Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF7020B8B40A11F0B8FEFD79DAE4EC9C.roa
File: BF7020B8B40A11F0B8FEFD79DAE4EC9C.roa (raw, json)
Hash identifier: /TDv3APnjooV9E82y4z1UUig1/AxUCREadPRUQmqnP0=
Subject key identifier: 29:8F:42:8B:49:25:F6:07:3B:25:17:CF:B9:DD:61:1E:A7:0E:B4:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A603
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF7020B8B40A11F0B8FEFD79DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 14:31:11 +0000
ROA not before: Tue 28 Oct 2025 14:31:06 +0000
ROA not after: Wed 17 Dec 2025 14:31:06 +0000
asID: 138915
IP address blocks: 154.206.60.0/23 maxlen: 24
154.206.62.0/23 maxlen: 24
154.206.64.0/24 maxlen: 24
154.206.65.0/24 maxlen: 24
154.206.66.0/24 maxlen: 24
154.206.67.0/24 maxlen: 24
154.206.68.0/23 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.72.0/23 maxlen: 24
154.206.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108035 (0x1a603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 14:31:06 2025 GMT
Not After : Dec 17 14:31:06 2025 GMT
Subject: CN=6900d3ae-e0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:e7:fe:10:90:dc:4d:06:f1:c9:e1:94:5f:
41:e3:c2:26:13:7f:e9:58:54:08:62:7d:10:4d:b4:
74:3e:42:78:7b:67:3b:fe:85:09:42:90:56:2f:cd:
56:fd:7f:70:cb:b0:5f:22:67:9e:cb:3a:85:eb:0f:
e7:21:48:33:f8:49:d6:be:1d:ce:ea:82:96:3e:14:
77:0e:29:9b:5f:22:28:19:27:a2:52:39:16:68:40:
bd:30:75:fd:fe:4f:71:6f:e4:23:b5:82:fd:fd:c9:
8f:f1:2b:f4:41:92:4d:fe:ae:43:0d:0f:9d:82:46:
80:0f:5f:0b:8d:54:b8:f3:c1:68:33:e7:5c:cd:e6:
17:22:97:bd:9c:09:fe:50:a5:5e:51:70:4f:9e:a7:
06:3b:5f:ba:81:db:36:e0:bd:89:01:e0:ff:89:3a:
68:54:9a:d7:91:c4:2b:fd:a3:ef:1e:99:90:96:08:
d5:fe:4d:c6:2e:65:09:be:5a:ea:39:25:a3:70:61:
8a:2f:f6:8c:72:38:26:9d:73:59:4f:54:7c:92:85:
9f:14:aa:e5:b4:c4:6a:8e:12:41:b6:cf:82:8e:a7:
38:8d:16:0a:af:3e:f6:3c:5f:02:2c:94:1b:51:aa:
84:86:3a:39:ce:67:e9:1c:19:91:de:be:30:99:e0:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8F:42:8B:49:25:F6:07:3B:25:17:CF:B9:DD:61:1E:A7:0E:B4:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF7020B8B40A11F0B8FEFD79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.60.0-154.206.73.255
154.206.79.0/24
Signature Algorithm: sha256WithRSAEncryption
67:54:4e:44:54:ba:28:6c:d6:fd:52:0f:24:62:78:33:19:81:
35:b2:f0:8d:ed:f7:bd:8a:9b:0f:8a:42:dc:a8:a9:c2:a8:0a:
43:ce:00:39:85:b2:7d:fd:ad:3a:61:3e:46:92:e9:b2:5e:a1:
52:10:ab:92:0e:76:26:68:3e:18:1d:98:73:f1:f1:10:1f:57:
e9:fb:02:75:78:f9:4c:71:98:a0:8f:fe:82:9f:e9:b8:6e:2c:
3d:b7:e5:02:1f:50:df:55:34:de:4a:67:52:58:79:ec:67:e9:
a1:ce:2c:43:a1:ec:e3:23:a9:d9:d9:91:d1:86:0b:0c:5d:55:
85:d3:07:63:29:23:97:8d:0c:ce:bb:d2:cb:86:48:0c:51:a9:
1c:43:6b:7b:92:8e:b9:00:1c:c4:46:ec:62:56:3d:d3:0e:20:
4b:2a:f4:87:2b:c7:7f:ac:69:06:1d:d6:11:1d:30:1c:55:d0:
58:4f:68:c8:bd:4e:3e:82:00:02:0a:96:1b:0f:d5:92:5e:6d:
b6:b8:3e:cb:03:49:75:76:ed:32:48:aa:32:84:8b:de:a3:2e:
60:af:a8:23:3d:6e:bf:70:d2:fc:c4:66:c9:f0:31:0c:8b:b8:
1b:dc:8e:b3:d7:42:d0:ce:2b:db:6f:46:e4:7b:ae:0a:fb:4e:
b8:03:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:09 2025 by rpki-client