Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BDD6F729D6211F08D8E21B5DAE4EC9C.roa
File: 7BDD6F729D6211F08D8E21B5DAE4EC9C.roa (raw, json)
Hash identifier: 983g3cuIJDtAMzmAnQ5lwjaG1jwTixp3kR4g5qHFOSY=
Subject key identifier: BD:7C:55:0C:C5:95:1C:EE:BD:EB:CB:64:4D:90:88:90:61:79:E6:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A175
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BDD6F729D6211F08D8E21B5DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 18:31:16 +0000
ROA not before: Mon 29 Sep 2025 18:31:10 +0000
ROA not after: Wed 05 Nov 2025 18:31:10 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
154.209.19.0/24 maxlen: 24
154.209.95.0/24 maxlen: 24
154.209.132.0/24 maxlen: 24
154.209.133.0/24 maxlen: 24
154.209.135.0/24 maxlen: 24
154.209.147.0/24 maxlen: 24
154.209.149.0/24 maxlen: 24
154.209.156.0/24 maxlen: 24
154.209.159.0/24 maxlen: 24
154.209.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106869 (0x1a175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 18:31:10 2025 GMT
Not After : Nov 5 18:31:10 2025 GMT
Subject: CN=68dad074-bf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b5:d2:d7:3f:ed:3a:fc:b4:17:7e:0e:09:3b:
01:5c:6b:6e:f7:1b:11:65:c6:12:c7:2f:e2:fc:3a:
60:45:6a:0f:87:ae:58:45:00:32:d1:4f:7d:c9:25:
8b:c4:af:1d:0f:5b:49:53:d1:37:1f:1b:02:41:4e:
b0:c1:ee:0d:83:22:47:a2:4d:36:e4:33:7b:64:6c:
23:92:60:8a:10:a1:0c:23:ba:5f:02:40:c9:11:b7:
62:2b:a8:c9:ff:39:22:da:4c:61:0c:b8:39:3c:6a:
b4:4e:37:06:2a:3d:54:30:ca:de:30:84:8e:b8:56:
aa:d5:69:95:9d:68:5a:51:11:8e:40:32:76:42:a1:
44:69:e8:03:61:c3:19:af:f3:2d:6a:91:c6:a7:67:
a3:30:94:a2:19:86:8a:30:35:ac:7c:09:37:2d:3e:
4f:13:48:1f:4f:e9:04:ea:ee:e3:85:e0:8a:12:a8:
0a:b5:f7:93:f6:b2:17:73:70:10:b9:00:0d:51:ef:
66:cb:cb:3c:bf:b4:a2:e8:58:e4:28:75:75:f5:da:
42:61:c0:e8:cd:61:a0:fb:b0:3e:b5:66:ef:19:92:
a8:8b:52:cf:ad:77:d9:4d:c5:e0:03:ed:97:85:e5:
c4:54:41:96:c4:03:bb:04:8b:8d:05:05:b8:7f:9b:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7C:55:0C:C5:95:1C:EE:BD:EB:CB:64:4D:90:88:90:61:79:E6:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BDD6F729D6211F08D8E21B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.251.0/24
154.205.233.0-154.205.240.255
154.209.19.0/24
154.209.95.0/24
154.209.132.0/23
154.209.135.0/24
154.209.147.0/24
154.209.149.0/24
154.209.156.0/24
154.209.159.0/24
154.209.192.0/24
Signature Algorithm: sha256WithRSAEncryption
41:56:36:9e:2a:ae:70:f7:b9:81:df:b5:8c:57:f8:c5:e8:90:
73:ed:ef:8a:99:fe:08:c9:bf:62:26:c4:09:7e:36:a6:74:a3:
2e:1c:1a:6b:7b:41:95:87:5f:1f:36:c6:c7:f9:5b:d1:af:60:
fc:1c:84:4d:af:87:3c:07:88:90:20:fe:ed:c3:1c:24:ca:6b:
d5:75:3e:76:91:2a:06:22:66:a1:11:18:66:50:57:2f:0c:ff:
4d:64:c1:1c:21:4b:5c:22:05:33:19:59:b5:d8:b2:1b:a5:cf:
00:ef:0d:20:16:14:e3:18:69:26:0a:23:27:c0:41:1d:34:f8:
66:18:e9:48:1b:a8:27:bb:60:a3:9f:4e:e9:2e:d3:38:7b:77:
0a:ca:ad:99:38:6b:79:69:a3:60:08:73:7b:d4:4a:67:36:de:
82:83:0e:24:a1:73:9a:07:e0:b7:60:4c:8b:ed:77:d5:17:38:
bd:f6:b8:23:97:96:4c:f6:15:db:f2:6f:d3:62:84:35:11:a3:
d8:75:d4:4d:fb:bd:06:35:f8:d7:a1:5b:cc:d7:82:f5:ef:f6:
27:d7:32:84:22:c6:84:9d:f1:9d:6d:e4:a5:c4:80:bf:25:12:
f2:93:10:f9:23:f7:34:29:93:9e:9b:0f:3b:db:a4:7c:16:34:
92:a8:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:58 2025 by rpki-client