Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/3075B79AA83B11F08DE4178BDAE4EC9C.roa
File: 3075B79AA83B11F08DE4178BDAE4EC9C.roa (raw, json)
Hash identifier: MTFce5WtJZPL9HdIzD6xgiNe/EZ7LlPCAda85tZnCIE=
Subject key identifier: 8F:55:F3:D4:05:80:7B:06:CB:E0:5E:1C:F2:A8:1C:E6:2A:45:65:CB
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 0424
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/3075B79AA83B11F08DE4178BDAE4EC9C.roa
Signing time: Mon 13 Oct 2025 13:47:42 +0000
ROA not before: Mon 13 Oct 2025 13:47:32 +0000
ROA not after: Tue 31 Dec 2030 13:47:32 +0000
asID: 15964
IP address blocks: 154.72.139.0/24 maxlen: 24
154.72.140.0/24 maxlen: 24
154.72.141.0/24 maxlen: 24
154.72.143.0/24 maxlen: 24
154.72.144.0/20 maxlen: 20
154.72.146.0/24 maxlen: 24
154.72.147.0/24 maxlen: 24
154.72.160.0/23 maxlen: 23
154.72.162.0/23 maxlen: 23
154.72.164.0/24 maxlen: 24
154.72.165.0/24 maxlen: 24
154.72.166.0/24 maxlen: 24
154.72.168.0/24 maxlen: 24
154.72.170.0/24 maxlen: 24
154.72.176.0/24 maxlen: 24
154.72.183.0/24 maxlen: 24
154.72.184.0/24 maxlen: 24
154.72.187.0/24 maxlen: 24
154.72.188.0/24 maxlen: 24
154.72.189.0/24 maxlen: 24
154.72.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1060 (0x424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Oct 13 13:47:32 2025 GMT
Not After : Dec 31 13:47:32 2030 GMT
Subject: CN=68ed02fe-ba85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:ab:26:fa:8e:72:ed:a3:b6:52:e3:6a:2b:
d0:9e:36:c0:fd:aa:60:86:d9:43:56:6c:19:cd:d1:
07:33:92:af:37:4c:d3:47:50:3e:88:8b:d2:40:57:
e4:06:f4:28:b7:61:c1:f4:ad:e2:d1:d9:15:4c:5e:
a9:a1:27:23:2e:b6:01:7c:92:83:a8:53:5c:bb:d4:
67:c9:8e:ce:74:f1:18:61:1d:40:3f:26:15:87:a9:
00:26:78:a0:e8:e7:cb:69:29:39:b3:a3:96:72:b8:
2f:e7:5b:62:98:37:1b:7c:96:54:12:97:f2:19:dc:
ec:8b:d7:b2:de:d8:21:7c:ff:61:11:3c:13:46:00:
8f:c9:dc:44:ac:0b:94:df:72:64:f6:9b:53:77:c6:
09:27:7c:56:81:ef:c5:9a:73:ef:04:47:7a:ec:9a:
bf:dc:37:6f:b4:5c:c0:19:0f:fb:a9:3d:8a:7b:47:
e0:88:48:64:3b:4d:11:bb:cd:27:25:7f:0d:bb:99:
ed:5b:f1:af:49:06:16:7a:10:b2:c1:ea:c0:0a:53:
23:f6:96:63:e9:39:c0:3f:25:4c:fa:34:58:a8:0f:
e7:05:f6:3a:7d:a3:5d:3d:f6:65:8f:65:00:66:75:
39:a9:99:67:ef:ab:66:79:e0:c9:29:57:e3:5d:e4:
2c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:55:F3:D4:05:80:7B:06:CB:E0:5E:1C:F2:A8:1C:E6:2A:45:65:CB
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/3075B79AA83B11F08DE4178BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.139.0-154.72.141.255
154.72.143.0-154.72.166.255
154.72.168.0/24
154.72.170.0/24
154.72.176.0/24
154.72.183.0-154.72.184.255
154.72.187.0-154.72.190.255
Signature Algorithm: sha256WithRSAEncryption
7d:7e:0a:f5:8e:7b:ba:b8:41:0c:82:5f:ee:6d:37:4f:4f:03:
42:36:81:3d:93:fa:0c:9e:32:1b:3f:8f:77:1e:fc:43:10:2a:
6a:b0:b6:3c:c3:11:cf:bb:e9:63:fb:9a:2d:54:04:4f:0f:fb:
b1:ed:2c:13:8b:f7:0a:35:2e:bb:e1:07:12:b2:8a:03:d7:ac:
a9:60:15:a3:7f:4f:cd:fe:4d:80:cf:83:1c:30:e9:f7:38:2e:
28:44:4c:2a:7d:c6:95:9e:37:07:2c:50:0c:a0:01:58:b6:4a:
5c:87:16:0c:9c:6b:0f:53:c6:ee:c2:37:5f:52:39:e5:32:23:
02:84:52:d3:55:17:73:29:1d:66:12:29:39:8b:a5:d0:34:e2:
4c:f6:a9:21:40:f9:03:91:e4:4e:f9:dd:27:f0:21:44:ee:52:
e2:83:5d:ca:41:a6:96:37:1b:2b:be:b6:dc:2a:8b:cf:67:af:
32:72:64:41:20:bc:a0:21:75:1b:e1:84:1e:8d:e1:f5:0b:b3:
89:8f:43:fc:29:a0:4a:dc:33:30:35:74:06:95:df:af:83:91:
4c:88:5a:e2:02:20:ff:5a:aa:1b:e7:2f:27:c2:08:a8:ce:be:
fb:97:08:f9:d1:09:a6:75:d6:36:03:bf:66:fe:cb:be:c8:bf:
41:67:5a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:49:53 2025 by rpki-client