Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/104BDCE8B34D11F0B20A7FC8DAE4EC9C.roa
File: 104BDCE8B34D11F0B20A7FC8DAE4EC9C.roa (raw, json)
Hash identifier: 9umI4BvhAlgJjMencUUdemFumCYiF9a9qr+x16a/9YM=
Subject key identifier: F9:E8:ED:00:A2:9C:DD:93:51:47:90:60:01:15:A4:FE:13:44:0B:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A53F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/104BDCE8B34D11F0B20A7FC8DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 15:53:22 +0000
ROA not before: Mon 27 Oct 2025 15:53:17 +0000
ROA not after: Mon 17 Nov 2025 15:53:17 +0000
asID: 54801
IP address blocks: 154.81.140.0/24 maxlen: 24
154.81.164.0/24 maxlen: 24
154.81.178.0/24 maxlen: 24
154.83.128.0/24 maxlen: 24
154.83.135.0/24 maxlen: 24
154.83.137.0/24 maxlen: 24
154.83.141.0/24 maxlen: 24
154.83.209.0/24 maxlen: 24
154.83.211.0/24 maxlen: 24
154.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107839 (0x1a53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 15:53:17 2025 GMT
Not After : Nov 17 15:53:17 2025 GMT
Subject: CN=68ff9572-9917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:1b:ac:3f:69:9f:9e:41:67:41:64:4d:84:
f5:7d:1a:84:8e:83:49:ea:50:0a:e4:cf:59:5a:37:
d6:21:74:53:c0:b1:7d:9c:d3:ec:46:3c:78:fa:3b:
19:69:8d:79:19:1e:f9:57:88:a2:9c:9a:e7:c5:da:
31:36:71:1a:26:db:33:21:f1:b5:04:25:54:87:95:
a7:96:84:df:ee:cd:7e:f0:d6:b2:78:3e:48:f2:99:
fd:a4:fa:26:68:24:a7:b1:e5:24:5f:3e:48:14:68:
3e:75:e3:1b:fd:bc:71:79:91:e5:72:dd:44:b3:90:
be:80:8c:01:a7:f4:02:09:ea:8f:12:92:ef:0d:8f:
45:46:d6:a6:16:13:d5:4a:63:73:4c:96:d0:e7:64:
63:8d:7b:9a:c4:7d:90:f0:8b:82:99:6a:31:39:ab:
a9:aa:29:02:e6:ea:b0:bd:ad:2e:64:d7:e7:d6:2d:
fe:ab:44:dd:66:bb:f3:69:b2:34:48:9b:2b:0e:58:
21:e3:00:b7:d0:54:32:35:4b:87:2f:d3:ea:59:7e:
46:6d:72:3a:d3:1f:32:2c:cf:d9:9f:66:0f:44:54:
0d:37:96:3d:42:5d:a0:31:71:90:5f:7b:aa:a0:32:
f7:7b:a9:6f:bb:83:3f:27:85:f2:ac:e8:d8:36:8e:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E8:ED:00:A2:9C:DD:93:51:47:90:60:01:15:A4:FE:13:44:0B:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/104BDCE8B34D11F0B20A7FC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.140.0/24
154.81.164.0/24
154.81.178.0/24
154.83.128.0/24
154.83.135.0/24
154.83.137.0/24
154.83.141.0/24
154.83.209.0/24
154.83.211.0/24
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a9:d2:6c:7a:e4:fb:c5:f1:0f:a3:27:0b:ee:fb:ea:0e:06:
f2:0d:95:8b:ca:d7:7c:c6:28:ce:39:41:d5:93:61:5e:8d:85:
36:3b:6b:d0:d3:ad:22:3c:1a:ec:aa:79:eb:f6:21:9d:91:9e:
c6:3e:b7:6e:e7:6c:dd:d9:b9:f4:e7:c2:ec:55:cd:c4:e9:ec:
39:79:8c:58:c6:3e:ce:f5:f6:0a:25:6a:26:0d:49:9c:8d:fc:
2b:97:76:a2:89:84:2d:40:cd:84:80:a0:00:bd:07:9c:0a:1d:
a1:13:46:78:e1:85:6f:c4:48:69:c1:34:32:7f:cb:b7:dc:ba:
0d:ee:35:f2:0f:8e:7d:08:dd:08:cc:4a:4b:78:98:2d:de:1e:
c8:94:11:3b:b6:bc:5f:c5:4d:1f:d0:be:a0:c1:85:44:65:9e:
d6:96:40:8e:b5:a4:df:49:e1:c2:74:84:ab:4c:35:0e:c4:75:
1d:41:34:c6:0c:9a:14:78:16:d6:98:0f:26:cf:f3:6b:08:2d:
a8:aa:18:70:05:05:85:22:6c:64:64:6e:68:f2:4f:47:1c:64:
3f:e3:99:c3:e8:fb:80:8b:ac:1b:0e:d7:1c:e8:8e:f9:77:5a:
5d:18:04:ae:00:de:37:fd:38:85:f8:af:a6:81:6f:40:c7:e0:
8d:b9:c8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:46:16 2025 by rpki-client