Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FC75D42A51111F0A55EA091DAE4EC9C.roa
File: 9FC75D42A51111F0A55EA091DAE4EC9C.roa (raw, json)
Hash identifier: EdCpZzorXsXmQ2GHX5LGNViKr3ahVk/C75xlZSRueqY=
Subject key identifier: 9A:C8:A7:90:CF:D9:4D:BE:C2:8C:30:00:A8:23:FE:0A:50:B3:24:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A312
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FC75D42A51111F0A55EA091DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 13:12:36 +0000
ROA not before: Thu 09 Oct 2025 13:12:30 +0000
ROA not after: Sun 16 Nov 2025 13:12:30 +0000
asID: 22773
IP address blocks: 154.85.106.0/24 maxlen: 24
154.85.107.0/24 maxlen: 24
154.85.108.0/24 maxlen: 24
154.85.109.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.111.0/24 maxlen: 24
154.85.112.0/24 maxlen: 24
154.85.113.0/24 maxlen: 24
154.85.114.0/24 maxlen: 24
154.85.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107282 (0x1a312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 13:12:30 2025 GMT
Not After : Nov 16 13:12:30 2025 GMT
Subject: CN=68e7b4c4-c917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:19:b1:fd:ff:f2:64:15:b6:95:00:e3:d6:
09:f3:ab:28:28:61:d2:af:70:b4:20:d6:d8:21:94:
d9:20:77:0e:dc:fa:37:9d:39:3f:6d:65:db:a0:e2:
09:b0:17:83:61:d4:3b:0f:65:b3:62:94:6f:e3:25:
fc:f8:46:bc:97:fc:c5:ab:8d:90:3d:fa:e4:50:1e:
4d:c2:c2:fe:cf:96:d7:1f:93:79:bb:b5:db:fd:bc:
34:5d:ea:4d:21:a1:06:96:86:fe:a8:6e:87:82:0f:
0c:dc:8d:45:bb:34:3b:ec:83:a0:02:8e:68:7b:27:
73:28:71:83:ef:3c:bb:16:09:d3:5b:22:ab:80:81:
3a:87:a8:ed:25:56:c2:cc:f6:3e:12:11:ab:61:24:
4b:c8:33:40:69:f1:da:b4:bb:cb:30:3c:55:15:5f:
ab:70:1f:18:d1:ea:c1:3c:77:fa:bc:12:35:ab:d3:
fd:df:6e:20:f9:c4:9b:71:8c:a8:27:3a:37:11:c0:
ff:ec:2b:87:7f:30:9e:64:f5:0b:ee:89:b5:e3:ae:
d6:d6:86:fa:0e:3e:95:c7:39:54:15:62:b3:04:dd:
30:e1:d9:5c:66:54:0c:cd:85:27:79:a0:1b:9f:99:
a9:82:8f:2b:d1:f7:66:59:58:e0:f8:58:d9:79:7e:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C8:A7:90:CF:D9:4D:BE:C2:8C:30:00:A8:23:FE:0A:50:B3:24:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FC75D42A51111F0A55EA091DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.106.0-154.85.115.255
Signature Algorithm: sha256WithRSAEncryption
41:f5:93:f6:f1:42:a5:c8:51:b3:83:0a:99:bb:af:a4:80:cc:
30:2f:c9:72:c4:8d:6e:34:72:a0:fb:cd:ae:16:80:e7:75:3e:
f4:6c:fe:e7:1c:4d:9f:45:11:30:d8:e7:43:30:c7:e8:b2:a9:
b5:f8:e7:53:1c:95:78:cf:87:6b:f6:f8:dd:fb:44:eb:00:6a:
af:64:de:77:df:b8:ee:71:68:5e:16:bb:80:c9:a8:c3:8e:25:
43:c3:46:94:df:16:f7:e2:16:c3:50:16:21:b8:dc:84:7d:46:
53:ed:21:29:b5:79:a7:77:51:95:21:2a:84:71:25:3f:15:8f:
04:2e:07:67:cb:12:86:05:80:7c:c6:17:3a:6d:fd:d6:95:ec:
c3:a1:3b:44:1e:9c:1d:03:45:da:e4:1b:84:96:b6:b4:bc:1c:
e3:66:6d:ff:92:a5:39:c9:bc:32:53:1d:08:d4:0e:15:e8:38:
7b:12:d3:13:66:3d:3e:c3:a1:a2:9c:13:43:b9:59:47:33:0a:
3e:80:b7:4b:06:d5:59:2a:15:56:0c:65:49:df:d5:c1:2f:67:
d5:89:4e:03:f4:28:e3:72:b8:a5:d5:ea:79:ac:5e:3b:76:e7:
d3:76:09:b3:d5:5c:f5:54:7c:67:9f:3f:7c:1f:5f:5b:86:9c:
9b:92:8e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:05 2025 by rpki-client