Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7ED0B00B4D411F0BF3B31E9DAE4EC9C.roa
File: C7ED0B00B4D411F0BF3B31E9DAE4EC9C.roa (raw, json)
Hash identifier: nOtaABbAU97SKcBircf0NiZ88/ayG5wfI8s5VWzVukI=
Subject key identifier: B8:30:DA:21:0B:B2:C1:BE:17:16:5D:BA:8C:F6:34:17:B9:D0:FE:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A650
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7ED0B00B4D411F0BF3B31E9DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 14:37:23 +0000
ROA not before: Wed 29 Oct 2025 14:37:18 +0000
ROA not after: Sat 06 Dec 2025 14:37:18 +0000
asID: 44559
IP address blocks: 154.209.193.0/24 maxlen: 24
154.209.194.0/24 maxlen: 24
154.218.27.0/24 maxlen: 24
154.219.193.0/24 maxlen: 24
154.219.194.0/24 maxlen: 24
154.219.197.0/24 maxlen: 24
154.219.200.0/24 maxlen: 24
154.219.204.0/24 maxlen: 24
154.219.205.0/24 maxlen: 24
154.219.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108112 (0x1a650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 14:37:18 2025 GMT
Not After : Dec 6 14:37:18 2025 GMT
Subject: CN=690226a3-fda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:5e:3e:1e:c3:f2:b5:41:69:65:ae:f2:0d:
70:35:56:37:3e:ac:9f:fa:25:6d:38:05:3b:50:53:
12:3a:b7:59:b1:d4:91:dc:56:5b:f5:13:f6:84:2a:
28:4b:35:b8:e5:db:df:0c:d3:4d:43:8f:8d:35:0a:
34:d4:cc:13:11:df:68:e3:77:38:40:81:d3:03:32:
4e:b9:a9:a6:fb:c6:0d:60:64:c6:6b:d2:7b:55:62:
7b:e2:00:7f:a1:46:4f:83:f5:61:35:d3:3e:84:e5:
68:2e:3d:f6:78:bd:5a:d9:4e:af:a4:ec:83:3e:ef:
03:b2:dd:b2:40:49:81:84:4d:41:39:b9:2d:b4:73:
53:a7:d3:fd:f4:ca:e7:77:2d:91:4f:bf:e0:ab:01:
71:74:e1:92:b2:7b:87:77:62:f3:69:dd:1d:e5:cc:
0f:f1:c2:87:6a:40:a0:98:c2:d7:2e:77:64:7e:13:
bf:c0:7f:a1:77:fa:d3:b0:fd:a5:43:b9:70:9f:d0:
6b:69:24:d7:9a:60:6d:32:d4:7c:05:ba:57:c9:77:
14:0f:2a:90:a2:84:7e:f8:be:b8:fd:dd:a7:de:73:
dc:d5:90:c6:59:e4:4c:85:cd:c4:04:eb:82:d1:ce:
33:0c:d8:c9:ea:8d:c8:49:78:c5:1b:3c:6d:e9:98:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:30:DA:21:0B:B2:C1:BE:17:16:5D:BA:8C:F6:34:17:B9:D0:FE:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7ED0B00B4D411F0BF3B31E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.193.0-154.209.194.255
154.218.27.0/24
154.219.193.0-154.219.194.255
154.219.197.0/24
154.219.200.0/24
154.219.204.0-154.219.206.255
Signature Algorithm: sha256WithRSAEncryption
63:77:2f:45:97:4c:91:21:93:fe:fb:5b:52:78:ab:37:eb:61:
97:af:91:25:f0:27:6f:3e:72:40:70:28:91:9e:e6:62:e5:35:
ce:78:b2:ee:0d:af:8d:5e:23:b4:c4:9a:2c:4d:a1:54:f2:90:
51:50:5b:24:5e:f6:23:29:a2:a7:72:4b:78:0b:a2:5e:00:eb:
a2:f4:07:e7:30:6e:30:a6:45:b8:d0:3b:6c:75:17:90:5b:de:
1f:ac:4d:5f:ff:af:e0:2d:e4:99:b3:89:3a:8d:6b:2c:88:26:
9f:b1:9c:41:b3:0a:17:97:49:41:99:99:fb:ce:e7:a0:8b:d2:
b6:fe:57:51:0f:38:d6:44:7e:80:b3:30:18:8b:9b:99:ab:7c:
89:56:b7:71:8a:8a:dd:fc:ef:7d:5d:39:f8:f5:c7:4c:b3:fa:
d1:61:68:7b:4c:d2:4c:56:02:83:65:54:80:9b:6b:9c:c2:63:
a0:05:ef:e8:4d:f3:c9:aa:13:b3:15:78:37:db:9f:bb:39:45:
a1:95:0e:5c:ac:09:93:86:0f:5e:3a:6f:d9:16:54:ae:c5:d2:
82:00:e5:61:aa:92:c9:55:75:8c:11:f5:65:70:1f:62:f0:c0:
66:ba:49:cf:9b:c2:76:9e:b6:aa:3b:6c:14:b9:89:55:90:a1:
29:d3:36:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:03 2025 by rpki-client