Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6123A509D5711F0BD9C53EDDAE4EC9C.roa
File: D6123A509D5711F0BD9C53EDDAE4EC9C.roa (raw, json)
Hash identifier: xNMH2H2pPHxrcjy7LCcdhOdF+GWfYcZKJM4MP1E4P4s=
Subject key identifier: F3:C9:64:AA:B0:B8:AC:75:F7:82:85:B8:CE:91:7A:2B:82:BD:C4:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A167
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6123A509D5711F0BD9C53EDDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 17:15:03 +0000
ROA not before: Mon 29 Sep 2025 17:14:56 +0000
ROA not after: Fri 31 Oct 2025 17:14:56 +0000
asID: 62240
IP address blocks: 154.194.36.0/24 maxlen: 24
154.194.59.0/24 maxlen: 24
154.194.67.0/24 maxlen: 24
154.194.109.0/24 maxlen: 24
154.194.110.0/24 maxlen: 24
154.194.111.0/24 maxlen: 24
154.194.117.0/24 maxlen: 24
154.194.207.0/24 maxlen: 24
154.195.113.0/24 maxlen: 24
154.195.141.0/24 maxlen: 24
154.195.142.0/24 maxlen: 24
154.196.68.0/24 maxlen: 24
154.196.70.0/24 maxlen: 24
154.196.76.0/24 maxlen: 24
154.196.77.0/24 maxlen: 24
154.196.78.0/24 maxlen: 24
154.196.79.0/24 maxlen: 24
154.196.80.0/24 maxlen: 24
154.198.63.0/24 maxlen: 24
154.198.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106855 (0x1a167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 17:14:56 2025 GMT
Not After : Oct 31 17:14:56 2025 GMT
Subject: CN=68dabe97-3df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:92:d5:89:05:6f:0a:f2:d8:24:f5:02:90:
e4:f5:3c:09:cc:6b:e3:dc:50:ab:4c:7a:65:32:f0:
f4:af:63:e9:a8:eb:89:29:b4:07:49:fe:dd:8c:48:
e5:c6:dd:ad:ed:a1:1a:44:84:6a:f0:0f:bb:22:f6:
d4:a0:d0:57:b7:11:6a:00:24:e5:45:fc:56:63:1b:
05:f7:55:b4:c0:2e:22:a1:77:5f:ac:ef:7a:a5:c7:
3d:73:93:e9:39:ca:23:a8:4f:da:9e:d7:ed:63:92:
36:59:38:bf:bf:bb:34:14:04:65:73:c1:5d:9d:06:
93:06:8a:06:3f:17:bb:e9:d0:90:e2:c6:22:2b:8f:
d2:b4:91:e8:f9:88:d0:27:6a:58:b2:75:2a:0f:db:
61:cf:2e:2d:e0:42:c4:a2:3a:75:20:48:dd:b0:8f:
ff:d5:fa:6d:b6:e9:e7:b9:51:54:87:3f:6a:7a:8d:
92:f3:b5:8b:59:56:2d:dd:07:fe:19:0a:0a:ff:4e:
b3:f2:64:8a:3f:d0:9b:56:51:d6:5c:91:20:d4:42:
d9:39:1c:fb:88:77:17:48:05:1d:06:12:b3:d2:1f:
dd:e6:43:0e:75:55:48:3e:27:bf:5f:2d:eb:67:1b:
68:ed:24:c2:b5:88:5d:12:94:b9:d6:55:39:b7:b9:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C9:64:AA:B0:B8:AC:75:F7:82:85:B8:CE:91:7A:2B:82:BD:C4:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6123A509D5711F0BD9C53EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.36.0/24
154.194.59.0/24
154.194.67.0/24
154.194.109.0-154.194.111.255
154.194.117.0/24
154.194.207.0/24
154.195.113.0/24
154.195.141.0-154.195.142.255
154.196.68.0/24
154.196.70.0/24
154.196.76.0-154.196.80.255
154.198.63.0/24
154.198.191.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:d7:2d:11:e8:9c:51:2a:9e:90:79:9d:bb:81:68:01:54:1c:
1e:be:2b:21:20:fa:eb:a6:54:42:19:32:eb:c1:f3:d1:76:89:
27:58:7c:3b:d5:5d:56:29:5f:c7:aa:51:c0:41:e9:88:47:cf:
12:2b:0f:ae:3a:2c:de:84:0c:1e:64:55:96:fe:5a:33:74:8a:
ab:8a:0b:58:59:dd:a6:28:ca:fc:27:1d:a2:c6:a6:21:56:a5:
71:9b:76:78:d4:5c:50:f4:25:8d:45:a1:43:52:3e:c3:b8:bb:
68:53:ff:18:48:5b:3b:ff:ae:3c:3a:e1:c8:22:44:4b:dc:71:
43:76:df:38:43:80:b7:78:88:5b:2f:f0:ba:22:3a:a5:60:79:
ae:4d:c5:c6:d4:4a:b3:b7:b4:65:ba:f7:57:e9:f8:df:6b:a9:
c5:66:03:fa:fa:22:10:2d:d8:66:51:a1:a1:fa:78:7a:2d:30:
bf:00:28:d0:04:ca:d0:85:c9:6d:10:90:a7:1f:d3:d5:4f:32:
3a:ee:1b:d6:24:a0:3a:ca:7e:7e:85:1e:96:a4:b5:88:1f:05:
8c:84:2e:57:35:c3:e2:78:2a:73:9a:59:bd:87:58:8b:94:6d:
02:e3:2c:38:53:ca:53:63:d0:53:f2:af:56:14:2a:df:b8:45:
b2:73:1a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:02 2025 by rpki-client