Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C264EEB4F811F0BA7B1FC7DAE4EC9C.roa
File: C7C264EEB4F811F0BA7B1FC7DAE4EC9C.roa (raw, json)
Hash identifier: 9N1l0NpEzZbCGl0IDZ4X6mE0N3bEf5G1ZlsGiXp2J/U=
Subject key identifier: 6D:94:A5:BA:AD:45:36:68:88:6F:19:87:FB:DC:30:E5:A0:22:8A:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A697
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C264EEB4F811F0BA7B1FC7DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 18:55:13 +0000
ROA not before: Wed 29 Oct 2025 18:54:59 +0000
ROA not after: Sat 03 Jan 2026 18:54:59 +0000
asID: 63139
IP address blocks: 154.94.69.0/24 maxlen: 24
154.94.70.0/24 maxlen: 24
154.94.71.0/24 maxlen: 24
154.94.72.0/24 maxlen: 24
154.94.73.0/24 maxlen: 24
154.94.74.0/24 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.88.0/24 maxlen: 24
154.94.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108183 (0x1a697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 18:54:59 2025 GMT
Not After : Jan 3 18:54:59 2026 GMT
Subject: CN=69026311-a43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:6e:04:c1:c1:fb:69:d0:8f:11:ef:ad:d7:
45:5e:71:95:6f:9e:91:77:1c:d3:cc:e6:76:47:df:
9d:05:82:75:3f:da:5f:38:d8:dc:6d:be:3b:ef:36:
21:35:a4:76:08:87:12:42:70:05:ad:20:ad:2a:92:
7b:7b:c8:79:89:e7:c1:67:81:ce:88:c4:95:a5:9a:
f6:a2:1e:48:63:37:8a:fe:96:b4:c3:e4:70:55:fa:
14:10:c0:b1:03:b2:db:3e:d7:77:72:d1:86:74:e5:
75:4b:72:cc:f0:58:aa:ab:91:97:1c:33:33:dc:6c:
9c:8e:fe:d9:60:46:46:fa:77:75:9d:22:43:16:07:
ac:e9:77:37:9b:87:59:39:b7:cb:1d:a7:37:c5:9a:
30:82:b0:6f:6e:d5:24:c6:f0:64:cb:93:e5:ea:d9:
81:e9:d6:2c:00:aa:e8:c9:3a:7b:d7:68:05:c4:a5:
cb:cb:96:22:49:13:48:f6:ba:17:33:d3:90:a0:d6:
6c:48:8c:95:82:54:e1:7d:20:f4:8c:2f:51:d9:d8:
88:c3:85:fd:ac:50:78:dc:6d:b9:9f:f2:ab:1a:97:
ba:b1:0d:6f:fd:24:b2:bb:34:14:ed:68:7f:66:97:
10:e1:8e:3b:ed:bd:93:23:66:bf:6c:86:64:ea:86:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:94:A5:BA:AD:45:36:68:88:6F:19:87:FB:DC:30:E5:A0:22:8A:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C264EEB4F811F0BA7B1FC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.69.0-154.94.74.255
154.94.86.0-154.94.89.255
Signature Algorithm: sha256WithRSAEncryption
1f:0e:76:55:29:8b:ae:4a:4c:ac:47:78:76:68:1f:33:e9:81:
5e:bb:a9:1e:23:63:ed:93:66:31:18:b3:93:a0:4b:51:04:0f:
56:5b:a3:db:2f:8f:49:26:aa:b9:b1:8e:1c:d1:bf:c8:21:66:
0e:92:62:ca:82:ad:0e:78:18:a1:53:e4:7a:1b:6d:14:81:52:
65:6d:d2:53:e2:91:a0:12:f8:47:93:57:6d:59:d4:d3:de:9a:
a6:b7:97:05:6f:c8:8c:bf:99:63:fe:07:88:ab:4d:24:99:bc:
6a:db:4a:de:d3:26:c0:01:3d:de:4d:02:dc:51:b6:4e:2c:77:
c2:83:70:a3:bc:e9:93:4f:0e:de:8e:5d:5d:36:ae:a7:bf:8c:
84:71:42:8a:66:54:d9:0b:59:a1:78:14:78:89:c6:b7:b2:a4:
d1:f5:b6:b7:b7:75:4c:3a:42:4b:83:d7:87:54:a5:ff:85:70:
a5:58:df:b1:ce:fd:16:86:bf:c8:16:2c:8b:26:4a:ad:10:4c:
54:c8:d7:76:71:a5:05:15:92:23:a6:f6:53:7a:82:a3:d5:dd:
7e:41:a1:cd:1b:04:34:34:de:b9:f0:f1:d5:21:1c:13:20:1e:
37:ab:3b:5e:78:a3:fd:ff:5b:9f:3c:b7:29:2f:d7:f8:a1:29:
88:26:be:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:29:15 2025 by rpki-client