Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB39F7BEB95211F0A588C2B2DAE4EC9C.roa
File: CB39F7BEB95211F0A588C2B2DAE4EC9C.roa (raw, json)
Hash identifier: PDSZOJ3xhIlVXOzosloZ19IGMy+xjilDSPCOuuxJubk=
Subject key identifier: BE:1A:C8:D1:59:6F:6C:ED:B4:5D:02:80:04:B6:63:DF:48:49:25:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A75B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB39F7BEB95211F0A588C2B2DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 07:49:30 +0000
ROA not before: Tue 04 Nov 2025 07:49:25 +0000
ROA not after: Sat 06 Dec 2025 07:49:25 +0000
asID: 45194
IP address blocks: 154.84.193.0/24 maxlen: 24
154.84.225.0/24 maxlen: 24
154.84.226.0/24 maxlen: 24
154.84.227.0/24 maxlen: 24
154.84.228.0/24 maxlen: 24
154.84.229.0/24 maxlen: 24
154.84.230.0/24 maxlen: 24
154.84.231.0/24 maxlen: 24
154.84.232.0/24 maxlen: 24
154.84.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108379 (0x1a75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 07:49:25 2025 GMT
Not After : Dec 6 07:49:25 2025 GMT
Subject: CN=6909b00a-86e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:f0:5a:26:ee:29:1b:ce:aa:9a:bc:29:2f:
8c:54:51:c3:bb:39:ca:78:c3:88:79:90:60:ff:0b:
1c:65:18:e3:08:a8:5d:f4:7c:da:88:cc:0d:c8:a7:
ef:d0:40:5e:c1:33:0b:65:de:f6:b0:a6:b0:0c:e5:
1d:94:bc:75:a8:92:85:b9:05:83:f0:34:19:a7:91:
3c:72:5e:8b:4c:ee:2e:e2:e4:c2:98:ad:3a:0b:d8:
67:2c:e1:5c:35:ee:ab:53:1c:d6:9a:3f:42:2f:3a:
6d:14:73:ed:aa:e1:54:ed:2e:dd:5e:3f:e6:cc:4e:
1f:2e:c1:c5:4e:7a:10:42:ba:c5:f1:a0:2f:58:47:
4a:cf:97:23:aa:d5:2a:65:ac:25:31:6d:59:8e:c0:
38:d0:4c:bf:7a:b0:64:14:e0:23:20:a6:44:4e:c2:
be:ca:d6:21:f9:9d:10:12:9c:28:b9:0c:1b:49:b7:
7d:3a:07:4b:06:db:de:4d:de:4e:73:5b:04:89:c3:
5c:e7:0c:f6:e7:16:07:e6:f8:62:70:8c:87:99:7f:
46:12:36:6b:5a:96:53:b6:e8:5f:1f:67:38:64:32:
d0:1f:e0:79:99:02:bf:a8:ce:13:62:d1:a4:0a:8d:
fa:d2:42:65:08:9f:36:ae:e0:d0:8a:07:d8:2f:69:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1A:C8:D1:59:6F:6C:ED:B4:5D:02:80:04:B6:63:DF:48:49:25:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB39F7BEB95211F0A588C2B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.193.0/24
154.84.225.0-154.84.233.255
Signature Algorithm: sha256WithRSAEncryption
a2:75:fc:d5:58:f3:88:e3:08:e5:3e:28:87:55:32:b9:12:8d:
7b:d2:9a:77:ac:6e:9f:c7:29:f4:e7:b5:a4:74:ce:f7:93:66:
1e:68:03:d9:48:cf:1f:9e:d8:33:90:9c:cf:20:fa:82:36:40:
17:36:6f:d3:08:c6:9f:cd:da:af:d0:3a:bf:8a:30:98:37:12:
a2:73:de:bb:be:17:50:31:60:84:28:4d:05:1f:12:5c:75:66:
f2:58:26:a7:fa:cb:a1:19:04:76:16:ba:e7:a4:c5:42:47:d6:
17:b6:26:0a:e2:85:06:96:a8:ef:78:64:d0:31:7b:43:f3:97:
c0:19:58:60:5d:52:9a:94:20:b5:ed:d0:13:c7:e4:e0:76:55:
5b:bd:73:7f:0e:61:52:94:db:4f:95:4c:6a:6b:80:e8:14:bd:
b0:61:13:b1:3d:a1:b6:67:19:0b:b2:0e:b1:2f:9f:eb:e0:f0:
0c:38:a2:6e:6c:8a:39:f9:c8:0d:f1:70:58:af:dd:60:b0:16:
d1:35:b0:b1:d5:cd:ce:9b:05:5b:2e:a9:47:db:da:68:a6:e2:
f7:8e:8a:3b:da:ff:d4:b7:60:b4:97:22:98:25:31:fe:1f:bd:
fa:3c:29:4a:21:5e:19:55:7c:d1:6a:b0:2e:3c:dc:5e:38:9f:
c7:08:0f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:17 2025 by rpki-client