Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75EA7622B38411F0A840159EDAE4EC9C.roa
File: 75EA7622B38411F0A840159EDAE4EC9C.roa (raw, json)
Hash identifier: mLqZQDgZN9G8bHmXiHxRdiAqPar9g5VceBHq0Hx5veg=
Subject key identifier: E0:0F:D6:C8:99:6A:43:1F:D6:C9:76:90:FD:68:6F:D5:29:2D:4B:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75EA7622B38411F0A840159EDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 22:29:55 +0000
ROA not before: Mon 27 Oct 2025 22:29:50 +0000
ROA not after: Thu 04 Dec 2025 22:29:50 +0000
asID: 18779
IP address blocks: 154.203.51.0/24 maxlen: 24
154.203.52.0/22 maxlen: 24
154.203.56.0/22 maxlen: 24
154.203.60.0/23 maxlen: 24
154.203.62.0/24 maxlen: 24
154.206.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107938 (0x1a5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 22:29:50 2025 GMT
Not After : Dec 4 22:29:50 2025 GMT
Subject: CN=68fff263-e4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:01:6a:cf:c7:36:9f:58:bb:a7:12:0c:a8:
fa:8e:87:89:68:bc:77:d7:b5:75:0f:53:7c:e7:51:
94:49:57:9c:59:23:28:af:2f:48:0b:26:46:d3:f1:
11:a1:3a:d9:ab:22:96:ea:94:c8:d7:46:4d:8e:e3:
a9:31:b9:ab:a5:fa:b7:02:ce:bc:50:25:aa:a6:15:
a2:72:b2:b4:0a:bb:c2:a8:58:a5:57:17:de:3e:e1:
c0:31:94:f0:10:e1:e4:e4:d0:96:0f:11:4c:8b:4a:
d3:af:de:63:f4:b2:20:4e:93:47:56:36:f7:7c:28:
98:41:61:73:b2:4d:4f:09:3c:f2:5f:33:c7:41:b6:
03:5e:8b:14:0c:f0:58:a2:5b:d4:ea:85:ce:61:c6:
69:a0:85:ab:cb:82:0e:8f:48:a2:4e:5a:23:3c:40:
a4:ee:c8:8e:01:d3:1f:a5:b3:c3:96:de:6d:89:fa:
96:05:27:29:49:4b:fb:72:ff:48:98:ce:75:88:ab:
83:ab:9f:8a:7a:9f:f6:c7:3f:00:25:09:1f:e6:5c:
ef:db:c1:85:fa:49:6a:cd:df:d9:32:82:0e:52:b1:
9b:74:29:37:d8:e5:84:48:f9:7f:57:bd:eb:fa:54:
a2:a3:5e:1b:cf:37:61:f3:b7:9a:29:aa:0f:e6:4b:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0F:D6:C8:99:6A:43:1F:D6:C9:76:90:FD:68:6F:D5:29:2D:4B:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75EA7622B38411F0A840159EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.51.0-154.203.62.255
154.206.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:51:b4:e7:34:66:56:63:35:97:40:21:ff:be:de:8c:95:9e:
94:42:39:bb:51:cd:36:f7:35:68:1c:9b:91:24:07:4e:14:eb:
01:4c:2b:5c:33:b6:64:1a:98:80:ce:e9:c0:c4:59:ca:9a:4b:
56:39:db:72:b2:6f:14:ca:ea:f9:a8:23:b4:7a:c4:ff:50:04:
82:fd:dc:7e:36:56:7d:fd:52:a7:ab:0a:e7:03:a7:8c:64:12:
f3:92:8b:22:6e:c3:1f:20:34:5c:91:1a:be:aa:b8:14:44:cc:
fe:be:69:1f:48:13:56:89:3c:10:31:cc:b7:a0:3e:fa:ad:f8:
e7:d7:01:eb:f3:32:56:2a:3d:3c:a4:e2:b1:bf:76:bf:df:13:
5e:8a:dc:a5:e7:73:36:0c:07:82:70:24:95:eb:0f:09:0a:25:
0c:07:40:a9:34:34:94:08:56:8b:a1:2d:f9:0c:c0:25:b7:ef:
87:e0:f4:6a:6e:1c:89:a4:d4:64:b8:0a:7d:cf:5f:0b:f4:cf:
43:f1:84:c6:55:ce:0d:b0:5b:db:a5:36:37:7c:05:44:61:19:
dd:8a:ac:4a:a3:e9:b8:b9:c0:14:ab:7c:3d:c2:94:e0:71:90:
7d:d0:34:83:f9:d8:6d:76:8b:30:7a:08:0c:38:fb:2b:a8:1b:
7a:9f:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:12:36 2025 by rpki-client