Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D7A0532B35611F0844A3581DAE4EC9C.roa
File: 4D7A0532B35611F0844A3581DAE4EC9C.roa (raw, json)
Hash identifier: Ktgar/3wS0N/EEopP4wII/82sO8cv3+IhRDJbfjH94c=
Subject key identifier: 9D:0F:DB:41:C6:25:CC:0A:CC:DC:E6:EE:65:A2:E5:9B:18:57:77:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A555
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D7A0532B35611F0844A3581DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 16:59:30 +0000
ROA not before: Mon 27 Oct 2025 16:59:25 +0000
ROA not after: Mon 01 Dec 2025 16:59:25 +0000
asID: 62240
IP address blocks: 154.195.106.0/24 maxlen: 24
154.195.107.0/24 maxlen: 24
154.195.109.0/24 maxlen: 24
154.195.110.0/24 maxlen: 24
154.195.114.0/24 maxlen: 24
154.195.115.0/24 maxlen: 24
154.195.119.0/24 maxlen: 24
154.196.83.0/24 maxlen: 24
154.196.84.0/24 maxlen: 24
154.196.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107861 (0x1a555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 16:59:25 2025 GMT
Not After : Dec 1 16:59:25 2025 GMT
Subject: CN=68ffa4f2-3c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:25:66:22:68:15:64:c0:47:72:bd:8a:21:
5d:45:ca:71:5b:df:63:8e:dd:8c:34:64:cd:ac:33:
ab:78:f5:b5:2c:6d:ec:b7:be:53:8f:e8:b4:2c:f6:
0a:d6:83:49:2e:22:33:b0:57:cd:11:53:bc:04:f2:
e1:ca:fb:b1:48:66:9d:a6:97:c6:13:84:e6:9c:9c:
47:4a:0a:4d:fc:13:6b:1d:a1:8f:78:2d:5e:a6:0c:
65:ba:94:d3:2e:f5:3f:57:44:ec:30:bb:4b:5d:6b:
f2:85:7e:0a:58:77:14:5a:4a:da:68:3c:80:79:27:
27:f3:fc:87:be:ba:0c:19:18:f2:b3:b7:4c:cd:27:
d1:44:7d:8e:e5:d5:55:cd:6a:b6:d1:7e:93:74:b1:
13:2f:6b:45:45:dd:1a:00:6d:6a:19:3f:6a:87:36:
4b:3f:74:04:49:90:cd:c6:1f:64:63:09:68:19:77:
de:21:f1:b0:f8:d8:ed:f4:d2:b4:70:dc:18:46:7f:
68:12:81:d7:ce:1b:fa:ab:c2:41:72:b4:f7:99:68:
34:64:86:eb:79:07:17:da:c5:26:fd:e1:dd:96:37:
e9:58:8f:1f:fb:22:28:38:c2:ea:cc:da:81:d4:a5:
b3:f3:22:b4:6c:6d:2a:fc:00:58:1f:e0:fa:be:63:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0F:DB:41:C6:25:CC:0A:CC:DC:E6:EE:65:A2:E5:9B:18:57:77:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D7A0532B35611F0844A3581DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.106.0/23
154.195.109.0-154.195.110.255
154.195.114.0/23
154.195.119.0/24
154.196.83.0-154.196.85.255
Signature Algorithm: sha256WithRSAEncryption
13:e8:80:63:ab:2c:f7:2f:ff:d6:53:9b:31:0c:97:28:b2:b0:
65:3f:26:81:40:4a:c5:48:5b:43:e2:55:94:0d:b9:9f:19:ba:
4a:75:a5:4b:fe:52:c8:23:bd:f4:e8:fd:63:9b:d3:e2:2c:44:
bf:ca:29:65:82:8c:a7:7d:6c:28:53:59:6d:5a:f7:c6:b4:9e:
97:43:7b:79:c7:73:b8:c0:ae:a3:30:a3:7f:48:ac:b7:d6:a9:
ee:e8:bb:22:26:b9:1b:aa:03:96:4e:fc:06:79:a7:7b:83:ba:
4b:62:ce:1a:5d:31:eb:df:83:30:23:9c:29:df:c7:ab:d0:d9:
7c:eb:89:9b:02:13:87:4a:98:c9:bc:e6:5a:08:dc:9f:50:f3:
7e:e3:28:4d:ea:73:29:99:85:5e:59:4b:a8:99:4b:dd:b1:1b:
56:00:e1:ea:c0:a1:1e:36:2e:d5:e2:a6:7d:a1:6a:fd:15:79:
4a:53:54:21:72:e6:96:c9:5d:0c:9d:e2:78:db:27:03:ed:ea:
21:59:dd:40:3e:46:db:f7:43:f8:f9:ac:c1:af:f3:a0:5a:c5:
e1:61:6c:07:6f:c7:5e:64:72:fd:86:c3:63:5b:11:7c:9b:b3:
1a:76:59:1f:b1:19:98:e3:e1:96:d0:8a:19:e9:29:b3:0f:f9:
91:d3:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:47 2025 by rpki-client