Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C30F0E1AB93611F0A5B9787ADAE4EC9C.roa
File: C30F0E1AB93611F0A5B9787ADAE4EC9C.roa (raw, json)
Hash identifier: BDRsi3z/A49dL4Sw1/P4nvf/mQXS3lyTUaAt7NsFy9A=
Subject key identifier: 29:35:AB:F9:24:0A:44:FB:93:A0:6C:02:61:F2:18:33:69:50:D8:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A74D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C30F0E1AB93611F0A5B9787ADAE4EC9C.roa
Signing time: Tue 04 Nov 2025 04:28:50 +0000
ROA not before: Tue 04 Nov 2025 04:28:44 +0000
ROA not after: Tue 09 Dec 2025 04:28:44 +0000
asID: 200373
IP address blocks: 154.82.150.0/24 maxlen: 24
154.86.112.0/24 maxlen: 24
154.86.113.0/24 maxlen: 24
154.86.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108365 (0x1a74d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 04:28:44 2025 GMT
Not After : Dec 9 04:28:44 2025 GMT
Subject: CN=69098102-2d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:fa:64:56:d5:de:37:15:90:12:84:f3:bd:
9f:c9:93:c3:d1:27:c3:ae:1c:17:88:00:1d:75:ab:
2d:8d:46:d1:eb:44:df:ee:7c:83:7d:11:ca:5c:7d:
9e:58:06:cc:10:c4:56:05:f7:cb:ba:d7:e7:03:c9:
dc:ac:a7:73:83:6e:1d:d7:33:a8:e5:f8:4f:50:80:
2a:69:00:8e:61:29:9f:a2:2f:e5:63:4a:43:53:6c:
59:90:42:1a:38:ff:2d:72:88:22:66:7a:25:6f:c5:
be:21:c3:7e:74:d9:db:a3:90:c7:d8:af:16:bb:24:
f1:6e:b4:14:a3:24:27:0a:3f:6f:5e:50:54:48:37:
32:24:6b:2b:27:b1:43:2b:e5:f8:a9:ac:a1:89:bc:
38:4b:18:60:db:55:46:32:89:f3:7d:f9:44:92:ba:
f0:7d:2d:9e:5e:09:56:28:be:91:7e:d8:ac:b3:c3:
b6:f8:be:70:5a:ff:71:1e:ce:a3:bc:78:4b:28:2d:
19:2c:7d:88:6c:53:07:36:60:38:74:1d:dc:2f:38:
45:e9:4c:50:06:b5:29:35:39:c1:e7:ea:bf:24:52:
e3:3c:81:a8:b0:2c:c7:e5:80:25:bc:4c:d7:ef:30:
b0:0b:41:b3:2d:85:8a:86:bd:9c:f4:51:bf:74:37:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:35:AB:F9:24:0A:44:FB:93:A0:6C:02:61:F2:18:33:69:50:D8:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C30F0E1AB93611F0A5B9787ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.150.0/24
154.86.112.0-154.86.114.255
Signature Algorithm: sha256WithRSAEncryption
56:75:fb:3b:5a:60:9d:4c:da:87:3d:25:9f:dc:77:f5:3d:9f:
56:27:e3:3a:c3:86:37:dc:8d:17:d8:eb:8a:0f:47:f3:ce:38:
d8:dd:03:33:3f:6a:cd:c7:eb:10:17:95:55:66:bb:f9:62:38:
d0:aa:e7:05:fe:5a:e4:a4:c4:f4:ad:91:e4:d5:34:b2:bc:c1:
b7:ea:79:01:72:93:73:54:9d:bd:08:92:4f:b7:d1:e0:d1:e3:
6b:54:85:be:61:77:f0:a9:b7:cb:d5:4d:9a:73:7b:43:4d:a0:
bf:be:ed:e8:fc:e6:9b:b9:6d:be:96:0a:6d:4c:2d:f0:83:7c:
4b:b5:a3:af:72:b3:7a:fe:15:62:d8:66:60:c8:fc:0f:ef:13:
42:76:36:94:bb:53:3e:ae:a6:fd:82:76:0b:bf:70:3a:fa:d0:
a9:6e:86:c2:89:33:fe:f4:c9:be:ae:f9:8c:85:96:6f:d9:1d:
19:42:7f:ea:5d:48:88:dd:58:29:b1:82:9b:95:d8:e3:d4:e2:
a2:20:8f:b8:c7:fb:5d:57:27:13:55:9d:9e:c5:8f:9b:6d:f4:
bc:85:ab:be:4c:c9:38:69:ed:94:9d:e5:e6:4c:0f:4e:7c:9b:
91:36:b0:d6:8b:4c:d8:95:36:76:7c:c0:11:30:d4:94:ec:cc:
4e:9e:62:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:47 2025 by rpki-client