Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8591BEA89D5111F0BC9C49C6DAE4EC9C.roa
File: 8591BEA89D5111F0BC9C49C6DAE4EC9C.roa (raw, json)
Hash identifier: OPDyWyzv+B30pDwv5jA9bgK4aZ17wR9DOTTtERo20bE=
Subject key identifier: 47:E0:3E:0C:77:03:A6:83:1B:77:E9:2F:D5:AC:7B:1C:6D:CE:7D:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A15B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8591BEA89D5111F0BC9C49C6DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 16:29:51 +0000
ROA not before: Mon 29 Sep 2025 16:29:46 +0000
ROA not after: Fri 31 Oct 2025 16:29:46 +0000
asID: 62240
IP address blocks: 154.194.33.0/24 maxlen: 24
154.194.119.0/24 maxlen: 24
154.194.120.0/24 maxlen: 24
154.194.121.0/24 maxlen: 24
154.194.122.0/24 maxlen: 24
154.194.123.0/24 maxlen: 24
154.194.124.0/24 maxlen: 24
154.194.125.0/24 maxlen: 24
154.194.126.0/24 maxlen: 24
154.194.127.0/24 maxlen: 24
154.196.29.0/24 maxlen: 24
154.196.32.0/24 maxlen: 24
154.196.34.0/24 maxlen: 24
154.196.35.0/24 maxlen: 24
154.196.37.0/24 maxlen: 24
154.196.38.0/24 maxlen: 24
154.196.39.0/24 maxlen: 24
154.196.89.0/24 maxlen: 24
154.196.90.0/24 maxlen: 24
154.196.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106843 (0x1a15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 16:29:46 2025 GMT
Not After : Oct 31 16:29:46 2025 GMT
Subject: CN=68dab3ff-a468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:5a:e2:bc:b2:fd:a2:71:80:91:09:3b:5e:
1d:4e:6b:2e:3c:f5:39:a3:63:be:be:08:ba:d2:5e:
bf:62:84:e4:c6:b5:d1:55:c4:d1:92:64:ea:8c:36:
cf:30:04:63:9b:40:28:b9:21:58:c0:c5:ff:d0:7f:
0c:01:97:30:30:19:04:e4:76:c5:d5:75:30:09:e2:
28:4e:2d:97:4f:48:62:1d:99:ce:0c:87:87:ee:ee:
02:b8:d6:28:cf:df:75:a5:3e:bc:7f:d9:51:05:dc:
4c:c6:b7:69:f0:6e:86:53:fb:0f:4d:83:37:5f:a4:
3c:a7:ca:5c:5c:d9:2d:95:31:58:1f:1f:e1:d8:a7:
9e:03:06:79:db:bb:fe:3e:0d:1b:3b:83:c4:b0:65:
04:1a:d2:f0:98:83:59:d0:d1:59:98:bc:f3:2c:b1:
2c:f5:d1:e2:a2:ac:2b:d3:fb:27:27:cd:e1:e7:1f:
2d:6f:cb:ee:b1:49:03:49:02:cd:18:54:e6:92:c6:
8d:c4:02:49:95:79:ce:9d:3e:31:24:c1:60:c4:5a:
81:c1:86:c5:d3:b6:42:50:98:42:aa:6d:58:19:2d:
c8:89:18:7a:4b:e4:fe:47:b9:52:ba:1e:aa:67:85:
63:f6:3c:d9:d9:2b:4a:ce:8c:e8:a3:b4:21:22:3d:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E0:3E:0C:77:03:A6:83:1B:77:E9:2F:D5:AC:7B:1C:6D:CE:7D:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8591BEA89D5111F0BC9C49C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.33.0/24
154.194.119.0-154.194.127.255
154.196.29.0/24
154.196.32.0/24
154.196.34.0/23
154.196.37.0-154.196.39.255
154.196.89.0-154.196.91.255
Signature Algorithm: sha256WithRSAEncryption
3a:ca:34:f4:3c:20:0d:6c:93:7b:c6:46:f8:37:75:94:91:ba:
37:1c:24:ce:ad:7f:c5:41:79:ca:f7:6d:52:26:00:d5:2f:1e:
ec:bf:95:ac:e1:fc:ce:8a:90:5e:51:2a:75:c3:42:d3:0a:ec:
31:a9:23:0e:47:94:6d:99:59:b0:d4:2e:4a:7e:10:04:b4:9a:
d9:cc:d7:e5:6d:67:c5:06:a1:eb:aa:de:45:b9:67:0e:f8:aa:
ab:3c:a1:bd:c7:91:ac:62:c1:c4:19:6d:b1:ae:8c:fb:d6:68:
fb:8e:16:a7:84:2d:c3:1b:d8:4d:3f:c6:be:bb:95:2e:f5:84:
19:df:f0:87:5d:15:dc:db:f7:36:2f:ed:64:29:ad:7a:34:91:
8f:dd:e8:db:ef:9a:a6:2d:6b:43:f9:93:ca:46:4b:80:6c:51:
57:be:bd:4e:00:1f:d0:c0:82:b2:fd:db:96:4a:cd:37:17:9d:
46:d8:02:b7:b0:ab:99:eb:9f:e6:28:14:a0:b2:52:9a:7b:ba:
d3:1e:5d:b4:8e:ca:58:88:37:36:d0:38:67:69:9b:32:80:f5:
03:8e:a9:a9:46:a0:ef:ea:d4:0a:61:e1:5f:91:41:b7:60:a4:
26:4e:8f:38:db:ef:da:64:ee:6a:a6:ea:83:ea:8f:20:b5:fb:
c9:91:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:46 2025 by rpki-client