Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72F32BAAB35511F08AF2BA7CDAE4EC9C.roa
File: 72F32BAAB35511F08AF2BA7CDAE4EC9C.roa (raw, json)
Hash identifier: 0W7mcZ7vf2PDCV5UJWdrDe0nNDmdiKYxzgHVk+tT/IE=
Subject key identifier: 1F:20:A0:F5:F3:D4:01:D8:9E:47:B4:E3:EF:D9:7F:7D:D1:86:83:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A553
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72F32BAAB35511F08AF2BA7CDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 16:53:23 +0000
ROA not before: Mon 27 Oct 2025 16:53:18 +0000
ROA not after: Mon 01 Dec 2025 16:53:18 +0000
asID: 62240
IP address blocks: 154.195.2.0/24 maxlen: 24
154.195.3.0/24 maxlen: 24
154.195.97.0/24 maxlen: 24
154.195.98.0/24 maxlen: 24
154.195.99.0/24 maxlen: 24
154.195.101.0/24 maxlen: 24
154.195.102.0/24 maxlen: 24
154.195.103.0/24 maxlen: 24
154.195.104.0/24 maxlen: 24
154.195.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107859 (0x1a553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 16:53:18 2025 GMT
Not After : Dec 1 16:53:18 2025 GMT
Subject: CN=68ffa383-be50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:b0:af:cd:87:40:70:c3:48:6c:d4:05:6f:
c1:f9:92:8c:df:66:bf:34:1a:0e:31:a3:8e:4f:ff:
7c:7d:c1:b2:ba:c2:3e:9f:b0:2c:e5:bd:c0:c3:6f:
61:0f:de:7d:e7:e7:df:d1:10:bd:32:4f:d5:57:fa:
27:03:51:46:ff:3b:3d:48:1c:1a:f7:e1:50:ca:dd:
3c:c8:ab:64:54:02:e8:f0:7a:95:a7:3c:15:d8:2f:
5f:9e:cf:b7:78:45:21:ec:3e:5a:c4:25:8c:5a:03:
13:b5:c8:8c:53:35:61:11:f9:c3:2a:95:9e:3e:e9:
f5:b7:88:08:59:9c:bb:e7:18:2e:b2:a7:14:c5:8b:
d4:b9:5e:83:1d:ad:3f:ca:06:d0:d0:14:dc:7d:0f:
28:38:97:a1:5b:88:cd:eb:a5:16:6c:e7:41:95:b9:
8d:cd:92:d8:f7:09:6d:cb:6a:ce:5d:b2:ef:76:c4:
c0:d9:37:71:28:07:73:0a:2e:05:ac:ae:35:25:f3:
36:04:b9:5f:47:98:dc:8d:bb:d7:10:d2:69:cc:00:
fa:80:ba:9d:0b:77:da:45:e8:98:b9:ac:7e:9c:7f:
6c:26:e5:f1:f1:6c:fb:0a:3b:72:f7:d1:bb:7d:d4:
67:3f:e7:9a:75:86:79:a6:62:e7:6f:5a:b3:52:fa:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:A0:F5:F3:D4:01:D8:9E:47:B4:E3:EF:D9:7F:7D:D1:86:83:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72F32BAAB35511F08AF2BA7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.2.0/23
154.195.97.0-154.195.99.255
154.195.101.0-154.195.105.255
Signature Algorithm: sha256WithRSAEncryption
2d:8d:9f:a1:4e:82:7f:be:36:c4:eb:c4:b5:ef:28:62:39:6b:
57:7d:f1:30:55:fb:25:53:17:90:87:b8:28:8f:60:bb:82:48:
2d:1b:66:0f:ec:86:cb:27:b7:c8:7f:8c:43:ba:50:d8:93:28:
2a:26:00:65:ea:27:14:3a:18:af:95:29:07:82:04:0b:3f:57:
c0:73:f3:a8:3f:05:c4:f8:fd:5b:8c:9d:c1:3a:19:5e:6d:29:
89:0c:c0:05:f8:83:d9:4f:94:3f:51:42:6c:32:20:87:1e:45:
48:67:b3:4b:ad:6c:a7:2f:ca:aa:6d:21:a7:13:f3:2d:cc:38:
43:78:a2:12:87:a0:29:a7:75:bc:b4:cc:b4:69:75:ac:a9:fa:
d6:9d:59:b5:0d:ac:0e:83:97:af:50:0d:e4:53:2b:af:2e:51:
a7:6e:70:84:16:1c:c5:b2:ce:69:95:ab:fd:46:34:9b:94:ea:
16:73:48:66:d9:b4:ae:59:b9:5a:6a:c0:12:97:5b:21:27:40:
5b:47:b7:ff:f8:8e:8d:9a:d7:97:e7:a6:41:d5:54:d5:ef:74:
1f:d6:9e:1a:1e:c5:bf:31:83:11:39:c6:31:aa:3e:90:02:8e:
8f:0a:9a:6c:fa:59:2d:9c:92:4d:c0:43:05:cc:79:93:32:42:
0d:bb:0d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:49 2025 by rpki-client