Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78BE293EB37F11F092960580DAE4EC9C.roa
File: 78BE293EB37F11F092960580DAE4EC9C.roa (raw, json)
Hash identifier: 0Sn6EUvyi8W9Ju3dDUfEqO1yS1kLOPse5qE0uYRIs70=
Subject key identifier: 03:B1:11:F2:FE:3E:FB:7C:78:B2:49:81:37:42:E9:BD:63:3F:E9:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A59A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78BE293EB37F11F092960580DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 21:54:12 +0000
ROA not before: Mon 27 Oct 2025 21:54:06 +0000
ROA not after: Tue 02 Dec 2025 21:54:06 +0000
asID: 214413
IP address blocks: 154.193.136.0/21 maxlen: 24
154.193.144.0/22 maxlen: 24
154.193.148.0/22 maxlen: 24
154.193.168.0/22 maxlen: 24
154.193.172.0/22 maxlen: 24
154.193.176.0/22 maxlen: 24
154.193.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107930 (0x1a59a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 21:54:06 2025 GMT
Not After : Dec 2 21:54:06 2025 GMT
Subject: CN=68ffea04-c167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:26:72:4b:82:c8:b9:0b:59:53:29:64:d1:
31:f1:62:a5:d3:ff:82:48:3d:5d:d2:85:41:1a:dd:
5e:3c:7d:e4:78:0f:a8:e7:23:52:0e:8f:9b:0f:34:
73:cb:11:80:10:92:58:2b:9a:71:58:85:12:1f:ee:
6b:70:67:39:c5:db:ac:7d:58:95:f4:e9:e1:52:bc:
8f:18:1f:43:2a:36:f9:f2:3e:6c:3e:a6:f2:53:16:
11:89:5c:8f:fa:03:1b:e7:66:61:d2:f3:cb:31:cc:
33:94:8c:3c:29:d9:d6:7c:ee:98:e0:f0:e0:f3:5b:
76:50:d4:78:b4:62:68:ec:ea:64:bd:a9:4f:68:86:
f2:60:40:7b:78:f3:ce:1b:f9:eb:0d:31:b5:26:4b:
dd:1e:82:9d:88:88:b2:cc:eb:4b:69:a0:a2:9f:90:
e2:26:86:fd:ef:0b:4a:c7:c3:d2:61:dc:0d:e4:f8:
15:4d:91:6c:71:e6:1f:86:a2:6d:90:6c:a6:68:06:
dc:7a:38:f7:62:df:3d:05:7a:5a:d6:e6:b7:b8:96:
0c:93:74:7e:87:54:5c:ea:ce:e0:6a:c2:2e:5b:35:
00:e2:ba:d4:83:56:15:d4:c9:0b:f3:69:16:71:7b:
48:2f:83:8a:ee:9e:3e:6c:ef:0e:e3:15:d6:5a:ab:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B1:11:F2:FE:3E:FB:7C:78:B2:49:81:37:42:E9:BD:63:3F:E9:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78BE293EB37F11F092960580DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.136.0-154.193.151.255
154.193.168.0-154.193.183.255
Signature Algorithm: sha256WithRSAEncryption
bd:9c:7a:2b:60:30:35:0d:ce:c0:02:fd:8f:84:d8:27:89:e8:
cc:09:cb:c6:c1:7e:bf:92:c5:6e:22:ba:cc:1f:b9:da:5e:7c:
35:6c:a8:11:3c:dd:7d:43:35:a7:19:39:29:02:04:f9:d2:cb:
4f:64:8b:86:61:e4:7d:05:0d:28:fc:89:24:62:e4:8e:40:15:
3d:2a:a1:4e:7b:4b:f5:7c:45:41:80:c8:7f:f9:0c:fe:d5:a8:
bc:1d:28:f9:b8:c0:c6:d5:e0:49:61:7a:dd:d0:48:52:65:e1:
ca:3b:5d:68:f9:1c:7e:83:0d:c9:59:06:88:a5:53:65:cb:17:
58:bb:3b:e1:79:2d:ed:44:e2:b8:9a:5a:1f:b5:80:f9:73:47:
05:a6:7d:30:35:41:73:d8:55:f5:6f:db:22:1a:b1:2f:26:7c:
a1:e7:72:64:47:88:4b:43:2e:41:90:b6:b6:c4:70:04:88:f4:
b1:0f:78:0f:26:f5:4c:b2:97:e8:24:a0:17:b4:f1:d1:22:c2:
7c:2e:91:2b:c8:a0:8c:9d:ba:74:77:a8:d2:e0:30:25:31:f5:
04:42:a5:ec:bf:67:60:08:70:df:e5:73:71:80:22:b9:90:73:
ed:e9:98:72:87:ca:9b:20:b7:0c:2a:62:58:a0:66:30:7b:d5:
53:40:fc:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:22:13 2025 by rpki-client