Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98C154C4B35A11F09A8E239BDAE4EC9C.roa
File: 98C154C4B35A11F09A8E239BDAE4EC9C.roa (raw, json)
Hash identifier: 53PKLBfFK09N0c4D1vasuuDzARnPR5LMjWf+CpxHxJY=
Subject key identifier: 6E:53:AD:EB:3B:90:C5:3C:26:44:63:F1:19:D3:73:22:53:8C:DD:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A55F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98C154C4B35A11F09A8E239BDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 17:30:14 +0000
ROA not before: Mon 27 Oct 2025 17:30:09 +0000
ROA not after: Mon 01 Dec 2025 17:30:09 +0000
asID: 62240
IP address blocks: 154.195.108.0/24 maxlen: 24
154.195.111.0/24 maxlen: 24
154.195.112.0/24 maxlen: 24
154.195.120.0/24 maxlen: 24
154.195.124.0/24 maxlen: 24
154.195.136.0/24 maxlen: 24
154.195.137.0/24 maxlen: 24
154.195.138.0/24 maxlen: 24
154.195.140.0/24 maxlen: 24
154.196.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107871 (0x1a55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 17:30:09 2025 GMT
Not After : Dec 1 17:30:09 2025 GMT
Subject: CN=68ffac26-b3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:d8:e5:45:39:fb:9f:66:4a:dd:23:35:03:
b4:54:d1:44:86:ce:39:c6:22:7b:18:84:bd:6b:ca:
68:a0:05:7e:e8:25:03:fe:e0:bf:76:ab:da:05:7d:
13:25:e1:ec:80:30:49:52:57:63:95:80:07:31:31:
b9:a1:1f:e3:0b:e1:52:18:94:9a:5c:f4:63:38:54:
c8:36:be:37:dd:ab:b9:fd:74:40:27:8e:c2:f8:53:
26:a1:65:25:8a:72:df:0f:b4:86:bc:a6:6a:44:41:
19:ac:5c:83:3a:e9:64:ab:2e:c9:65:9d:6f:cd:6b:
c3:c6:5f:c1:92:76:ef:b3:cb:1e:5f:97:42:77:a5:
7a:63:43:1a:74:64:de:1b:b3:60:d2:b9:91:27:88:
99:26:a1:7d:ea:4f:b0:54:89:40:f2:f1:56:2b:ea:
9b:9a:b7:ae:0a:ae:fb:9d:3e:26:35:84:65:16:e7:
38:1c:ca:ee:94:c3:aa:26:d1:f6:b6:63:a5:79:93:
09:04:24:9e:47:3e:d6:e4:83:aa:d7:a1:87:36:1f:
3e:4f:c9:4d:6b:e3:cc:3c:de:80:bd:04:79:0f:6e:
6f:3d:4d:49:83:0f:a3:cd:38:d0:ac:69:5d:27:f2:
2f:b4:ff:0b:9c:71:01:06:0d:3d:cd:77:d9:c6:0b:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:AD:EB:3B:90:C5:3C:26:44:63:F1:19:D3:73:22:53:8C:DD:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98C154C4B35A11F09A8E239BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.108.0/24
154.195.111.0-154.195.112.255
154.195.120.0/24
154.195.124.0/24
154.195.136.0-154.195.138.255
154.195.140.0/24
154.196.30.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c5:1a:52:b3:af:bf:05:eb:01:8d:fd:7f:f3:e3:cd:26:c3:
ea:83:22:a4:8c:03:1d:38:5c:52:81:49:ba:0e:bd:41:c4:bf:
be:17:9d:2d:c2:39:df:d8:d8:7f:7a:cc:b6:50:a5:d3:24:0d:
97:f8:8f:54:35:52:c2:f4:bb:85:c7:95:32:df:b1:85:15:a0:
80:60:2d:94:ca:f6:ca:1b:e1:d9:7d:a8:c3:50:f8:70:71:b1:
db:53:42:1b:31:aa:54:f6:c7:1f:6e:6d:fc:7e:75:08:63:e9:
c7:74:46:b5:d7:50:3c:13:a3:a7:43:da:95:3a:f8:6e:33:00:
56:3e:8c:83:c1:ab:b2:4e:23:41:06:b2:52:42:46:97:99:55:
ed:19:db:84:ac:71:2b:35:ae:69:1c:0a:03:61:13:e0:7c:1c:
c5:6d:af:9e:60:2b:6b:d4:54:bb:d0:27:3f:e9:10:5f:a2:82:
f5:45:7f:87:0f:1f:68:c8:77:8d:12:88:7b:37:7c:72:7c:9a:
ec:11:03:ac:49:bb:a1:66:5f:64:4b:41:b2:85:51:2a:3a:d3:
5d:1e:4d:65:cb:c7:d9:4d:4b:c3:b3:6f:e5:83:d2:2c:e9:92:
22:c0:d0:4c:50:26:4b:64:67:10:88:42:1d:67:48:7d:71:0c:
22:da:12:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:48 2025 by rpki-client