Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7C6772B36211F094924FCCDAE4EC9C.roa
File: 5B7C6772B36211F094924FCCDAE4EC9C.roa (raw, json)
Hash identifier: iI1Ns/7TNokf1WPeJqVt2d+j27B4BnywdNe9XSmAu9M=
Subject key identifier: 66:71:F0:20:AD:6B:AC:A0:35:F7:C0:A1:EC:F8:78:E4:60:15:10:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A571
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7C6772B36211F094924FCCDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 18:25:47 +0000
ROA not before: Mon 27 Oct 2025 18:25:43 +0000
ROA not after: Mon 01 Dec 2025 18:25:43 +0000
asID: 62240
IP address blocks: 154.196.63.0/24 maxlen: 24
154.196.65.0/24 maxlen: 24
154.196.66.0/24 maxlen: 24
154.196.67.0/24 maxlen: 24
154.196.69.0/24 maxlen: 24
154.196.71.0/24 maxlen: 24
154.196.72.0/24 maxlen: 24
154.196.73.0/24 maxlen: 24
154.196.74.0/24 maxlen: 24
154.196.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107889 (0x1a571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 18:25:43 2025 GMT
Not After : Dec 1 18:25:43 2025 GMT
Subject: CN=68ffb92b-7430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:dd:33:d8:09:fd:e0:d8:13:b5:1d:7a:84:
1f:71:a2:18:df:4f:bc:08:a9:8a:0a:4e:87:41:64:
41:42:25:d0:e9:65:6c:81:37:e0:f3:8a:56:fe:07:
cd:31:7e:f4:f9:d7:10:e0:6c:7e:76:ff:e5:46:87:
3d:09:50:56:52:38:a3:de:47:2a:01:d8:30:b2:07:
f0:ed:b7:6c:32:9a:a5:80:ec:4b:7e:0c:33:d5:8b:
59:1d:54:7c:3c:f5:4d:ef:ce:65:ac:a8:08:61:f2:
3e:e0:de:1b:ef:3d:b4:bb:31:58:a6:d6:36:62:f1:
14:38:5a:4f:35:45:b0:30:f4:0f:6c:4d:b4:27:f6:
1a:3f:5c:98:2b:a8:00:ce:0d:e4:41:c4:26:8b:3a:
8e:7a:1a:25:b3:e5:37:52:9c:32:2b:a1:7a:eb:a7:
42:fa:bd:d9:93:e8:98:58:46:d0:5e:44:26:ac:d9:
de:10:84:86:02:05:87:f7:ee:f9:60:c1:a9:c3:c7:
d5:db:e6:34:af:f2:df:fa:61:a1:f8:55:82:49:36:
1a:87:21:50:98:81:56:14:c1:4a:f1:21:49:d2:36:
30:88:31:bf:d1:97:00:6b:de:c3:26:ca:16:1c:dd:
0f:25:d0:d9:91:b2:f9:31:ae:7b:d8:3b:b5:3d:fa:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:71:F0:20:AD:6B:AC:A0:35:F7:C0:A1:EC:F8:78:E4:60:15:10:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7C6772B36211F094924FCCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.63.0/24
154.196.65.0-154.196.67.255
154.196.69.0/24
154.196.71.0-154.196.75.255
Signature Algorithm: sha256WithRSAEncryption
3d:b2:9f:07:b3:35:2c:f7:4c:76:09:4c:66:aa:a8:00:74:5a:
96:5b:fa:17:ed:42:88:d0:8f:33:af:85:5b:a4:43:97:ed:d0:
89:3b:d4:ca:96:15:e5:99:25:b7:e8:c9:cc:c3:95:41:61:88:
f2:23:85:bd:e7:96:ae:7b:2a:ab:67:7c:91:96:7e:c0:b9:6d:
35:b7:de:58:ee:13:f6:18:db:5b:b0:0b:3b:f9:46:bb:ca:e0:
bc:02:87:61:37:c3:5e:0c:17:22:19:65:9d:c3:da:e6:b1:72:
27:cf:25:19:34:e6:3f:59:a7:2a:59:a5:32:88:f0:a6:65:20:
ca:75:5d:39:40:a1:43:e2:e9:d8:83:ed:f8:b5:5d:c0:77:3f:
79:46:1f:39:6b:3d:04:ad:f2:e3:7f:7c:42:39:04:5d:e6:07:
98:46:78:2c:7a:e2:ac:ac:a2:2f:2f:c0:0b:70:22:60:b5:71:
d8:b5:cd:a0:e9:8c:54:ee:74:39:f1:7e:83:a9:cb:3f:03:55:
c9:16:75:43:44:99:23:89:1c:2a:c3:66:f2:44:a6:58:0e:13:
ba:f1:b5:80:35:91:f5:aa:92:4a:6e:b8:02:7d:22:de:e5:aa:
f2:cd:30:18:b0:73:6a:d4:81:03:a3:89:ad:8e:c6:30:78:05:
8e:12:39:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:46 2025 by rpki-client