Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56F3C79C9D4E11F087D498B4DAE4EC9C.roa
File: 56F3C79C9D4E11F087D498B4DAE4EC9C.roa (raw, json)
Hash identifier: 28rnoyea0/kZJia4hLa2s173Ch3eOPDQWUGSCT9sJPI=
Subject key identifier: 85:D4:A8:DA:C3:0F:D3:03:14:52:A5:55:2F:EC:FD:B5:B6:A0:8E:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A155
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56F3C79C9D4E11F087D498B4DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 16:07:04 +0000
ROA not before: Mon 29 Sep 2025 16:07:00 +0000
ROA not after: Fri 31 Oct 2025 16:07:00 +0000
asID: 62240
IP address blocks: 154.194.112.0/24 maxlen: 24
154.194.113.0/24 maxlen: 24
154.194.114.0/24 maxlen: 24
154.194.115.0/24 maxlen: 24
154.194.116.0/24 maxlen: 24
154.195.24.0/24 maxlen: 24
154.195.25.0/24 maxlen: 24
154.195.26.0/24 maxlen: 24
154.195.27.0/24 maxlen: 24
154.195.28.0/24 maxlen: 24
154.195.29.0/24 maxlen: 24
154.195.30.0/24 maxlen: 24
154.195.31.0/24 maxlen: 24
154.195.96.0/24 maxlen: 24
154.195.188.0/24 maxlen: 24
154.195.189.0/24 maxlen: 24
154.195.190.0/24 maxlen: 24
154.195.191.0/24 maxlen: 24
154.196.82.0/24 maxlen: 24
154.196.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106837 (0x1a155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 16:07:00 2025 GMT
Not After : Oct 31 16:07:00 2025 GMT
Subject: CN=68daaea8-e4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:86:f1:90:38:46:bb:62:0f:e0:d8:e0:ab:
60:7a:75:5d:23:03:62:d4:a7:2f:ad:b1:4c:5a:5c:
d1:9a:ed:5b:cd:9d:b2:18:fe:44:34:89:f8:63:bc:
f7:76:69:f7:55:93:7e:31:d2:79:ba:e9:a1:80:04:
16:4e:76:b5:7b:f8:97:31:2c:11:e6:87:aa:68:4e:
2b:00:9a:ee:f5:fa:d6:5f:fc:57:08:a1:3d:3a:a9:
76:32:91:1c:5d:91:c6:71:00:c5:5a:26:99:cb:58:
35:e8:7e:73:6c:03:af:9f:9b:8f:42:3d:28:df:9d:
4a:2c:2c:11:0a:49:77:fd:d0:74:11:9c:72:b6:2d:
5e:49:9d:7c:ca:5a:ec:5a:81:66:8a:1d:aa:2d:a4:
91:37:48:7f:93:44:05:66:4c:ae:09:d5:d0:d2:0c:
69:f4:a4:47:91:cd:11:57:da:0e:68:0b:8e:6f:c9:
14:d5:59:98:cc:a5:d9:ad:63:29:47:aa:77:2c:0e:
e3:81:0a:b2:bd:f4:2c:fe:70:c4:13:c6:07:5c:1f:
fc:e9:78:ef:d8:70:f9:bd:6c:0d:1e:5c:5c:2b:53:
d9:03:34:c7:79:7c:00:92:ee:97:cb:24:91:31:b3:
42:ce:f9:37:bc:89:da:27:e4:9e:b3:9a:f1:76:03:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D4:A8:DA:C3:0F:D3:03:14:52:A5:55:2F:EC:FD:B5:B6:A0:8E:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56F3C79C9D4E11F087D498B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.112.0-154.194.116.255
154.195.24.0/21
154.195.96.0/24
154.195.188.0/22
154.196.82.0/24
154.196.86.0/24
Signature Algorithm: sha256WithRSAEncryption
44:17:96:8a:c9:40:12:e7:f9:62:42:03:e2:df:ec:11:a6:3a:
5b:d4:11:bf:aa:dd:e7:00:4b:b4:c6:78:48:ce:f2:ed:7a:a2:
1c:c1:1f:08:2a:10:ca:51:a3:1d:44:ad:83:13:f6:a0:ce:52:
5b:2d:45:15:4a:92:f1:a8:97:3e:11:b2:15:fc:e6:93:22:57:
a5:d5:c4:3b:87:91:37:09:fb:f8:ee:c1:d7:25:24:1c:69:1b:
50:3b:d9:81:ab:71:4c:cb:c5:fa:b9:2c:cc:43:bf:47:94:c6:
ab:8f:df:04:1b:91:f9:1f:db:ce:a5:ac:4d:4f:6a:78:83:78:
16:ba:b8:71:07:e7:71:74:cf:65:90:98:12:f9:05:0a:5c:06:
ad:79:5f:bd:b8:6e:ac:ab:62:cf:06:66:99:27:9f:a7:08:ca:
72:4a:5e:53:2d:b9:32:3e:d5:9f:19:8f:6f:8e:81:1a:17:3b:
82:95:1d:a2:6e:e7:d4:26:cd:9c:84:3a:45:7b:1e:0f:dd:1d:
4b:9a:7d:dd:f8:76:18:75:0d:d6:51:21:2c:37:36:d4:4a:45:
a9:87:11:20:39:51:4b:42:4f:71:23:dd:d9:4f:22:8f:da:e7:
5c:d2:65:aa:0d:23:cc:c6:c7:73:06:f2:6f:b5:2a:7e:b1:32:
22:82:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:30 2025 by rpki-client