Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF27602E995A11F08FCC109CDAE4EC9C.roa
File: FF27602E995A11F08FCC109CDAE4EC9C.roa (raw, json)
Hash identifier: LDnWyHFesq47o1wBNOg3mdF+4vFwlYzguwIECrQK37E=
Subject key identifier: B5:98:84:7C:D7:F4:0C:F1:8D:D5:BA:E6:5F:19:4F:F1:34:E3:72:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A08A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF27602E995A11F08FCC109CDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 15:27:36 +0000
ROA not before: Wed 24 Sep 2025 15:27:31 +0000
ROA not after: Thu 30 Oct 2025 15:27:31 +0000
asID: 9304
IP address blocks: 154.193.35.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
154.203.241.0/24 maxlen: 24
154.203.242.0/24 maxlen: 24
154.208.76.0/22 maxlen: 24
154.208.84.0/22 maxlen: 24
154.212.144.0/23 maxlen: 24
154.212.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106634 (0x1a08a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 15:27:31 2025 GMT
Not After : Oct 30 15:27:31 2025 GMT
Subject: CN=68d40de8-39d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:e6:ea:6f:91:52:e2:f0:6d:53:8e:ba:e2:
45:e7:4e:87:ea:ef:fb:a5:c4:59:65:14:f4:45:b4:
75:fc:a2:e4:06:88:42:bd:ae:ca:04:1e:e8:d4:a7:
c1:40:02:7d:3d:7e:9e:59:95:62:aa:6d:c0:b1:00:
81:35:69:54:08:8c:65:c4:58:01:78:a9:72:17:4a:
0d:45:98:49:bb:23:5a:40:6e:64:ed:9d:8f:c9:c3:
a7:1a:99:58:fa:14:ff:0d:e9:40:af:29:71:c4:c8:
7e:ee:cf:5c:8a:c8:e2:e4:2b:f6:82:a5:61:1b:72:
db:cc:ee:96:6e:d7:98:ad:8c:e0:90:03:75:9c:32:
27:49:bb:c4:aa:cb:1a:4e:79:e6:36:9a:5f:c9:7d:
64:83:19:c6:66:54:60:21:94:46:04:91:cc:7d:7c:
c3:bd:b5:e1:97:af:e6:81:3c:3b:1e:6e:cd:ed:b9:
f4:ce:66:ce:58:dd:b1:2a:9d:89:4d:dd:9e:8f:ba:
c6:02:6f:f9:33:83:e8:6d:2a:3d:cc:0f:2e:8c:3b:
27:92:38:f4:5e:bf:f2:71:55:c8:78:ba:e7:c0:d6:
4a:6c:7b:fb:a6:5a:63:ed:2a:36:06:6f:cc:d1:b7:
5f:50:38:9c:0b:8c:ae:ba:c0:df:d0:c9:58:f9:de:
81:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:98:84:7C:D7:F4:0C:F1:8D:D5:BA:E6:5F:19:4F:F1:34:E3:72:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF27602E995A11F08FCC109CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.35.0/24
154.196.179.0-154.196.180.255
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.131.0/24
154.200.140.0/24
154.200.142.0/24
154.200.160.0-154.200.162.255
154.200.191.0/24
154.203.241.0-154.203.242.255
154.208.76.0/22
154.208.84.0/22
154.212.144.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:bd:a1:6f:0a:d4:c8:3e:a8:03:37:e2:a1:f0:51:39:38:8e:
f5:be:67:ce:ac:bf:8e:ec:8e:76:21:01:1b:dd:15:b6:21:7b:
b2:38:06:0d:3c:27:08:7d:8d:ea:96:0a:db:11:62:88:b2:02:
48:65:36:c0:bb:73:4b:77:af:95:61:c1:e6:bc:df:26:47:5d:
fc:fb:4e:ea:cb:73:2b:1c:f4:9b:e4:17:12:3e:84:d9:75:e8:
ed:6c:c0:16:a8:2e:c1:ea:9c:02:55:2d:2e:e9:22:fa:1c:5b:
65:45:11:0e:07:c5:61:7f:d1:7a:c3:49:1f:fa:66:c5:59:75:
23:11:07:7a:81:ce:f6:ed:ac:24:be:f2:36:e2:ea:34:03:cb:
5d:51:d1:4b:22:76:64:83:b7:1a:6f:ec:9a:06:d3:01:70:44:
47:e1:0e:46:f2:dc:9f:2e:43:89:7d:44:11:50:9b:6b:98:90:
76:2b:e3:02:2f:1f:df:f4:c0:0e:d8:d1:90:03:a9:52:96:50:
bd:25:7d:fe:fc:c3:e9:32:a7:f9:70:9a:4a:de:65:40:23:1e:
73:45:91:25:57:79:3d:9d:e4:82:51:9c:ce:22:3c:34:c7:cf:
d0:3e:4e:53:70:49:aa:54:54:6f:bb:34:b7:58:b1:8b:bb:9b:
c8:5b:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:52 2025 by rpki-client