Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649FCB8AB38C11F09CD157D1DAE4EC9C.roa
File: 649FCB8AB38C11F09CD157D1DAE4EC9C.roa (raw, json)
Hash identifier: jyugrW7aQYJ4ewo+/W+7VVD6Dfpoq+bBDqOLjfpXvj0=
Subject key identifier: 93:65:1F:E8:E9:47:EF:A7:6B:3D:76:60:9E:97:6C:D9:D6:03:09:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649FCB8AB38C11F09CD157D1DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 23:26:42 +0000
ROA not before: Mon 27 Oct 2025 23:26:33 +0000
ROA not after: Sat 03 Jan 2026 23:26:33 +0000
asID: 138915
IP address blocks: 154.93.73.0/24 maxlen: 24
154.93.99.0/24 maxlen: 24
154.93.103.0/24 maxlen: 24
154.93.106.0/24 maxlen: 24
154.93.107.0/24 maxlen: 24
154.93.108.0/24 maxlen: 24
154.93.109.0/24 maxlen: 24
154.93.112.0/23 maxlen: 24
154.93.116.0/22 maxlen: 24
154.93.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107956 (0x1a5b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 23:26:33 2025 GMT
Not After : Jan 3 23:26:33 2026 GMT
Subject: CN=68ffffb2-173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:6e:3c:b9:59:f8:8a:69:43:7a:bb:cd:2c:
44:81:bd:fd:6e:29:1b:e5:fd:e9:c1:25:27:54:d8:
f5:56:97:30:59:13:ca:36:80:91:34:2d:61:33:df:
79:03:c5:5b:da:8d:75:a2:52:0a:b2:f3:d6:c3:a4:
51:5b:a5:53:72:04:c4:69:a8:81:4a:76:6d:39:da:
ec:5f:c3:de:ef:6c:82:4c:aa:22:2a:30:37:09:fd:
57:24:3f:61:a2:70:b8:0f:a9:81:d0:4f:cd:de:98:
56:6d:a0:e9:11:90:d3:7a:ba:7e:ce:44:63:49:ef:
ba:67:9b:e0:80:b5:85:96:98:5d:cf:8e:5c:e6:34:
79:de:11:14:2f:62:52:df:3d:1a:40:33:7d:c4:2e:
e8:49:57:35:2c:5d:a5:8d:31:1e:d2:49:92:92:25:
34:90:3a:cd:76:f6:02:60:dc:c9:3d:48:1f:48:5d:
3f:d1:bb:dc:75:68:68:c4:68:a2:07:a3:87:f2:c2:
77:d1:cf:b5:f1:e8:bb:b1:d7:8b:95:fa:4d:cd:2b:
74:c4:7c:46:b1:41:b6:bd:7c:23:b2:7f:91:4d:49:
ad:42:c7:16:3c:f7:99:ab:16:2e:34:0e:f8:77:83:
0c:eb:a2:00:7f:88:87:6d:81:fe:60:93:00:ad:69:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:65:1F:E8:E9:47:EF:A7:6B:3D:76:60:9E:97:6C:D9:D6:03:09:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649FCB8AB38C11F09CD157D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.73.0/24
154.93.99.0/24
154.93.103.0/24
154.93.106.0-154.93.109.255
154.93.112.0/23
154.93.116.0-154.93.120.255
Signature Algorithm: sha256WithRSAEncryption
9c:34:84:a5:12:57:18:33:54:81:84:de:72:15:7a:d5:6a:08:
aa:a3:c7:83:2f:06:05:93:2c:63:55:c6:3a:ed:e5:1d:f7:92:
bf:15:dc:4e:1c:6a:96:8e:94:2f:6a:4b:6f:2a:5c:66:b8:25:
17:00:2b:97:7c:71:aa:4f:1c:8f:74:ae:6c:fe:33:10:ef:f4:
17:5a:71:0d:c6:f8:54:3b:3d:8c:f1:a9:8a:89:85:a8:d3:51:
a6:62:a4:41:1a:22:db:49:7b:f9:47:58:89:9c:4c:9f:83:8f:
a6:46:ed:66:ba:d5:6b:3d:17:f7:5d:fc:a8:2b:ae:9d:08:df:
39:71:c7:0c:5e:20:e1:35:99:8b:ff:10:cd:28:98:95:e9:be:
08:a1:6a:7a:4e:b1:2d:34:f7:64:20:34:aa:0f:28:5d:19:01:
ec:d1:98:5d:65:ed:d4:16:36:f9:17:bb:c0:b7:dc:91:d9:84:
df:ac:f4:0d:19:b3:e3:f6:04:66:09:44:8b:38:f5:27:a6:14:
45:13:e9:55:fd:55:89:0f:3e:74:65:72:21:72:f4:01:3e:1e:
5f:9d:c4:7a:b9:7d:b7:fe:64:4d:22:92:af:97:da:fa:58:ef:
33:4b:a7:23:e6:2d:45:b0:6f:17:01:96:fc:ce:fe:96:48:83:
e8:7e:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:39:01 2025 by rpki-client