Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BCDFDD2B95511F09A1CA1C3DAE4EC9C.roa
File: 5BCDFDD2B95511F09A1CA1C3DAE4EC9C.roa (raw, json)
Hash identifier: 6eoKiqow7moTR2wwRcNZJlNlrsVDDL/+2AXT7g5MzS8=
Subject key identifier: D5:59:DC:12:C9:C6:F1:8E:E5:12:78:F1:8A:4C:9C:73:C3:42:C4:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A763
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BCDFDD2B95511F09A1CA1C3DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 08:07:51 +0000
ROA not before: Tue 04 Nov 2025 08:07:44 +0000
ROA not after: Sat 06 Dec 2025 08:07:44 +0000
asID: 45194
IP address blocks: 154.84.246.0/24 maxlen: 24
154.84.247.0/24 maxlen: 24
154.84.248.0/24 maxlen: 24
154.84.249.0/24 maxlen: 24
154.84.250.0/24 maxlen: 24
154.84.251.0/24 maxlen: 24
154.84.252.0/24 maxlen: 24
154.84.253.0/24 maxlen: 24
154.84.254.0/24 maxlen: 24
154.84.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108387 (0x1a763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 08:07:44 2025 GMT
Not After : Dec 6 08:07:44 2025 GMT
Subject: CN=6909b457-d103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:a8:04:44:2a:10:ba:b8:0f:d3:50:3d:aa:
fe:cb:0f:86:c3:2b:56:55:54:1a:0a:fe:3d:34:f6:
4f:eb:96:2e:ee:aa:74:83:65:7b:26:91:aa:a6:15:
88:4e:cf:52:70:3d:b1:b4:2b:04:4c:1a:3c:38:b3:
83:57:bc:1a:da:b9:19:99:71:2a:9e:45:03:62:ab:
c1:d8:be:0a:4a:7c:5d:ac:8e:3a:dd:cf:e2:b8:54:
6a:c8:4e:43:44:72:8d:2f:1f:f9:13:8f:82:f2:a0:
8d:e6:09:8e:38:5d:51:33:93:96:c4:36:db:97:63:
55:43:a5:b2:1b:62:51:76:2e:d8:68:31:16:c4:8c:
b5:bc:22:78:c3:91:05:d0:bd:71:e2:ad:28:4d:a9:
50:cb:1e:1a:10:d0:37:12:94:c0:e2:d2:e4:c8:93:
10:aa:37:9a:0f:8f:c3:97:c8:12:91:7d:f2:7f:e6:
b4:69:86:a2:88:62:e8:b7:59:1b:be:72:a7:98:4a:
ff:d9:79:db:5d:f4:8e:fd:5b:c7:13:85:83:b4:4f:
9f:f8:c9:bd:67:26:d3:f5:03:c8:e1:0c:79:3e:52:
d5:bf:6a:2d:cc:89:c9:fb:c1:be:ff:fa:e9:ac:4d:
49:df:66:64:d3:fe:bd:fa:ad:6e:65:c4:38:55:8e:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:59:DC:12:C9:C6:F1:8E:E5:12:78:F1:8A:4C:9C:73:C3:42:C4:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BCDFDD2B95511F09A1CA1C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.246.0-154.84.255.255
Signature Algorithm: sha256WithRSAEncryption
4e:0d:56:19:36:d5:88:9e:fe:38:40:b2:cc:01:13:c4:08:7c:
d9:a6:3a:07:32:2c:39:87:00:d3:66:b9:9e:ae:7a:67:d3:e8:
26:f3:89:7b:c7:20:74:92:4a:99:12:8c:99:31:a8:98:fa:6c:
c1:5b:5b:25:7f:63:4e:29:73:bf:77:d7:43:b1:d2:c7:00:ba:
bb:bd:21:2e:81:94:15:82:37:0a:6a:cb:7f:10:b4:30:eb:23:
78:29:ff:88:88:59:a7:38:90:45:5c:0a:0e:e4:c2:d1:9b:44:
ca:9a:3e:cd:d6:c2:81:56:89:68:19:fd:58:39:67:70:55:05:
27:28:c3:c5:78:57:6d:c3:39:0f:55:17:05:91:67:ba:80:86:
26:d1:6b:a7:6f:d6:ed:c0:ef:c3:14:28:81:ba:38:64:fe:91:
65:87:d1:8a:81:91:12:3c:2d:8f:1a:e8:eb:70:c3:77:2a:aa:
2a:22:a7:cc:2c:13:f8:45:7a:0f:84:47:56:f8:c5:30:84:02:
5e:cf:ac:f5:c0:84:a9:72:37:74:ae:83:a7:7b:3f:4e:e3:f5:
0c:7f:18:d9:af:00:d2:ef:ad:43:c1:6c:e4:c2:67:bc:9b:53:
f4:a4:e0:85:9c:8e:fe:63:f6:1b:27:97:3d:aa:7d:0b:d4:62:
cd:a4:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:29:41 2025 by rpki-client