Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10406EE2B63311F09063B98BDAE4EC9C.roa
File: 10406EE2B63311F09063B98BDAE4EC9C.roa (raw, json)
Hash identifier: Lsyj5tG+fGrjZ8XjifOzvjy2N/uLgZaNIm6cG4VG+w4=
Subject key identifier: 24:45:18:0D:1B:04:F3:4A:BC:0F:8A:1A:E0:E1:8E:77:94:C8:C5:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10406EE2B63311F09063B98BDAE4EC9C.roa
Signing time: Fri 31 Oct 2025 08:24:48 +0000
ROA not before: Fri 31 Oct 2025 08:24:42 +0000
ROA not after: Mon 08 Dec 2025 08:24:42 +0000
asID: 20326
IP address blocks: 154.82.195.0/24 maxlen: 24
154.84.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108228 (0x1a6c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 31 08:24:42 2025 GMT
Not After : Dec 8 08:24:42 2025 GMT
Subject: CN=69047250-13f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:bb:96:93:cc:92:88:4e:0f:06:59:78:d0:
d0:63:c7:c7:e7:bc:b4:68:00:53:8a:7d:7e:57:d6:
fa:b5:ce:18:0b:c3:16:aa:a6:c1:a4:d3:af:d4:f6:
8a:a2:51:04:25:aa:ea:df:e5:70:8c:b0:88:43:1d:
1e:f8:d9:da:dd:9a:f1:52:bf:c8:3f:ef:2a:eb:c9:
5b:69:5a:96:ea:70:3e:c2:26:72:8c:d6:45:a8:76:
d6:42:f8:7d:c0:87:61:7b:9b:c4:13:60:68:8d:91:
24:2d:a2:75:91:0e:35:0b:99:dd:2f:b2:86:c8:31:
1e:af:16:a8:7b:63:af:09:50:bf:d2:d4:6b:c4:21:
1f:5f:29:82:1a:5e:ac:1c:1a:21:b0:00:fd:19:1a:
cd:d4:13:94:fa:3a:1b:92:b8:28:a0:9d:c0:ae:e5:
0b:28:af:30:73:3e:b9:b4:ae:e8:2f:4c:a1:31:16:
44:d3:f7:7c:54:f6:e4:4c:de:ea:9e:a6:d4:2d:fc:
b4:76:23:7f:d3:c4:a9:90:75:25:c9:db:9d:cc:03:
93:aa:78:f6:02:9e:76:d8:ab:9e:d4:d1:cf:e8:de:
bd:30:65:a1:ce:a8:93:37:1e:a0:7c:5b:ec:68:8b:
bd:2d:2b:7a:11:ab:3f:b3:cf:67:9a:ca:cb:3c:24:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:45:18:0D:1B:04:F3:4A:BC:0F:8A:1A:E0:E1:8E:77:94:C8:C5:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10406EE2B63311F09063B98BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.195.0/24
154.84.174.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:bb:fe:6a:75:92:0c:2a:9e:68:a4:cf:b7:5b:c2:a1:4c:2b:
d1:32:1b:a2:50:b9:da:c2:8a:be:5d:71:df:90:c5:c3:e3:10:
9d:28:df:97:5b:37:2a:b8:fe:34:28:2b:ef:5f:e4:ec:29:89:
e7:39:58:54:bd:80:e6:69:7e:b0:7a:de:3c:6d:eb:d7:b1:59:
b4:75:77:01:e0:27:33:78:9e:c0:a3:ce:72:fc:5c:53:8f:5d:
59:6c:4a:c3:f5:db:c6:e1:9d:7f:c2:e8:c0:52:73:93:6b:67:
63:31:1f:0f:5f:86:59:d3:b2:9f:0d:47:ff:71:1e:bd:8f:6b:
83:19:8c:69:24:11:4e:06:26:ca:ba:e8:5d:23:48:01:a8:3c:
2f:6c:b4:df:20:5f:7c:e1:94:4b:5e:15:d3:8c:c8:67:6d:8c:
be:f6:c8:4b:fb:a7:c5:0c:0c:0f:1a:3d:25:6a:24:da:7b:ff:
f4:09:d8:91:fb:9a:6d:12:3a:01:7e:fe:ea:c1:98:cd:7c:7c:
eb:bc:36:f4:09:93:9b:4f:95:d7:98:bb:a1:ab:3e:9d:ef:bd:
7a:b7:6d:22:d3:1d:7b:f6:f9:03:d3:47:de:12:f5:40:9f:1e:
8b:cb:47:8a:55:36:66:2b:f8:1a:02:4c:c4:5a:b4:73:08:b3:
79:e9:10:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:59 2025 by rpki-client