Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/757DC078B35B11F0B96DF1A2DAE4EC9C.roa
File: 757DC078B35B11F0B96DF1A2DAE4EC9C.roa (raw, json)
Hash identifier: wlswOodA3XYpeDK7RiNeBA6yimi+H69pQh+A4icgnpo=
Subject key identifier: EC:AA:16:6D:5B:EB:CB:C0:EA:B3:61:E2:E2:BF:D6:C9:9C:B1:A7:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A561
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/757DC078B35B11F0B96DF1A2DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 17:36:25 +0000
ROA not before: Mon 27 Oct 2025 17:36:20 +0000
ROA not after: Mon 01 Dec 2025 17:36:20 +0000
asID: 62240
IP address blocks: 154.196.31.0/24 maxlen: 24
154.196.33.0/24 maxlen: 24
154.196.36.0/24 maxlen: 24
154.196.40.0/24 maxlen: 24
154.196.41.0/24 maxlen: 24
154.196.42.0/24 maxlen: 24
154.196.43.0/24 maxlen: 24
154.196.44.0/24 maxlen: 24
154.196.45.0/24 maxlen: 24
154.196.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107873 (0x1a561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 17:36:20 2025 GMT
Not After : Dec 1 17:36:20 2025 GMT
Subject: CN=68ffad98-7a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:95:65:2b:71:bb:ca:7b:68:0c:ed:c7:89:
a7:4b:2a:85:07:ae:ce:18:3d:89:94:d4:75:83:ba:
2d:4b:0f:b4:3e:f2:53:cd:7d:4a:48:42:c4:77:ef:
0b:b0:90:81:98:4d:c3:b2:3a:62:a8:da:79:f6:40:
35:8e:ac:36:2d:45:24:b2:d2:a0:52:b9:76:6c:00:
4b:4a:cc:1b:61:09:79:67:fa:2f:00:f6:92:7b:a0:
22:fe:37:2e:0d:a0:ea:1d:55:62:d4:fb:ca:da:2c:
4f:d0:6e:0d:1a:ac:de:0a:02:1c:32:5f:6e:0d:94:
48:89:9c:21:17:c7:ca:ce:0d:76:5a:9c:1b:5a:a0:
6b:56:b9:5d:2d:e2:24:29:a3:a2:3d:47:44:4f:79:
7d:a2:73:cf:61:4a:03:19:0c:18:9e:d3:89:0f:4a:
d8:d5:12:bb:15:8b:36:7f:df:f2:69:1d:65:8b:a1:
51:f6:d3:8b:16:28:82:b5:00:60:0e:10:7c:3f:1e:
48:a9:14:bb:5a:3e:d1:f7:55:39:0c:5f:b5:f3:51:
a1:f7:e0:c5:55:51:db:d0:38:9c:69:11:ef:dc:c8:
33:32:82:63:40:93:a4:d4:63:4b:65:5c:25:a8:64:
35:1e:2d:5d:15:44:6f:6f:c2:c3:4b:1d:24:db:c8:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AA:16:6D:5B:EB:CB:C0:EA:B3:61:E2:E2:BF:D6:C9:9C:B1:A7:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/757DC078B35B11F0B96DF1A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.31.0/24
154.196.33.0/24
154.196.36.0/24
154.196.40.0-154.196.46.255
Signature Algorithm: sha256WithRSAEncryption
41:e8:2e:9b:a5:c7:35:77:37:1b:62:5d:6a:65:a2:44:08:b6:
1b:e6:98:99:f1:7e:59:42:66:54:bf:ef:07:d5:fc:7b:ec:a5:
2f:1b:1b:16:f3:1f:1c:19:e6:10:5a:a5:2b:22:df:60:e1:48:
39:c1:f4:87:79:fe:6b:f6:69:20:e1:12:d0:fb:26:87:a6:fb:
71:27:ec:09:f5:d1:75:13:5c:03:1b:99:f4:d8:b3:0b:63:63:
a1:90:5b:aa:d1:8d:e9:fe:ac:11:82:b4:a1:b1:6b:49:93:20:
6b:f7:56:87:23:e8:62:9d:0e:fe:0a:40:d9:87:64:31:a4:27:
12:95:81:1b:91:96:9b:b7:97:c0:c4:18:b0:bd:90:7f:b7:82:
de:03:25:7b:fe:b3:ea:e1:e1:87:ef:91:bb:32:79:87:68:9c:
f1:5d:e4:8a:cd:f6:38:e1:30:97:c1:80:c7:6b:11:a5:ee:d6:
3e:e5:03:ea:dc:21:cd:42:8e:74:ef:29:84:66:f9:f5:3c:35:
4d:81:85:98:4d:4a:df:75:87:ef:14:6a:28:ca:6d:07:49:85:
78:6c:59:f8:1c:bc:39:27:d2:b5:53:66:d9:c8:6f:25:25:da:
43:e2:82:bb:92:d9:94:d9:c9:4f:fd:c4:d4:4c:0a:24:46:50:
97:a9:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:48 2025 by rpki-client