Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7CC8BE2A5B211F0BC783EA9DAE4EC9C.roa
File: A7CC8BE2A5B211F0BC783EA9DAE4EC9C.roa (raw, json)
Hash identifier: H75hGXn1zcsbqH6K1Cj6KuCTa/tKyietZeGVGmtRWKg=
Subject key identifier: 07:DB:8F:27:CB:D2:AB:EF:92:E8:9A:4E:9F:EA:38:A7:A3:F2:ED:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A333
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7CC8BE2A5B211F0BC783EA9DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 08:25:19 +0000
ROA not before: Fri 10 Oct 2025 08:25:14 +0000
ROA not after: Mon 17 Nov 2025 08:25:14 +0000
asID: 22773
IP address blocks: 154.82.224.0/19 maxlen: 24
154.85.13.0/24 maxlen: 24
154.94.36.0/23 maxlen: 24
154.94.44.0/24 maxlen: 24
154.94.47.0/24 maxlen: 24
154.94.51.0/24 maxlen: 24
154.94.52.0/23 maxlen: 24
154.94.56.0/24 maxlen: 24
154.94.59.0/24 maxlen: 24
154.94.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107315 (0x1a333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 08:25:14 2025 GMT
Not After : Nov 17 08:25:14 2025 GMT
Subject: CN=68e8c2ef-22a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:83:10:2d:92:b5:05:ed:3b:36:41:65:23:
af:00:c8:e4:51:80:3d:a1:d2:72:0b:1e:f3:4b:82:
0d:7a:57:e9:f7:ec:24:1d:8f:38:a4:ec:44:8e:be:
f9:06:d4:9b:16:56:ee:f3:44:e0:40:c1:be:73:f6:
d2:68:ed:70:45:5c:51:72:de:e5:8d:ff:4c:e0:0d:
08:66:5b:73:cc:0c:76:a0:bd:06:2f:26:c4:c5:1e:
de:65:40:8a:12:b3:8e:e1:92:6d:93:81:e8:f1:34:
6a:f4:7a:f4:12:bd:83:02:a7:10:d0:f8:b6:17:5d:
89:15:43:a1:e8:d0:ad:60:54:07:c6:10:80:cf:f0:
f7:f5:c9:9f:ce:d5:72:6a:fd:a8:35:04:5f:8c:45:
16:7f:9b:4f:f7:ec:fd:5e:79:6f:c0:c8:02:c0:ee:
05:dc:0d:8a:e8:64:6a:fa:ce:ec:00:6d:cd:37:cc:
5c:62:00:24:d9:93:b6:59:cf:80:f5:ac:39:48:cd:
f3:20:11:97:2f:72:6d:92:e6:1f:39:fe:3a:bf:ec:
6d:65:18:4b:1b:1b:08:dc:05:69:16:f5:c1:94:3b:
9f:da:74:2a:c2:c6:c3:ba:cd:b4:29:84:a1:e3:6a:
bc:94:be:3a:4f:53:fb:ac:9a:6e:f5:60:3a:bb:31:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DB:8F:27:CB:D2:AB:EF:92:E8:9A:4E:9F:EA:38:A7:A3:F2:ED:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7CC8BE2A5B211F0BC783EA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.224.0/19
154.85.13.0/24
154.94.36.0/23
154.94.44.0/24
154.94.47.0/24
154.94.51.0-154.94.53.255
154.94.56.0/24
154.94.59.0/24
154.94.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7b:c2:d7:2a:28:73:dc:df:ab:17:a5:51:1f:eb:ee:b3:ad:
97:e4:67:18:5c:24:ee:e9:91:71:af:8b:0c:7d:1c:59:b2:6e:
8e:d5:6c:4f:f7:7b:46:57:62:77:fa:9a:96:de:50:53:94:e5:
be:c1:c1:f4:7b:14:88:ad:8d:11:39:7a:ca:e3:f3:a2:d4:61:
41:1d:1d:96:d0:78:e5:61:ef:2d:55:33:57:84:95:a0:b4:4b:
2a:d1:76:68:0a:be:0b:b6:e9:7b:96:3e:39:4c:21:63:53:83:
58:54:62:c0:9c:4c:10:ae:ca:0f:ff:24:c6:cd:68:53:cf:19:
72:a8:77:10:45:ff:01:f3:88:ab:ab:05:6e:4b:17:f9:e7:c9:
a1:30:09:fc:2d:16:39:54:5b:b6:fc:9e:39:94:67:50:54:57:
9b:e9:85:86:36:b0:ec:f8:c6:f2:eb:b6:9a:6e:cb:91:98:1a:
27:5b:a5:ec:a6:6b:61:2b:99:68:7f:62:de:ff:7f:5e:94:d3:
75:82:a9:e6:c9:a0:88:00:fb:5c:05:1e:1e:35:7a:ea:25:ec:
b4:64:42:a2:cc:ee:18:43:08:80:a3:5d:13:96:01:67:e4:6c:
6d:88:e1:f7:b0:76:79:a9:18:14:cb:68:7e:7e:40:83:e3:e4:
61:44:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:47 2025 by rpki-client