Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72BD352AB8B111F0A41BBEB4DAE4EC9C.roa
File: 72BD352AB8B111F0A41BBEB4DAE4EC9C.roa (raw, json)
Hash identifier: CAtyavvzl7cE21MXdkiM3HhFPXxEjioAAMUfY9BrptY=
Subject key identifier: B9:0F:CA:3E:C5:D2:BB:A4:CB:26:8A:3D:AF:D5:A9:36:8E:25:9D:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A73A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72BD352AB8B111F0A41BBEB4DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 12:34:33 +0000
ROA not before: Mon 03 Nov 2025 12:34:28 +0000
ROA not after: Sun 14 Dec 2025 12:34:28 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108346 (0x1a73a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 12:34:28 2025 GMT
Not After : Dec 14 12:34:28 2025 GMT
Subject: CN=6908a158-a763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ec:97:9c:ad:79:56:43:b6:4d:c0:cf:8b:fc:
7e:7a:45:1d:cc:fe:c3:7a:69:78:36:bf:ba:07:2d:
8e:45:ba:02:6f:bc:94:20:a1:f1:2e:e3:eb:b6:3b:
87:0f:b4:bc:d4:c6:73:4c:6f:69:62:aa:e2:a2:7a:
96:06:4f:13:9a:8b:b1:2c:27:31:e9:1d:6b:80:f2:
94:0b:23:cf:51:22:c4:d1:2b:3f:05:e0:a7:66:59:
79:d9:f4:84:7e:88:ac:72:eb:b9:75:7b:b1:c4:ef:
23:0a:02:ec:28:4e:f4:d9:b5:c1:95:56:d6:aa:55:
b1:ba:9d:a0:d6:c7:e1:4c:51:17:e6:8c:04:de:b7:
bf:86:05:48:7c:eb:6d:08:73:43:1a:b9:65:de:6a:
70:9e:d5:72:1a:27:90:3f:94:e6:fe:a1:e3:98:e0:
af:58:ff:d7:40:42:63:5a:85:57:6d:bb:d1:19:f6:
21:74:f0:c8:93:dc:33:a4:20:98:73:b6:9e:c2:74:
76:8f:19:96:da:44:2c:ee:d6:be:7c:5f:ce:45:40:
08:25:68:0a:94:8c:9b:4a:fc:1c:45:1b:6d:14:86:
20:02:72:eb:8a:0d:c1:04:ca:50:03:1a:72:dc:82:
d4:c9:b4:1e:b2:f2:29:23:51:a2:5c:ef:1a:48:9c:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:CA:3E:C5:D2:BB:A4:CB:26:8A:3D:AF:D5:A9:36:8E:25:9D:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72BD352AB8B111F0A41BBEB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d4:6f:93:0f:05:08:18:33:1f:63:43:8e:2c:b1:37:d8:ee:
0e:03:33:65:f1:ab:4a:88:61:99:77:f6:61:a2:87:50:76:f2:
8d:e4:5a:39:6e:18:c3:09:26:26:af:9a:94:39:c2:6d:4b:64:
c5:23:b5:d1:33:e3:47:cc:b8:7e:f4:25:48:3e:52:01:2f:63:
41:87:20:51:82:e6:38:66:c6:38:44:c3:1d:7a:e7:d2:ec:1d:
09:7f:2c:94:42:49:58:d8:bb:32:28:94:83:1d:a5:a0:5e:db:
6a:ad:a3:15:fb:94:d5:0f:9d:2c:db:0a:d3:f0:3b:fd:b0:4a:
47:22:b7:8c:60:40:96:0c:27:d9:85:61:f3:36:8f:81:8a:06:
38:0d:c8:20:0a:bc:90:be:fa:f7:0a:a2:81:63:e0:07:b0:c4:
22:97:1e:9e:b4:a7:a7:65:96:f4:17:3d:99:cd:f2:8f:60:15:
1c:de:f8:b8:42:6a:65:11:71:e7:00:62:10:7f:75:1b:e7:d1:
be:62:14:c7:36:e9:f7:f3:fd:8d:79:aa:93:4f:97:0e:37:8c:
de:5a:ba:b8:bc:56:07:ae:cd:8d:be:aa:90:00:9b:d8:29:fd:
93:78:e4:fa:01:92:29:ad:36:c7:78:7f:c0:07:77:ca:aa:72:
1d:c4:50:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:35:50 2025 by rpki-client