Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C77E345E9D5611F0A37F8CE8DAE4EC9C.roa
File: C77E345E9D5611F0A37F8CE8DAE4EC9C.roa (raw, json)
Hash identifier: IgOBPUrV//LsU5MApnbaMPYvHAzPgBAMuJ+9aiFTArs=
Subject key identifier: 44:F0:45:6F:A8:EE:00:B2:B3:62:6B:68:48:5B:A6:85:80:7F:CD:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A165
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C77E345E9D5611F0A37F8CE8DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 17:07:29 +0000
ROA not before: Mon 29 Sep 2025 17:07:24 +0000
ROA not after: Fri 31 Oct 2025 17:07:24 +0000
asID: 62240
IP address blocks: 154.194.79.0/24 maxlen: 24
154.194.99.0/24 maxlen: 24
154.194.100.0/24 maxlen: 24
154.194.101.0/24 maxlen: 24
154.194.102.0/24 maxlen: 24
154.194.104.0/24 maxlen: 24
154.194.105.0/24 maxlen: 24
154.194.106.0/24 maxlen: 24
154.194.107.0/24 maxlen: 24
154.194.108.0/24 maxlen: 24
154.196.63.0/24 maxlen: 24
154.196.65.0/24 maxlen: 24
154.196.66.0/24 maxlen: 24
154.196.67.0/24 maxlen: 24
154.196.69.0/24 maxlen: 24
154.196.71.0/24 maxlen: 24
154.196.72.0/24 maxlen: 24
154.196.73.0/24 maxlen: 24
154.196.74.0/24 maxlen: 24
154.196.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106853 (0x1a165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 17:07:24 2025 GMT
Not After : Oct 31 17:07:24 2025 GMT
Subject: CN=68dabcd1-738d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:59:7c:97:0b:a6:f9:0f:7c:57:9e:1a:24:
32:73:5a:3c:58:e3:23:7b:97:ab:af:85:a7:af:11:
25:83:4e:8c:98:ac:a2:7d:d9:8e:1a:ed:e8:ac:21:
76:4b:46:e7:08:d1:2e:71:b3:ea:fc:f2:ab:e3:63:
f3:9e:25:32:8e:38:7c:f3:b2:4e:15:58:d8:6b:c7:
a0:d5:21:ea:a5:6c:b6:d8:c7:ee:ce:88:b2:b4:32:
b0:1e:29:dd:40:d7:e5:08:e7:ee:ef:12:fb:61:65:
d3:69:54:4a:54:db:32:e8:55:ba:0f:97:be:81:61:
76:35:7f:f4:9d:2b:6e:69:ff:ac:24:c1:01:3d:dd:
62:22:c6:9a:07:71:78:0d:3e:2d:7c:5d:de:3f:7c:
29:db:b6:e1:93:0e:6f:98:32:2f:fe:17:4a:21:67:
0a:6d:f5:23:0e:6d:ac:ee:4e:8d:f4:b6:ba:2c:36:
dc:44:ec:32:75:a1:7e:4e:44:2e:dd:1f:96:a0:c7:
a2:d4:f2:4c:47:20:1e:7b:d1:bf:34:c7:fb:b7:ca:
c7:d7:96:c7:a2:ba:8a:a6:e7:ea:7e:3d:cf:79:8d:
5b:ed:75:7a:2c:7b:01:7e:c5:d2:1a:20:78:c8:0c:
5b:0d:56:ac:c1:b5:c1:1a:03:e8:2f:d4:c7:01:15:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F0:45:6F:A8:EE:00:B2:B3:62:6B:68:48:5B:A6:85:80:7F:CD:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C77E345E9D5611F0A37F8CE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.79.0/24
154.194.99.0-154.194.102.255
154.194.104.0-154.194.108.255
154.196.63.0/24
154.196.65.0-154.196.67.255
154.196.69.0/24
154.196.71.0-154.196.75.255
Signature Algorithm: sha256WithRSAEncryption
70:de:fd:0c:61:42:a5:a9:65:49:95:e9:8a:2b:67:8b:1b:b4:
53:41:64:d2:cc:41:1a:fd:85:d5:dc:fd:d6:02:db:76:a1:76:
e7:17:76:26:a3:0e:36:57:4e:92:c9:38:5f:17:52:8f:6c:af:
ff:99:bb:b5:c6:6b:bd:b4:10:1e:d5:a4:70:42:b7:f0:30:09:
a6:33:40:b5:3b:82:b6:cc:5d:4a:70:52:6d:db:04:b9:c3:49:
8e:36:eb:f5:9c:3f:c6:85:aa:0d:c4:54:49:9c:6a:2d:fa:08:
b8:08:0d:f0:d6:05:fe:8d:12:f8:50:a3:6b:08:d4:77:94:e0:
67:02:c6:9f:5c:52:b0:2b:ec:72:0e:c5:a8:38:c4:e1:56:50:
f6:6f:a8:38:d2:33:26:8c:1c:cf:57:05:c8:c0:2a:00:ac:fb:
80:25:f1:5e:f5:33:4f:c4:77:97:4a:77:b9:33:c8:c3:c0:cf:
5b:4c:b8:84:fc:d8:5d:7f:5a:60:e4:97:12:00:3b:e5:af:f9:
9c:1c:ef:0d:57:70:de:11:b3:a4:bc:6e:9c:c6:39:1c:93:ea:
6e:1a:06:17:d1:76:2f:83:b6:7b:8c:48:e3:30:cf:2d:00:5e:
a0:8a:e4:24:98:ca:2f:ed:2c:88:f5:b9:08:f8:b6:f3:5a:75:
18:42:40:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:10 2025 by rpki-client