Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D0F065AB38B11F0A1598AC9DAE4EC9C.roa
File: 7D0F065AB38B11F0A1598AC9DAE4EC9C.roa (raw, json)
Hash identifier: 9+eaJM8dSSsx57wKRAuXWvDHPOclRN4wdrpQjzosj9c=
Subject key identifier: 64:36:18:01:E4:06:FF:31:47:28:0D:64:B0:9E:40:A1:12:76:94:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D0F065AB38B11F0A1598AC9DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 23:20:13 +0000
ROA not before: Mon 27 Oct 2025 23:20:08 +0000
ROA not after: Sat 03 Jan 2026 23:20:08 +0000
asID: 138915
IP address blocks: 154.93.34.0/23 maxlen: 24
154.93.36.0/23 maxlen: 24
154.93.38.0/23 maxlen: 24
154.93.51.0/24 maxlen: 24
154.93.72.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.96.0/24 maxlen: 24
154.93.97.0/24 maxlen: 24
154.93.98.0/24 maxlen: 24
154.93.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107954 (0x1a5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 23:20:08 2025 GMT
Not After : Jan 3 23:20:08 2026 GMT
Subject: CN=68fffe2d-5f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:6f:cb:8c:93:83:74:81:a9:ce:83:a6:94:
7a:76:e7:dc:8c:f4:04:e4:52:f2:68:72:43:ef:0b:
06:16:e3:20:d8:2f:5b:62:3c:d4:2c:69:a6:19:7b:
85:93:c8:ca:b8:36:17:04:29:38:74:f9:74:5f:3b:
91:7e:94:ad:12:97:1f:f3:c3:38:f3:ae:27:10:be:
b6:5b:b2:c6:7d:75:b3:be:99:b7:25:e3:68:68:d8:
11:56:3b:e0:03:b3:e3:15:28:a0:ab:ce:40:3b:e7:
47:b1:c6:c4:74:2a:de:91:f9:26:28:4a:8e:fe:b7:
f3:27:28:e3:93:b0:c8:36:29:a7:1b:fb:7c:c8:ab:
8b:61:05:9c:37:9f:1c:6b:d1:1b:6f:3d:d0:87:5c:
18:c9:70:06:19:4f:34:b8:e6:9a:a1:b7:6a:2f:14:
67:cf:db:66:3d:ad:bf:bf:fa:39:99:e4:27:13:23:
31:fd:13:63:9b:0c:e9:a0:c2:14:45:4e:fe:70:cf:
ca:b2:e7:18:4f:b3:ef:21:2c:4b:92:d2:a9:af:7c:
b0:78:e4:51:48:14:ab:fd:d4:ab:44:32:54:45:14:
34:03:0c:a5:40:6e:47:f1:25:e0:c4:54:c2:6c:88:
d3:48:b4:80:55:c5:a7:b4:33:99:0d:39:d6:c4:67:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:36:18:01:E4:06:FF:31:47:28:0D:64:B0:9E:40:A1:12:76:94:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D0F065AB38B11F0A1598AC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.34.0-154.93.39.255
154.93.51.0/24
154.93.72.0/24
154.93.74.0/24
154.93.96.0-154.93.98.255
154.93.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:aa:f5:cb:93:62:4c:02:de:a6:39:f3:8f:7f:1a:55:16:6c:
2e:07:a3:4b:e4:89:ec:b2:19:ea:4b:c0:c7:3e:53:24:34:f8:
a8:d3:51:d6:c9:e7:15:74:e3:70:e9:7d:9d:cc:c6:3b:18:62:
1f:c5:24:89:a6:cf:76:6d:25:61:99:cd:8d:d6:d2:f7:b4:ba:
f6:4e:b8:bd:05:b3:2d:b2:cf:4c:f3:10:7a:4c:5b:0c:de:c5:
de:74:f3:26:c5:50:91:61:1f:f3:dd:d9:c2:72:d3:8e:e8:24:
3b:7d:ba:22:30:5a:8e:f8:cb:f7:9a:51:7e:9d:c1:7b:0b:5b:
31:7e:1f:0a:41:35:b1:b6:84:47:34:78:26:a5:a7:12:68:f3:
c9:5e:4e:09:85:6b:57:5b:64:ee:49:93:c0:2b:16:9e:ee:ac:
2d:5a:4d:89:1b:39:50:2c:1a:4d:56:5b:ab:78:ac:ed:4f:65:
84:d5:46:1f:20:40:60:78:fe:f7:ca:33:46:9f:fd:98:61:2d:
fe:63:b0:cd:92:75:1a:d0:06:74:12:6f:b1:e1:bd:11:d4:f9:
d2:e0:1b:4c:b5:2c:c2:cf:01:02:ba:af:c0:c0:68:30:bd:ba:
d1:c1:2d:7e:2c:95:3b:93:09:94:02:ea:33:12:c2:c9:e4:fd:
7f:ab:ab:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:38:00 2025 by rpki-client