Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C03390EB0BC11F09517DEAADAE4EC9C.roa
File: 9C03390EB0BC11F09517DEAADAE4EC9C.roa (raw, json)
Hash identifier: sz6fu8HD8Q39W5i7THj3EfUTQ2bjd9hR5veT999TM2o=
Subject key identifier: A2:AB:4C:8B:3B:CC:11:0D:6F:76:B1:3A:4C:1E:79:FD:BF:AD:05:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C03390EB0BC11F09517DEAADAE4EC9C.roa
Signing time: Fri 24 Oct 2025 09:34:17 +0000
ROA not before: Fri 24 Oct 2025 09:34:07 +0000
ROA not after: Fri 31 Oct 2025 09:34:07 +0000
asID: 54801
IP address blocks: 154.81.61.0/24 maxlen: 24
154.81.136.0/24 maxlen: 24
154.81.140.0/24 maxlen: 24
154.81.161.0/24 maxlen: 24
154.81.164.0/24 maxlen: 24
154.81.166.0/24 maxlen: 24
154.81.178.0/24 maxlen: 24
154.81.181.0/24 maxlen: 24
154.81.191.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.128.0/24 maxlen: 24
154.83.135.0/24 maxlen: 24
154.83.137.0/24 maxlen: 24
154.83.141.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
154.83.209.0/24 maxlen: 24
154.83.211.0/24 maxlen: 24
154.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 27 Oct 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107718 (0x1a4c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 24 09:34:07 2025 GMT
Not After : Oct 31 09:34:07 2025 GMT
Subject: CN=68fb4819-4442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:34:d8:5c:b5:0e:2a:26:f3:cd:9e:fc:ab:
03:62:82:ed:01:0d:4d:c3:03:59:a1:68:2e:e8:c5:
ad:31:30:af:be:b5:ae:9d:d6:26:d1:a3:69:34:61:
56:a6:5b:04:eb:bb:46:22:03:a9:4d:a6:d5:43:be:
0e:db:9d:1e:5c:6c:d4:22:56:9e:4c:6c:87:0b:bf:
62:5a:55:00:13:25:ce:e7:54:f5:1b:5b:bb:07:6c:
b5:b5:b7:7d:b4:0a:7c:c6:21:a4:d5:5c:bf:ee:25:
8f:5d:bf:71:01:0c:06:95:9b:d3:c4:c7:53:31:39:
08:98:31:78:84:e0:f9:51:51:db:1b:52:0c:64:4f:
ca:98:71:39:81:50:f8:95:d7:c8:9b:b5:2e:93:86:
06:2b:29:c1:15:63:84:90:78:4b:a3:87:0c:47:b9:
b0:e1:08:cf:9f:31:31:4a:16:6c:48:42:a4:94:fe:
55:34:18:14:4a:5e:5f:b3:9a:4b:72:a8:6b:42:06:
96:ec:7c:6d:1b:6e:da:97:2a:00:f3:94:29:1f:14:
ed:bd:ff:e3:b0:d1:03:9a:8d:04:f8:39:bc:88:b0:
b4:ed:2d:3c:bc:69:d4:36:83:be:e2:39:07:51:18:
e4:33:3c:39:94:47:79:74:c2:e4:e4:96:95:ab:ed:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AB:4C:8B:3B:CC:11:0D:6F:76:B1:3A:4C:1E:79:FD:BF:AD:05:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C03390EB0BC11F09517DEAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.61.0/24
154.81.136.0/24
154.81.140.0/24
154.81.161.0/24
154.81.164.0/24
154.81.166.0/24
154.81.178.0/24
154.81.181.0/24
154.81.191.0/24
154.82.18.0/24
154.82.20.0/24
154.83.128.0/24
154.83.135.0/24
154.83.137.0/24
154.83.141.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
154.83.209.0/24
154.83.211.0/24
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:40:e2:09:44:6b:86:c0:0d:50:14:a4:eb:37:66:2f:a9:e2:
02:12:c2:ed:71:2d:6b:a8:ed:31:27:83:0c:f9:83:44:44:f5:
7d:ea:8c:68:b8:67:31:d2:09:d2:f9:e1:48:48:d6:bc:c8:78:
9e:52:3f:f2:e8:eb:4a:94:b0:5e:55:13:56:b4:15:a4:b5:a2:
d9:6e:30:5e:b6:d2:02:2b:24:32:ae:2c:e7:e7:16:5b:d5:2c:
82:c8:cf:16:f1:eb:a9:55:da:51:6a:10:cd:cb:f3:bc:8b:57:
31:75:ee:53:bf:15:81:34:a4:6e:83:bd:ba:db:24:81:73:6d:
ed:af:b9:83:50:51:54:f6:c3:cc:89:8b:4d:7e:78:90:0f:f7:
30:83:3f:bc:1a:54:14:e3:4c:d9:2e:cd:ee:a3:48:01:cc:fb:
83:83:a7:f2:2d:b7:49:68:fb:e4:a3:ad:a5:a1:4c:18:86:8e:
d1:52:51:0f:c7:4f:38:bb:da:33:3d:19:f9:10:58:ee:79:65:
bf:8f:03:73:df:9d:60:6b:00:26:76:b2:e4:4f:79:b8:43:c2:
c0:fc:e7:f1:58:d0:fd:93:49:52:e7:6c:df:48:42:0d:7d:0c:
f7:3e:b4:71:0d:91:1a:bd:a7:e5:d5:bd:de:93:38:31:4f:78:
91:ef:5f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 02:57:02 2025 by rpki-client