Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0EB627AB33A11F083987BCDDAE4EC9C.roa
File: C0EB627AB33A11F083987BCDDAE4EC9C.roa (raw, json)
Hash identifier: Qs+6+btFDcPilzMS2K4TO+O7rOlp4DV8Cj7bYIHwQb8=
Subject key identifier: 34:85:BB:09:CB:26:12:66:3B:4E:E0:8B:44:36:59:7A:74:4C:7C:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A52D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0EB627AB33A11F083987BCDDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 13:42:18 +0000
ROA not before: Mon 27 Oct 2025 13:42:12 +0000
ROA not after: Sun 30 Nov 2025 13:42:12 +0000
asID: 401783
IP address blocks: 154.193.2.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107821 (0x1a52d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 13:42:12 2025 GMT
Not After : Nov 30 13:42:12 2025 GMT
Subject: CN=68ff76ba-1ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:93:d1:ae:43:40:a2:9a:57:94:1c:35:72:
a0:7d:3d:2d:6c:dc:1a:7f:5d:0d:30:4b:69:22:be:
64:cf:ae:cc:0f:30:47:18:19:ae:11:35:9c:42:96:
64:a0:62:43:32:c4:fa:63:28:5b:e9:a3:32:b4:b1:
5a:7e:eb:c5:7a:63:14:ea:d9:25:07:52:4d:f0:1a:
8f:9d:64:0e:43:cd:34:cd:ce:fc:b8:ae:ae:64:7e:
71:43:89:ee:10:99:22:3a:88:56:a1:0b:f6:66:63:
5c:40:37:98:1c:72:31:52:be:df:68:93:e1:13:6a:
5d:f3:6a:04:84:b7:e6:b8:fe:e7:e3:c4:aa:ce:93:
8c:c1:84:e0:e1:f2:a0:21:c3:de:f9:f7:fb:49:02:
73:aa:25:c7:c8:7e:df:46:6c:bb:75:ff:74:ab:c0:
09:64:38:46:aa:fe:72:45:2d:99:f2:aa:ae:5f:4d:
85:80:79:4b:da:f4:dd:3e:b8:d0:65:b6:17:5a:fd:
9e:f5:9e:b8:0d:f1:b4:b7:9c:cb:76:18:b6:f6:7c:
73:7e:ca:ed:1a:5c:52:e1:5b:eb:13:75:6c:9a:97:
0c:2e:fd:67:ee:fa:d1:d8:a4:1f:4b:1f:1f:fd:cb:
8e:5a:f8:5c:32:95:48:09:2d:1f:25:e5:c5:2b:e8:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:85:BB:09:CB:26:12:66:3B:4E:E0:8B:44:36:59:7A:74:4C:7C:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0EB627AB33A11F083987BCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.196.160.0/24
154.199.4.0/24
154.200.129.0-154.200.130.255
154.200.154.0/24
154.200.156.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:74:96:60:f9:4b:e0:16:57:38:6a:fd:e8:c2:de:b5:e1:ca:
94:25:f5:55:fa:7a:8c:85:b8:34:f6:11:39:1b:e1:5d:37:3d:
c8:c3:f3:7d:67:80:3d:69:2f:f6:70:6c:84:f6:9b:cc:fe:44:
d5:fe:bd:ba:f7:77:5a:f4:ac:f6:71:ed:29:b5:c5:05:e3:14:
89:f4:7c:7c:b0:f1:83:2c:87:aa:ca:39:49:23:81:f6:70:6c:
d1:a1:d6:40:18:5a:b6:c4:22:ee:3c:9f:a6:44:d8:be:00:54:
5b:e2:69:ac:41:df:06:36:6f:1a:85:a9:03:79:da:d3:ee:f5:
96:ba:32:6c:23:6e:eb:aa:59:d5:d9:7f:d3:d4:8d:a6:cb:8d:
27:ec:7f:02:78:19:d8:65:df:00:1d:e9:40:18:6d:7d:a1:80:
82:64:87:74:c7:14:a5:4b:3d:0c:93:16:e7:c8:37:7d:34:d6:
0b:93:df:0a:ec:d4:81:c0:b9:06:7f:28:6c:0f:e1:ba:bc:e2:
c0:80:c1:4d:62:1c:e4:17:a9:cd:bf:f9:8f:14:54:57:c5:42:
36:72:ce:91:2a:81:ed:b6:2d:b0:b9:47:7e:5f:7e:cc:c4:78:
df:1d:ba:7d:a4:b2:7c:f1:30:cc:c0:9a:8b:74:93:97:11:d1:
49:1b:8c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:35:00 2025 by rpki-client