Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AF09A34B36111F0B82DD2C5DAE4EC9C.roa
File: 7AF09A34B36111F0B82DD2C5DAE4EC9C.roa (raw, json)
Hash identifier: hWQzDA1oBAMhDndxMJrT6DbeLZCxhwcZuFNzpT46tS0=
Subject key identifier: DF:E2:FC:30:BD:79:E1:5E:18:89:CE:3C:32:C3:DB:15:7F:BE:04:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A56F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AF09A34B36111F0B82DD2C5DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 18:19:31 +0000
ROA not before: Mon 27 Oct 2025 18:19:23 +0000
ROA not after: Mon 01 Dec 2025 18:19:23 +0000
asID: 62240
IP address blocks: 154.194.79.0/24 maxlen: 24
154.194.99.0/24 maxlen: 24
154.194.100.0/24 maxlen: 24
154.194.101.0/24 maxlen: 24
154.194.102.0/24 maxlen: 24
154.194.104.0/24 maxlen: 24
154.194.105.0/24 maxlen: 24
154.194.106.0/24 maxlen: 24
154.194.107.0/24 maxlen: 24
154.194.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107887 (0x1a56f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 18:19:23 2025 GMT
Not After : Dec 1 18:19:23 2025 GMT
Subject: CN=68ffb7b3-01fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:08:33:04:67:f4:af:ed:4f:e1:36:f4:86:5b:
4c:ab:bc:2a:cb:59:ea:18:01:db:81:94:54:94:3c:
9f:0f:3f:12:a9:79:4f:71:2a:7c:1d:c3:9e:e5:34:
8b:90:b8:76:4b:40:d4:da:8b:cc:95:48:95:44:68:
06:10:7d:74:ac:d5:c8:38:45:62:57:a2:fa:ee:cb:
0c:03:a3:f1:4b:28:dd:cc:16:99:06:93:e4:86:18:
a8:f4:d5:75:a1:a0:1a:65:26:bf:ea:6f:af:95:f8:
9e:3f:28:37:d7:41:b9:51:6c:af:34:27:18:f5:34:
e9:d7:ac:5d:05:d0:94:eb:57:ac:84:7a:fb:89:ba:
ca:df:a5:1d:bf:54:d2:8e:11:16:93:c1:da:c9:df:
17:23:27:8c:af:c8:1f:e7:90:d1:ec:06:f5:60:f3:
89:3e:d5:d8:03:c1:cb:8f:e8:d2:aa:83:d7:af:59:
0b:99:da:8a:c3:dd:81:ac:50:98:82:f4:39:8b:fd:
b9:23:78:48:95:9d:d1:fb:f4:df:80:fc:80:bf:cb:
88:c8:b4:e8:74:17:cc:66:2a:06:2e:5b:d4:f8:eb:
9b:f8:91:91:04:62:06:d0:22:5b:fa:ae:74:73:e2:
d1:35:c8:0d:bc:5c:75:f1:90:aa:33:93:6e:79:08:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:FC:30:BD:79:E1:5E:18:89:CE:3C:32:C3:DB:15:7F:BE:04:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AF09A34B36111F0B82DD2C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.79.0/24
154.194.99.0-154.194.102.255
154.194.104.0-154.194.108.255
Signature Algorithm: sha256WithRSAEncryption
65:3c:ec:d2:63:fe:39:1e:87:83:ab:57:00:f9:19:2b:25:7f:
b6:eb:00:79:2f:d4:a8:e3:2d:13:4f:75:1e:98:66:5a:fa:7e:
fa:64:e0:e2:d8:87:cc:f3:97:91:10:e7:61:d5:6c:83:fd:b0:
49:33:23:48:39:cd:3d:18:62:3f:76:e0:26:eb:f5:15:09:a2:
2b:2e:2c:34:21:d9:08:57:bf:c1:d3:70:09:c0:e5:8c:ee:72:
0c:49:eb:97:29:eb:30:65:28:47:25:28:57:fa:97:f2:f2:72:
c6:43:fe:8c:6d:ce:4c:d9:34:23:5b:51:8f:6e:ea:0a:d6:18:
4f:d1:28:7b:3b:47:4a:0a:9f:bc:be:44:9a:11:19:05:4a:33:
21:c3:2e:e2:8a:2d:45:aa:75:70:70:bd:29:4a:bc:ca:c3:86:
43:4c:e2:a4:18:23:b9:a0:52:72:ae:65:38:ca:16:df:9e:b6:
d7:8a:ba:a2:4a:f8:fd:05:72:fa:eb:ae:30:56:d2:46:ec:42:
85:28:9c:63:e6:f3:cc:94:c7:1d:0d:7a:c1:eb:49:82:8a:9b:
60:2d:bf:ea:06:41:59:1b:1b:70:32:4f:ef:53:53:67:46:55:
77:49:56:cb:09:f0:0c:0f:89:e0:d4:b3:ff:9f:a9:a4:7b:c6:
7f:1a:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:47 2025 by rpki-client