Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A7F09AB36C11F0AEF59C8BDAE4EC9C.roa
File: 97A7F09AB36C11F0AEF59C8BDAE4EC9C.roa (raw, json)
Hash identifier: /z+VsBSduNNuJxH0Yg2y8L8gPjv0w7zHm5iIrn+H+Qw=
Subject key identifier: D3:82:97:E2:FF:E4:CE:00:F8:DA:C8:20:C3:E7:E9:E2:8C:07:20:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A580
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A7F09AB36C11F0AEF59C8BDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 19:39:03 +0000
ROA not before: Mon 27 Oct 2025 19:38:57 +0000
ROA not after: Mon 01 Dec 2025 19:38:57 +0000
asID: 44559
IP address blocks: 154.203.226.0/24 maxlen: 24
154.203.227.0/24 maxlen: 24
154.203.228.0/24 maxlen: 24
154.203.229.0/24 maxlen: 24
154.203.250.0/24 maxlen: 24
154.205.28.0/24 maxlen: 24
154.205.29.0/24 maxlen: 24
154.205.241.0/24 maxlen: 24
154.205.242.0/24 maxlen: 24
154.205.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107904 (0x1a580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 19:38:57 2025 GMT
Not After : Dec 1 19:38:57 2025 GMT
Subject: CN=68ffca57-6464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9d:31:c2:24:de:2e:69:9e:54:d0:ec:55:65:
e6:37:e9:ae:46:fe:26:bc:27:2f:2f:b6:3f:b4:e5:
ed:5a:24:35:9c:bf:1e:5f:5b:d0:7a:8c:d8:da:c3:
f1:a3:1c:b3:f0:e5:4c:e0:d3:be:d7:26:c7:f3:78:
07:d5:85:0a:2c:9c:6c:5a:20:74:f3:3e:c3:fb:ca:
50:4f:d5:df:0e:75:9a:82:88:ca:b3:38:bd:53:a7:
8c:95:39:3e:17:c3:7c:84:29:0e:f3:b8:dd:68:35:
ff:1e:ef:c1:fd:89:60:19:49:f5:06:18:a4:78:90:
3f:11:5d:c9:c3:5a:9c:5a:8b:e9:33:96:8f:4b:bd:
6e:88:2e:8e:ac:ae:9d:ad:f9:e4:4b:78:b6:6d:58:
83:15:8a:dc:88:a1:57:41:65:31:a1:9a:4c:3c:02:
e2:a3:cc:bf:ac:17:8b:d9:6b:a7:e9:67:e1:23:f7:
a8:a1:f4:18:5b:6c:1a:cd:60:87:19:ad:e2:f8:c7:
79:17:c5:96:52:d1:30:42:bd:74:95:3a:ed:43:7d:
f6:20:7d:73:f8:d2:2b:8d:18:04:bf:13:b3:81:9b:
d6:4b:c9:f1:b0:47:e3:32:68:e2:d1:8b:10:6e:b7:
51:c5:a5:34:29:34:ed:c1:7f:76:50:1b:0c:73:55:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:82:97:E2:FF:E4:CE:00:F8:DA:C8:20:C3:E7:E9:E2:8C:07:20:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A7F09AB36C11F0AEF59C8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.226.0-154.203.229.255
154.203.250.0/24
154.205.28.0/23
154.205.241.0-154.205.243.255
Signature Algorithm: sha256WithRSAEncryption
19:eb:e0:c7:e9:12:29:e2:a8:47:6f:4e:be:b6:3e:92:4a:2e:
d6:41:cf:01:e7:12:53:c2:2f:9e:45:a5:e6:59:ad:14:61:2f:
28:ca:c8:66:ef:d1:cd:46:2c:88:b1:04:57:d1:52:59:8a:10:
72:3a:52:14:05:36:af:cc:eb:f5:0d:2a:73:62:61:68:17:be:
5f:25:87:78:25:9a:77:c4:d4:37:b9:f2:d2:1d:ca:46:45:c4:
ba:c3:1e:04:6e:9e:6b:f8:ee:f4:de:6f:e7:1b:3a:61:05:51:
82:56:ee:eb:39:9f:6f:38:8e:65:3d:bf:41:14:b4:f2:6e:f5:
21:64:0f:15:2d:5e:c3:bc:6e:db:fe:8c:2b:32:74:dd:ac:5f:
ba:ce:1b:d0:92:82:2f:6b:ba:c3:76:73:dc:f7:a2:0a:08:78:
99:67:ca:ff:e0:88:a1:d3:99:c3:68:67:dc:7f:3e:96:59:58:
33:44:5b:cb:1d:7d:a3:26:bf:b3:fb:4d:33:22:e0:cd:de:f0:
27:ae:0e:0c:ba:fe:85:21:4b:ee:9e:79:09:58:3b:ae:be:7d:
60:d2:9c:0e:a1:e6:72:7a:63:8e:a7:76:9a:02:60:d0:6c:fd:
a7:08:44:80:fa:b8:4f:4b:17:09:ec:c1:e1:b3:bd:25:b9:32:
e7:01:7e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:00 2025 by rpki-client