Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C07F341699EE11F099C66CE0DAE4EC9C.roa
File: C07F341699EE11F099C66CE0DAE4EC9C.roa (raw, json)
Hash identifier: L2UDadyO0fhz5e3WYSHARaLq+na/4MBt/9Uk7ypGQew=
Subject key identifier: 06:EB:69:B0:DD:9F:4D:B6:50:96:0A:4D:A3:9C:41:99:B8:91:DC:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C07F341699EE11F099C66CE0DAE4EC9C.roa
Signing time: Thu 25 Sep 2025 09:05:16 +0000
ROA not before: Thu 25 Sep 2025 09:05:08 +0000
ROA not after: Thu 04 Dec 2025 09:05:08 +0000
asID: 63139
IP address blocks: 154.81.1.0/24 maxlen: 24
154.93.64.0/24 maxlen: 24
154.93.65.0/24 maxlen: 24
154.93.66.0/24 maxlen: 24
154.93.67.0/24 maxlen: 24
154.93.68.0/24 maxlen: 24
154.93.69.0/24 maxlen: 24
154.93.70.0/24 maxlen: 24
154.93.71.0/24 maxlen: 24
154.93.72.0/24 maxlen: 24
154.93.73.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.75.0/24 maxlen: 24
154.93.76.0/24 maxlen: 24
154.93.77.0/24 maxlen: 24
154.93.78.0/24 maxlen: 24
154.93.79.0/24 maxlen: 24
154.93.80.0/24 maxlen: 24
154.93.81.0/24 maxlen: 24
154.93.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106731 (0x1a0eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:05:08 2025 GMT
Not After : Dec 4 09:05:08 2025 GMT
Subject: CN=68d505cc-5b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:5e:89:2d:03:5b:7f:49:c4:ee:a7:27:cd:
11:39:e6:85:4b:d1:c7:76:96:3b:ad:01:62:4c:94:
97:e0:8d:0f:fb:56:aa:bf:8c:8a:f3:ff:5b:08:10:
c2:c1:22:b1:55:e6:b3:75:8a:0e:43:36:60:c9:9d:
62:ff:a4:a6:d2:14:ab:65:f6:32:67:11:5e:8f:fe:
fd:5c:87:55:5e:68:61:41:52:ca:c9:61:61:8e:c1:
c0:43:e0:3c:85:ac:c9:5a:49:74:a6:93:16:90:85:
d7:ff:0e:fe:5a:e2:c0:e5:c9:83:77:04:72:e3:9f:
8a:51:70:fb:53:cf:c8:98:80:00:49:bf:13:fd:a4:
da:8c:7f:33:1e:a1:2c:03:ca:f4:1d:47:e9:bd:75:
e6:4f:53:89:2e:5a:0b:cb:5e:4d:7a:bd:24:5c:9d:
ca:d2:2c:37:b9:07:5b:b7:2b:d5:6e:02:77:47:fa:
a8:c2:3e:3e:ac:4a:eb:f7:7e:8f:9d:3d:72:19:f2:
45:d7:3d:92:cc:eb:da:fd:67:28:b3:e8:fc:07:a9:
af:c0:b2:4c:e4:ef:6c:1d:bd:70:60:56:49:d5:c4:
ef:ee:45:03:91:83:31:f0:34:61:f0:62:7d:3a:d8:
11:4b:4c:96:1b:6f:57:52:1b:da:78:7a:be:d5:13:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EB:69:B0:DD:9F:4D:B6:50:96:0A:4D:A3:9C:41:99:B8:91:DC:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C07F341699EE11F099C66CE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.1.0/24
154.93.64.0-154.93.82.255
Signature Algorithm: sha256WithRSAEncryption
12:6c:8a:e4:11:d4:cd:97:47:b5:d0:ab:ea:1c:19:5f:b7:71:
b8:8f:df:bf:14:ee:f3:e5:7b:99:ec:95:61:26:3e:da:f3:06:
b3:5f:89:1b:b2:2d:8e:9b:67:82:f4:1c:30:38:1b:6f:65:52:
8c:06:13:12:f7:59:c7:6d:7a:66:a2:ca:1b:ff:66:dd:78:11:
f5:c8:0c:3d:a9:81:18:52:4d:a1:02:09:0b:91:02:ed:69:58:
17:9b:74:4f:87:87:52:e0:e7:e1:34:c1:44:5b:4b:7c:a6:e4:
80:96:52:a0:2f:90:16:18:f1:99:4b:dd:19:8d:9f:e9:6d:b4:
4b:65:43:a7:f6:c7:f2:e0:27:5e:92:12:1c:4d:53:15:51:c8:
b8:15:57:e6:21:64:af:81:bd:eb:1e:2a:e9:11:d5:68:27:5d:
4d:ce:6c:63:b5:bf:2a:80:cd:77:65:5f:e1:8a:af:36:ba:e9:
49:c9:05:37:a6:35:36:d7:4c:32:ab:d0:07:65:e3:fa:89:f3:
91:53:9f:e6:92:41:0f:5a:2c:f3:ac:0f:d5:e3:5d:17:97:13:
4f:92:75:ab:50:7b:a2:f9:0e:07:81:10:b9:f0:ad:8e:42:94:
b9:f3:7f:09:83:d1:41:3a:4f:1e:4e:85:68:83:90:b5:c5:db:
32:67:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:47 2025 by rpki-client