:af:32:7e:48:6a:41:da:67:
3a:ce:16:6d:70:78:91:69:4e:7b:a2:ee:49:84:c9:d7:96:1e:
93:f9:06:ad:cb:07:85:37:72:00:d8:58:d6:f0:c6:11:20:90:
7d:fa:11:fa:ec:74:70:3c:a4:df:57:99:44:ef:2f:15:cf:80:
c3:b7:90:59:2d:91:49:94:a9:8f:36:88:60:d6:5e:1a:84:a4:
5f:a1:a8:de:15:93:4d:aa:5f:e3:dc:c4:f6:35:02:26:3e:ee:
f7:b8:01:24:a1:96:96:65:d3:8f:4a:68:b5:34:63:dd:b0:9b:
75:b2:bb:93:f6:91:6f:3a:6a:05:95:b9:c5:2e:f4:94:e2:49:
06:e6:75:27:e9:16:0a:44:6c:15:e9:d5:b5:91:db:1d:4e:87:
47:17:b4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:37:26 2025 by rpki-client