Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA7FF1DAB40311F0AA8A36CEDAE4EC9C.roa
File: FA7FF1DAB40311F0AA8A36CEDAE4EC9C.roa (raw, json)
Hash identifier: WSQvVkUyd6GJw6Nw6Mtlu4gf7uit/6PnJpHkZG9NHec=
Subject key identifier: DF:73:4F:66:83:36:6C:A4:9D:3A:79:7F:14:B5:BE:B5:97:8B:F1:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA7FF1DAB40311F0AA8A36CEDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 13:42:43 +0000
ROA not before: Tue 28 Oct 2025 13:42:38 +0000
ROA not after: Wed 10 Dec 2025 13:42:38 +0000
asID: 138915
IP address blocks: 154.223.62.0/23 maxlen: 24
154.223.64.0/24 maxlen: 24
154.223.65.0/24 maxlen: 24
154.223.66.0/23 maxlen: 24
154.223.68.0/23 maxlen: 24
154.223.70.0/23 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108020 (0x1a5f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:42:38 2025 GMT
Not After : Dec 10 13:42:38 2025 GMT
Subject: CN=6900c853-f9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:df:17:82:f7:99:22:38:04:68:26:19:e7:
28:ed:0e:75:03:da:3b:26:bf:46:9b:dc:ac:e8:73:
c9:4d:ff:ca:1c:ee:f4:7c:af:5d:fd:5c:8e:d8:5b:
47:26:76:76:19:b9:32:c0:07:23:92:90:42:00:a9:
26:8a:eb:0f:ec:84:c7:09:4c:63:df:72:7f:29:d8:
26:86:a9:a7:8b:39:57:90:0a:17:33:8f:c8:c3:50:
93:d6:7f:e2:61:0e:13:2e:49:e2:4d:4c:8a:4c:92:
67:23:a7:87:f3:25:9d:c8:97:15:fa:29:e5:4d:19:
85:15:cd:9f:1b:e5:6b:6a:39:e8:31:9c:cc:9a:43:
2b:75:20:8c:63:b5:80:85:8b:40:16:56:02:6e:bb:
7a:2f:43:05:68:2d:d4:98:cd:d8:f8:0d:51:ac:c7:
ca:a4:0e:6d:2a:e2:1f:79:ac:88:61:83:73:56:79:
dd:a3:e3:ed:50:05:ff:5c:6b:00:e7:41:e1:98:46:
f4:b7:1b:af:82:7a:fb:fc:e8:12:2b:ca:ac:e8:25:
de:d2:18:51:0a:8c:ed:d5:43:6c:2b:60:1e:17:f2:
ca:b1:9d:d3:21:ca:72:63:d9:30:eb:1e:db:46:19:
08:eb:0c:3e:6f:da:46:4b:24:4a:6a:3d:34:59:43:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:73:4F:66:83:36:6C:A4:9D:3A:79:7F:14:B5:BE:B5:97:8B:F1:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA7FF1DAB40311F0AA8A36CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.62.0-154.223.79.255
Signature Algorithm: sha256WithRSAEncryption
b6:87:7d:ba:c7:c4:6a:95:e7:5b:4a:e1:12:bd:ed:4d:c2:bb:
f9:eb:70:ff:df:4b:1d:72:55:c5:68:6f:f6:b8:7c:f9:02:df:
8c:f9:cb:06:4d:0e:f3:6a:f9:90:58:55:61:b4:0f:d6:41:ed:
5c:ba:5c:d0:fb:39:f4:19:99:70:d8:f9:cd:21:6b:56:72:2f:
78:65:61:76:ab:6d:0e:53:0c:1d:64:f6:37:3d:77:ab:70:90:
74:6e:9e:9c:4c:43:75:17:1b:bb:64:75:6e:95:95:c1:5e:f7:
e7:ca:ef:b0:c2:af:78:e7:86:88:1a:03:33:2b:43:e4:d1:be:
1a:68:f1:a0:bf:05:14:7a:72:7c:9b:7d:fd:f6:0b:7e:7f:51:
1d:b7:fc:24:84:ec:af:69:ab:bb:55:ee:55:9b:ae:f1:4c:1f:
5f:d9:c6:48:f3:36:10:92:78:aa:0c:7d:2a:a1:f7:7c:84:4b:
d8:62:a1:92:d5:63:fd:a5:07:50:09:ea:7e:f8:da:31:9c:a3:
be:9c:23:7c:84:f2:e1:2b:f5:98:ba:61:df:72:74:a2:e4:37:
2c:59:27:eb:20:83:c6:24:0f:62:d5:aa:27:a9:06:13:13:da:
69:00:d1:d0:e5:67:fc:ce:17:76:d5:cc:b4:39:5a:b1:59:2d:
37:41:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:38:21 2025 by rpki-client