Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4769891A9F6511F096C844C8DAE4EC9C.roa
File: 4769891A9F6511F096C844C8DAE4EC9C.roa (raw, json)
Hash identifier: 0bGEbYqCBaaV8KTOAbJnDBAD8tOFcJVVYma0akxSJ24=
Subject key identifier: AD:19:A7:38:E7:F7:5F:DE:4F:47:46:B5:6D:B0:5C:18:58:60:0F:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4769891A9F6511F096C844C8DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 07:56:19 +0000
ROA not before: Thu 02 Oct 2025 07:56:14 +0000
ROA not after: Sat 08 Nov 2025 07:56:14 +0000
asID: 44559
IP address blocks: 154.219.71.0/24 maxlen: 24
154.219.72.0/24 maxlen: 24
154.219.73.0/24 maxlen: 24
154.219.74.0/24 maxlen: 24
154.219.75.0/24 maxlen: 24
154.219.76.0/24 maxlen: 24
154.219.77.0/24 maxlen: 24
154.219.78.0/24 maxlen: 24
154.219.79.0/24 maxlen: 24
154.219.80.0/24 maxlen: 24
154.219.81.0/24 maxlen: 24
154.219.82.0/24 maxlen: 24
154.219.83.0/24 maxlen: 24
154.219.84.0/24 maxlen: 24
154.219.85.0/24 maxlen: 24
154.219.86.0/24 maxlen: 24
154.219.87.0/24 maxlen: 24
154.219.88.0/24 maxlen: 24
154.219.89.0/24 maxlen: 24
154.219.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106996 (0x1a1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 2 07:56:14 2025 GMT
Not After : Nov 8 07:56:14 2025 GMT
Subject: CN=68de3023-2802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:36:83:23:08:85:9f:b5:70:71:07:0d:d1:
38:24:ee:ff:84:36:cc:9e:1b:05:11:9c:e7:7a:88:
d7:b7:53:94:28:08:63:6e:92:15:9d:2b:a0:fb:d0:
08:6e:ec:aa:4e:51:4f:ed:10:77:3f:0d:09:23:08:
73:fe:5e:c1:7e:7f:18:9b:6d:a8:d1:b9:58:2d:42:
34:0c:8b:fd:1e:6d:a8:70:17:38:f7:e1:ee:7d:45:
20:dd:81:eb:3a:fe:7c:7b:24:62:2f:66:9f:38:11:
e0:69:14:e3:46:be:2d:26:af:1c:90:82:5e:cd:a5:
b8:2b:35:50:fd:74:3c:18:4e:c6:4b:e6:c2:f2:b7:
df:21:f1:4d:e6:30:31:62:d7:85:c8:2e:86:55:10:
d9:3b:5e:2f:08:0a:27:e7:b4:b8:55:5d:1c:dd:dc:
db:8e:24:45:7a:5f:c7:b7:e3:58:98:b3:a7:79:5f:
b8:f5:99:72:e6:e7:f0:59:ff:de:f1:96:f5:ec:7a:
db:28:c8:d4:3c:9c:79:c1:b4:88:ce:a5:71:38:ae:
24:5c:66:04:90:dc:0a:2d:16:dd:55:3c:d0:4b:67:
1c:08:e3:08:63:9a:d8:ae:fd:9f:45:1c:d4:79:14:
df:33:32:50:43:57:bb:85:f7:75:76:61:30:5b:6b:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:19:A7:38:E7:F7:5F:DE:4F:47:46:B5:6D:B0:5C:18:58:60:0F:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4769891A9F6511F096C844C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.71.0-154.219.90.255
Signature Algorithm: sha256WithRSAEncryption
46:f5:54:d2:7d:d9:2d:cc:ef:9a:fb:2b:a8:21:c0:7e:ad:57:
5d:ca:f6:eb:53:7f:4d:04:77:01:06:56:b9:c7:64:e4:ca:bd:
69:59:bb:3f:d3:eb:2d:61:f9:b7:2a:82:12:a4:85:81:e3:05:
42:11:da:92:b5:2b:9c:32:c7:cb:c0:36:a9:5f:05:4d:8c:b7:
89:99:03:07:cc:92:22:32:8f:91:11:18:e8:25:3e:1f:2a:ae:
9f:e9:19:b9:c7:db:97:26:fa:f7:0d:48:28:8e:c9:2f:d4:32:
93:d3:a6:a9:e6:bc:1f:5d:97:c0:c4:c4:0b:ae:61:a4:3e:3a:
78:a3:49:a8:be:d4:60:62:48:09:e4:a8:9f:64:81:ad:ed:cc:
a5:71:94:52:9c:7e:90:e6:47:31:0b:e2:d8:f2:99:b6:21:e0:
d3:af:0c:87:71:6f:93:21:69:98:d7:d6:12:d6:92:8c:96:1b:
c7:3f:b0:67:87:c6:89:9f:db:78:75:36:48:ae:6e:77:4b:4c:
a3:80:e9:1b:56:50:3b:b8:45:af:28:9d:8b:56:e7:8c:6f:88:
b1:78:9e:05:5a:9e:cc:42:ea:66:39:50:24:f9:5c:8b:25:eb:
d8:6e:1c:b7:3f:cd:7f:d8:ac:d8:23:df:6b:65:7d:cc:24:e8:
d7:0f:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:58 2025 by rpki-client