Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7146D146B57911F0A305D579DAE4EC9C.roa
File: 7146D146B57911F0A305D579DAE4EC9C.roa (raw, json)
Hash identifier: mr427z6fj5yTJhouWqm5mp77hFkvu7YtKscYW9ROtdY=
Subject key identifier: 25:CC:97:FE:BF:A6:24:54:EC:85:A9:E0:AF:83:B8:50:6F:2F:44:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7146D146B57911F0A305D579DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 10:16:05 +0000
ROA not before: Thu 30 Oct 2025 10:16:00 +0000
ROA not after: Sat 03 Jan 2026 10:16:00 +0000
asID: 63139
IP address blocks: 154.94.90.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.92.0/24 maxlen: 24
154.94.93.0/24 maxlen: 24
154.94.96.0/24 maxlen: 24
154.94.97.0/24 maxlen: 24
154.94.98.0/24 maxlen: 24
154.94.99.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108207 (0x1a6af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 10:16:00 2025 GMT
Not After : Jan 3 10:16:00 2026 GMT
Subject: CN=69033ae5-701e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:62:c8:7d:2e:37:d4:3f:89:8b:84:03:34:
2b:16:55:c0:4c:48:45:68:80:38:03:63:ae:ee:e1:
02:0d:ec:0e:9e:31:32:c3:ed:0c:00:e1:7f:2f:ec:
18:b5:79:84:30:f9:6d:27:70:bb:56:1a:3c:16:68:
03:2c:b7:ea:6e:7a:d6:89:3c:87:4a:98:19:ec:b1:
1d:6a:28:f2:71:39:7e:79:cb:80:79:02:d1:1f:7b:
c8:13:90:70:75:53:35:ef:84:8a:b2:8e:bb:4a:ce:
cb:00:24:5b:07:95:b3:ee:a3:c6:75:8b:57:f7:58:
7d:8a:cf:de:fe:90:55:55:a1:77:c9:49:59:d8:21:
ce:7d:3e:63:1c:c4:32:ac:64:e0:97:c7:7d:b0:fa:
fc:7f:d3:eb:f6:de:ff:bd:e5:97:5f:c9:bc:48:98:
54:9f:29:c1:e3:cd:c9:cc:dc:05:18:8e:a3:86:ac:
0e:5a:ed:92:54:ed:96:d7:ee:ea:42:66:a5:e9:a5:
63:3d:02:c8:30:32:ba:6f:bc:b4:41:82:a2:c5:17:
75:7e:8b:c2:e6:0b:2c:25:2d:20:26:6d:f4:87:2d:
61:68:bf:8f:32:89:85:50:76:5d:9f:78:e4:3f:26:
63:ee:6c:f2:ed:09:22:62:a5:5a:a3:f0:5f:7e:13:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CC:97:FE:BF:A6:24:54:EC:85:A9:E0:AF:83:B8:50:6F:2F:44:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7146D146B57911F0A305D579DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.90.0-154.94.93.255
154.94.96.0-154.94.100.255
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5b:65:b4:e4:2d:3b:15:b9:e9:6b:a7:6b:77:57:73:d1:a6:
f5:7b:af:91:24:e4:5d:0e:14:45:6a:a7:47:5a:7e:cf:a8:03:
8b:47:97:fe:5f:76:ce:be:98:af:89:d6:0f:bd:56:f2:81:30:
92:ee:71:08:5d:f7:e9:4e:ad:8a:72:58:3d:1e:bd:da:cd:22:
0f:49:84:84:73:29:82:70:d0:d4:e5:03:f9:6e:8b:62:90:84:
e9:4a:21:f1:9b:96:b3:32:f4:b0:91:a1:70:43:dc:b4:24:bb:
62:67:28:7b:b4:1e:09:ae:8a:99:a3:90:df:c4:dd:43:e9:7d:
62:b1:75:19:e8:49:b2:85:14:5b:89:cc:a7:f4:34:14:f4:e6:
08:06:a8:4e:c6:a2:af:14:84:9d:64:0e:c1:a8:a2:29:37:44:
82:9a:cd:17:e5:90:f6:9a:86:bc:bc:cc:c3:90:cb:40:c0:14:
ce:8a:a5:87:90:c5:ad:60:40:ba:ba:a4:a9:fa:2a:e3:cb:44:
c1:09:7e:a2:8f:4e:b1:b0:45:dc:d4:d0:46:74:fa:01:e1:6d:
c6:20:48:fa:ff:75:ec:7b:0b:71:5f:4d:f7:a9:ae:49:96:ec:
74:42:3f:1f:0b:86:87:68:ed:cd:10:d7:4f:16:99:5f:96:97:
a8:8d:dc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:13:06 2025 by rpki-client