Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E270D2549AC111F090A340BADAE4EC9C.roa
File: E270D2549AC111F090A340BADAE4EC9C.roa (raw, json)
Hash identifier: xVrx18orusmMa/kULM6riDe3HnfRb0/XTI697ioKF+Q=
Subject key identifier: A0:72:6D:A6:D6:B5:AE:24:16:C6:FA:6A:74:3D:68:D3:51:8E:78:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A12B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E270D2549AC111F090A340BADAE4EC9C.roa
Signing time: Fri 26 Sep 2025 10:16:37 +0000
ROA not before: Fri 26 Sep 2025 10:16:31 +0000
ROA not after: Thu 04 Dec 2025 10:16:31 +0000
asID: 138915
IP address blocks: 154.93.73.0/24 maxlen: 24
154.93.86.0/24 maxlen: 24
154.93.92.0/24 maxlen: 24
154.93.93.0/24 maxlen: 24
154.93.100.0/23 maxlen: 24
154.93.104.0/23 maxlen: 24
154.93.107.0/24 maxlen: 24
154.93.108.0/24 maxlen: 24
154.93.109.0/24 maxlen: 24
154.93.110.0/24 maxlen: 24
154.93.111.0/24 maxlen: 24
154.93.112.0/23 maxlen: 24
154.93.114.0/24 maxlen: 24
154.93.115.0/24 maxlen: 24
154.93.116.0/22 maxlen: 24
154.93.120.0/24 maxlen: 24
154.93.121.0/24 maxlen: 24
154.93.122.0/24 maxlen: 24
154.93.124.0/23 maxlen: 24
154.93.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106795 (0x1a12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 10:16:31 2025 GMT
Not After : Dec 4 10:16:31 2025 GMT
Subject: CN=68d66805-821f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:11:f4:6c:89:6e:81:76:45:ef:1a:4c:e9:60:
32:c2:46:4b:9e:59:18:7e:4c:f8:5c:5f:1e:19:98:
a0:00:10:b8:5b:df:b9:b2:70:33:69:00:c6:68:a5:
44:c1:6a:2e:8b:f8:87:5a:98:c0:fc:fd:b7:a2:07:
cd:63:fc:f2:4d:74:54:a6:c8:f8:2f:81:45:a3:bc:
2b:16:99:c3:df:16:93:2b:97:c1:9b:03:ab:8b:bd:
82:16:4a:ed:44:8f:77:c9:73:5b:5c:7f:2e:ca:9c:
db:12:70:00:77:c3:e6:d2:0f:db:06:97:93:95:b7:
69:43:65:16:16:13:ce:21:39:88:d9:2f:71:79:31:
3a:45:99:39:b1:16:56:59:cf:1e:d4:7d:22:f0:d8:
c5:8c:8e:7a:de:99:ef:14:96:70:88:13:bc:21:73:
63:af:f6:3d:46:32:55:9e:c7:8d:90:51:1b:7e:ca:
40:3d:4e:14:35:eb:c0:07:a9:70:b7:07:19:03:40:
cb:81:14:c0:de:50:f3:b2:c7:c7:8c:1b:45:65:d7:
c7:54:ab:ec:38:44:f2:eb:02:76:08:59:88:82:67:
c5:b1:27:52:f3:c1:b1:d5:b9:dd:46:12:bb:e7:fb:
9c:b3:96:f4:d5:84:36:9c:a3:48:97:ab:6c:a2:36:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:72:6D:A6:D6:B5:AE:24:16:C6:FA:6A:74:3D:68:D3:51:8E:78:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E270D2549AC111F090A340BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.73.0/24
154.93.86.0/24
154.93.92.0/23
154.93.100.0/23
154.93.104.0/23
154.93.107.0-154.93.122.255
154.93.124.0-154.93.126.255
Signature Algorithm: sha256WithRSAEncryption
5e:0d:17:88:2d:8f:0b:36:25:4f:1e:08:1d:5c:f6:51:7e:89:
2d:24:f5:58:48:51:fe:05:d5:c8:65:c2:13:6e:7e:6d:3a:e8:
7a:c5:e1:74:5f:de:e5:fb:6e:c1:33:81:6d:b7:0e:de:38:a7:
79:82:b9:a2:17:77:9c:c7:f7:d8:06:05:36:6b:7a:47:a0:80:
7e:25:3e:32:17:c9:b0:46:fb:f4:d6:52:bd:e6:64:2c:fb:c5:
cf:16:6c:0e:91:8c:8d:1a:62:c4:79:36:6b:c4:6c:80:28:6d:
8f:ae:25:8c:7f:20:6f:9a:2a:25:fb:44:9f:ed:b6:c3:d7:40:
86:08:a1:4a:41:dd:f1:76:b0:54:6f:53:bf:e6:e6:a4:20:0d:
6e:31:60:d1:68:0c:60:6e:58:40:f7:33:2c:00:fd:93:86:c6:
bd:51:0d:76:a7:a1:9e:b1:bf:be:12:8f:34:1d:4e:6d:57:1a:
60:f1:80:7d:8a:64:ca:54:17:a0:92:ec:b3:ff:61:58:86:99:
c3:5c:51:78:4a:e8:4f:00:a7:65:0a:8b:88:30:53:d2:82:31:
da:7f:1a:a1:5b:07:23:23:ef:3f:33:b8:6c:73:73:c2:0a:92:
84:8f:8a:dd:48:b0:07:35:34:e8:21:c6:4d:b0:47:a0:7d:ba:
93:06:46:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:49 2025 by rpki-client