Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7285CF5CA5C111F099559989DAE4EC9C.roa
File: 7285CF5CA5C111F099559989DAE4EC9C.roa (raw, json)
Hash identifier: lNs8qTTRkQiWd30QALgQ3ZT4vH4qeFGev4A49dHjLTU=
Subject key identifier: 36:04:9F:F4:9C:D2:96:E5:A2:26:68:16:10:37:3B:23:2A:9F:19:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A341
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7285CF5CA5C111F099559989DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 10:11:12 +0000
ROA not before: Fri 10 Oct 2025 10:11:06 +0000
ROA not after: Mon 05 Oct 2026 10:11:06 +0000
asID: 211392
IP address blocks: 154.84.14.0/23 maxlen: 24
154.84.14.0/24 maxlen: 24
154.84.15.0/24 maxlen: 24
154.84.16.0/24 maxlen: 24
154.84.17.0/24 maxlen: 24
154.84.18.0/24 maxlen: 24
154.84.19.0/24 maxlen: 24
154.84.20.0/24 maxlen: 24
154.84.21.0/24 maxlen: 24
154.84.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107329 (0x1a341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 10:11:06 2025 GMT
Not After : Oct 5 10:11:06 2026 GMT
Subject: CN=68e8dbc0-c913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:49:48:45:cf:d6:8e:5d:11:8f:a2:b7:c9:
17:d4:88:ab:5f:ef:98:05:dc:6a:1c:50:a2:ed:a1:
4d:eb:a4:5b:07:da:9f:e7:8c:e3:fe:df:bc:0c:9d:
17:6d:92:53:de:f5:5a:ec:f8:53:88:0e:c8:77:b2:
1c:c5:35:fe:2f:24:60:a2:0a:e5:44:33:b1:84:40:
04:56:92:a9:ae:89:f4:28:44:2a:3c:95:c6:d7:c9:
b9:0c:89:88:aa:d8:78:02:9e:16:76:79:53:68:90:
18:0e:1b:43:8b:44:a4:ed:e1:78:a8:b9:28:45:12:
11:ee:f4:2f:d2:f1:57:8a:60:4a:e0:3c:d5:90:15:
49:ef:12:cf:b0:3a:11:e3:8a:1a:fa:98:a7:fc:a7:
8c:0c:3f:94:51:47:8b:83:ed:61:d9:04:8e:0a:4c:
e7:32:22:5d:08:cf:d3:3e:3e:6b:06:6d:e8:1a:e1:
22:97:c7:a1:75:53:c2:bf:61:7f:26:3f:ba:70:43:
5e:f8:4d:9a:d1:dd:09:01:97:2d:56:65:c0:cf:e4:
ea:6d:5f:72:67:79:80:7f:4e:0c:de:d9:69:30:95:
49:07:43:68:ea:f5:ff:d2:8f:cf:91:dd:3b:75:49:
9f:f0:0f:ae:a0:f5:2e:e4:c4:99:0d:2c:5e:0e:c6:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:04:9F:F4:9C:D2:96:E5:A2:26:68:16:10:37:3B:23:2A:9F:19:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7285CF5CA5C111F099559989DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.14.0-154.84.21.255
154.84.23.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e2:3a:84:e5:15:5f:fd:2f:30:f4:d9:9b:dd:d2:da:2b:8d:
c7:70:2d:04:42:69:89:e3:94:c1:cb:d3:8c:64:d3:1f:c4:10:
16:69:9f:93:2e:14:10:12:71:a0:00:55:b1:31:b2:5b:70:c2:
6c:05:e9:80:38:fd:8a:f5:8f:49:b8:87:f8:09:9e:40:43:d7:
01:3d:ba:1f:de:cb:cb:00:46:42:6f:b7:b0:1d:70:bf:b0:a5:
63:d8:35:7b:55:f9:09:2a:9a:66:30:15:54:16:aa:5c:c8:2d:
b9:a0:e2:67:61:db:bf:42:ab:71:97:0b:54:00:5f:b6:a5:b8:
52:86:dd:2e:cb:1c:49:42:09:70:1d:79:4b:ba:c2:ae:72:25:
ec:dc:43:f9:d7:b9:fa:36:b8:4c:e2:0e:38:ea:52:e8:b9:2e:
b1:0c:47:6f:41:99:af:2d:32:0f:1f:ad:20:29:6c:58:3d:50:
00:ed:2e:eb:4c:3f:84:0c:c3:1a:cd:97:06:ad:bd:de:73:c3:
cf:ea:2f:e3:5d:92:e1:57:5c:23:77:11:03:12:42:44:e0:d7:
1b:a9:af:a4:99:59:6e:07:bd:60:ff:f9:79:c6:ea:f8:1e:e9:
18:e4:62:1f:2e:f6:c2:c6:2b:7b:0c:b4:81:e5:31:4a:bb:8a:
0a:24:a1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:07 2025 by rpki-client