Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4DBF0E89AC011F09F34F2B1DAE4EC9C.roa
File: D4DBF0E89AC011F09F34F2B1DAE4EC9C.roa (raw, json)
Hash identifier: F+Mm84pSIt+NK+QsbW05iewHf7ycS6fLgQLxleyhQiE=
Subject key identifier: 32:08:6B:A7:58:B1:8E:4E:A1:B3:F4:F6:C0:7A:49:62:52:C1:E4:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A129
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4DBF0E89AC011F09F34F2B1DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 10:09:05 +0000
ROA not before: Fri 26 Sep 2025 10:09:00 +0000
ROA not after: Thu 04 Dec 2025 10:09:00 +0000
asID: 138915
IP address blocks: 154.93.40.0/23 maxlen: 24
154.93.72.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.96.0/24 maxlen: 24
154.93.97.0/24 maxlen: 24
154.93.98.0/24 maxlen: 24
154.93.99.0/24 maxlen: 24
154.93.102.0/24 maxlen: 24
154.93.103.0/24 maxlen: 24
154.93.106.0/24 maxlen: 24
154.95.80.0/24 maxlen: 24
154.95.81.0/24 maxlen: 24
154.95.82.0/24 maxlen: 24
154.95.83.0/24 maxlen: 24
154.95.84.0/24 maxlen: 24
154.95.85.0/24 maxlen: 24
154.95.86.0/23 maxlen: 24
154.95.88.0/24 maxlen: 24
154.95.89.0/24 maxlen: 24
154.95.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106793 (0x1a129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 10:09:00 2025 GMT
Not After : Dec 4 10:09:00 2025 GMT
Subject: CN=68d66641-df6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:48:df:92:62:0a:0d:5c:33:cc:cf:86:f2:
f9:5b:30:f8:5e:e5:18:21:54:23:bb:7f:ba:86:d3:
74:36:4a:8d:66:de:2c:ec:ae:97:b6:04:80:08:da:
fe:b2:8a:18:01:3a:25:db:52:95:2e:93:fb:9b:12:
7e:a9:35:cc:65:c5:b4:cd:b9:51:e4:14:25:b8:8d:
81:5a:7e:2f:db:d9:52:54:d6:4b:58:45:82:84:0b:
80:f3:9e:ab:94:63:f5:60:4f:cc:af:a6:de:00:fe:
3b:31:a5:22:50:25:9c:df:9e:85:05:c5:55:09:b5:
c1:63:9d:fe:47:45:34:50:be:3f:cf:c7:01:3b:e0:
96:ad:ab:dd:14:c2:b5:98:f0:67:4d:24:56:d4:12:
e5:91:a6:58:6d:5b:f4:5f:9d:0d:27:bc:fb:1c:b6:
4a:c6:69:75:ae:d0:46:ce:e8:be:a1:2f:ae:53:9e:
66:7d:88:0b:84:b3:60:41:8b:f4:1b:72:76:e0:fa:
09:2f:12:1d:67:16:65:9c:ae:dd:87:e3:1b:47:c3:
76:3f:f1:8a:a2:05:64:e3:ab:ce:ec:c9:4b:7c:d0:
b4:e8:7c:10:03:98:dd:a0:3a:2e:02:56:a3:6e:b3:
42:e6:f3:18:82:fc:53:ae:31:d9:7f:d4:71:95:8b:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:08:6B:A7:58:B1:8E:4E:A1:B3:F4:F6:C0:7A:49:62:52:C1:E4:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4DBF0E89AC011F09F34F2B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.40.0/23
154.93.72.0/24
154.93.74.0/24
154.93.96.0/22
154.93.102.0/23
154.93.106.0/24
154.95.80.0-154.95.90.255
Signature Algorithm: sha256WithRSAEncryption
40:48:86:9a:8c:38:50:d0:02:c3:fa:a6:84:fb:a6:26:f0:53:
7e:94:82:40:7e:3a:f4:d0:7a:31:6f:f5:f6:62:1a:d8:8f:c8:
08:89:d4:f9:0c:1c:87:c0:13:3c:5f:fb:ca:65:a5:0d:22:91:
38:03:da:10:85:c6:6d:3e:7a:19:66:af:ac:c9:3b:85:2c:1c:
d8:1c:bb:47:c8:13:c0:f1:e5:96:ed:63:f1:9c:44:5e:b9:e1:
93:09:62:d7:c6:d1:1c:01:53:3a:45:da:74:34:74:61:44:12:
1e:47:1b:b7:68:4e:78:43:6e:70:d9:5f:6d:b1:a4:1c:cc:27:
b2:e9:7f:c7:5d:74:07:09:50:44:bb:3c:f5:48:52:de:ef:3a:
c2:4b:fd:8a:6d:67:aa:17:e1:91:00:c9:15:f8:e7:a6:6b:a5:
69:57:00:98:ae:dc:ed:73:99:bc:8b:43:f6:58:b8:e1:96:00:
08:91:ba:68:36:78:8e:45:fa:a2:2b:72:90:a8:fa:a7:fc:31:
55:fe:56:68:60:9a:61:51:ea:34:12:0a:66:76:3b:21:ee:d5:
06:cb:d9:80:64:de:87:d8:ce:3f:6e:7c:4e:95:33:ce:7f:6e:
47:c4:88:71:7d:9e:f4:22:84:3b:5d:7e:14:4a:7b:dc:34:3e:
78:61:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:43 2025 by rpki-client