Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B97E72209D5511F0A7F649E0DAE4EC9C.roa
File: B97E72209D5511F0A7F649E0DAE4EC9C.roa (raw, json)
Hash identifier: cvhtQwU5mmVKgRnw+C+EPm03ALpfWhTWAOm/m4/uuJ0=
Subject key identifier: 11:7D:A8:4D:0D:73:8D:B9:73:FC:DF:A9:B1:FB:26:28:7C:BD:F8:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A163
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B97E72209D5511F0A7F649E0DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 16:59:56 +0000
ROA not before: Mon 29 Sep 2025 16:59:51 +0000
ROA not after: Fri 31 Oct 2025 16:59:51 +0000
asID: 62240
IP address blocks: 154.194.72.0/24 maxlen: 24
154.194.73.0/24 maxlen: 24
154.194.74.0/24 maxlen: 24
154.194.89.0/24 maxlen: 24
154.194.92.0/24 maxlen: 24
154.194.93.0/24 maxlen: 24
154.194.98.0/24 maxlen: 24
154.196.18.0/24 maxlen: 24
154.196.22.0/24 maxlen: 24
154.196.50.0/24 maxlen: 24
154.196.54.0/24 maxlen: 24
154.196.55.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
154.196.62.0/24 maxlen: 24
154.196.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106851 (0x1a163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 16:59:51 2025 GMT
Not After : Oct 31 16:59:51 2025 GMT
Subject: CN=68dabb0c-d29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:29:33:2d:44:88:da:40:ee:d4:5c:85:ab:
11:5c:af:e3:2d:ae:2c:ca:ea:ba:f6:be:dd:b7:4d:
00:72:55:c9:04:9f:41:ff:bf:a9:4c:4c:b3:0a:6b:
ca:0f:73:00:e2:42:b3:be:cf:34:79:53:50:da:17:
b8:01:f5:1b:c6:f1:81:77:52:3b:24:a1:b0:6c:0a:
de:c3:38:cf:82:9a:1d:53:66:14:f0:bd:e8:97:6e:
83:a4:10:44:a7:87:e8:2c:a3:0b:a9:d3:16:ec:b1:
d9:7b:16:6c:3f:e1:a1:8c:9b:c0:19:b4:3b:f0:12:
8f:56:59:72:4b:74:45:36:c0:4b:f9:4e:7b:5a:e3:
8e:98:1d:99:33:e3:da:8b:4f:ad:f9:0e:6a:68:cd:
5a:c7:c8:1a:89:5d:db:be:e3:00:60:1b:37:08:6c:
1c:ae:b8:64:e8:8e:ab:08:9f:5b:99:fc:2a:1e:92:
e2:45:bd:05:d7:51:ae:b1:a4:78:7e:65:95:20:c1:
3e:7d:84:2a:16:41:53:7d:b8:c0:39:03:e7:fb:25:
6d:69:e5:fc:e7:5b:55:ed:8c:45:91:81:f6:d3:72:
71:3b:26:4f:83:7c:c9:02:cd:36:b7:95:70:67:2a:
62:75:2a:6b:b6:e2:14:79:fa:e7:b0:16:a4:d1:2e:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7D:A8:4D:0D:73:8D:B9:73:FC:DF:A9:B1:FB:26:28:7C:BD:F8:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B97E72209D5511F0A7F649E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0-154.194.74.255
154.194.89.0/24
154.194.92.0/23
154.194.98.0/24
154.196.18.0/24
154.196.22.0/24
154.196.50.0/24
154.196.54.0-154.196.62.255
154.196.64.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:17:79:f9:fc:5f:59:70:1a:d7:b7:c7:73:b3:8a:39:7d:41:
6b:8f:56:cb:d5:00:eb:aa:84:8e:bb:f2:76:e8:c5:2b:e2:af:
93:b7:ce:fd:c3:c7:72:47:da:ac:69:e5:06:cf:03:61:66:35:
a7:5d:f5:69:70:57:ff:20:d8:2c:74:0b:71:c6:6b:3e:fa:0c:
3b:39:70:49:5c:19:c4:8d:19:67:1f:78:d5:39:a4:6a:57:04:
5f:57:44:c3:41:b1:37:75:f5:bd:83:10:e8:d1:8a:19:f8:c4:
1e:1f:f1:4c:2b:e2:2e:7b:de:0d:bb:71:8b:ea:d7:67:e1:94:
7e:04:64:b7:ef:01:1d:d5:58:0d:ad:46:ea:a0:88:48:08:00:
01:27:e9:9c:70:d0:d4:0c:ac:c6:39:f7:73:66:ca:bd:b3:6b:
81:ba:12:66:e2:15:c1:9f:dc:07:c1:1b:7b:f6:0d:0f:73:ef:
e6:2e:97:f1:ae:de:f0:f4:4f:c7:b6:f9:e8:45:a1:03:79:ea:
a6:2e:ac:14:d4:d2:27:31:e7:6d:ee:7a:8e:d8:1f:88:2b:d2:
a5:55:66:fe:61:9e:32:d1:2e:d4:e2:59:94:c6:2f:21:75:41:
b0:33:52:73:9b:76:38:c5:45:a9:8f:fa:75:98:ca:e1:c7:94:
63:30:8c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:54 2025 by rpki-client