Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1102300AB88F11F0B86EACE0DAE4EC9C.roa
File: 1102300AB88F11F0B86EACE0DAE4EC9C.roa (raw, json)
Hash identifier: c+CF9CyD1FGWhv7mys+DjpcNo/08GFwTadiliSBoqD8=
Subject key identifier: 2D:4D:BA:5F:FE:CC:DE:84:45:09:20:E0:45:3C:64:AB:71:0B:29:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A708
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1102300AB88F11F0B86EACE0DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 08:28:26 +0000
ROA not before: Mon 03 Nov 2025 08:28:21 +0000
ROA not after: Mon 09 Nov 2026 08:28:21 +0000
asID: 140224
IP address blocks: 154.200.97.0/24 maxlen: 24
154.200.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108296 (0x1a708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 08:28:21 2025 GMT
Not After : Nov 9 08:28:21 2026 GMT
Subject: CN=690867aa-04a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:4c:f4:bd:ed:5f:14:34:71:53:39:42:9f:
89:01:14:41:9a:0d:df:11:6f:81:93:1d:2a:45:c1:
0d:01:e3:06:33:c2:56:2e:8b:51:5a:6c:9c:a4:3e:
36:40:f5:75:39:87:3f:b9:1e:2f:1b:ef:10:a6:55:
f2:f9:49:d2:b3:cb:2f:ac:3b:ac:53:74:26:1c:85:
28:d5:61:64:fa:da:4f:e5:ee:7f:01:45:c5:5c:50:
d7:4d:95:dc:e4:fc:bc:8a:51:22:3b:b5:c1:fa:50:
9a:f7:df:d8:69:08:0e:da:0d:5e:db:27:e9:4b:b9:
a0:fc:e2:a6:01:ae:dc:15:69:4b:0d:73:eb:69:c2:
89:38:19:45:b9:8d:13:7d:bb:fb:10:14:a3:0b:cc:
3e:89:3d:43:34:77:6c:0a:fc:ba:2b:dd:c4:ee:8d:
f4:e4:f4:fd:9c:0e:12:4e:9f:ba:70:06:1d:77:4e:
61:03:b5:c9:b2:05:29:c1:78:fd:63:4f:5f:cc:4c:
2e:b7:f3:4c:62:79:e2:f0:54:ba:fe:9d:d1:72:ed:
a3:88:34:c1:e1:1d:ff:32:0d:95:99:9e:04:3b:73:
dd:04:ca:b3:9b:c0:d0:e7:fc:25:72:74:29:c7:4c:
c0:a9:19:16:e2:ca:04:ac:4e:c6:c5:f6:de:76:19:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:BA:5F:FE:CC:DE:84:45:09:20:E0:45:3C:64:AB:71:0B:29:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1102300AB88F11F0B86EACE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.97.0-154.200.98.255
Signature Algorithm: sha256WithRSAEncryption
82:32:b1:90:e3:29:c5:f5:9d:39:20:13:14:a4:9a:24:2d:5f:
95:30:db:e9:a5:43:1f:5b:85:06:f9:eb:56:3d:66:17:61:7f:
11:ab:6d:4a:bd:97:30:14:00:b6:8d:bf:11:c5:69:29:69:7b:
54:4e:5a:cb:d5:81:0e:2f:bf:ed:a4:05:21:87:e1:96:5c:51:
43:17:48:86:80:e8:bb:fb:86:e4:3e:e1:8d:a3:06:cc:45:27:
18:0e:3c:c4:f2:63:08:9c:d0:36:23:53:f6:87:48:b5:f7:ba:
04:87:bd:18:27:f2:cf:5d:26:f1:8b:a8:41:cb:49:95:54:be:
5c:95:e7:cc:b1:52:db:c7:2e:f0:b1:cd:9b:07:57:97:e1:11:
fb:bf:ab:21:60:23:2d:be:bf:c0:1a:54:c9:ca:88:be:a5:c9:
04:f9:88:21:d3:85:3b:1f:14:55:25:0a:2b:09:2a:7a:b8:f0:
69:c9:20:ea:03:c2:32:f0:08:8d:96:70:ef:b3:25:0b:d7:9d:
71:59:11:73:d2:30:f1:ee:92:8f:d1:36:cc:fc:28:c0:75:25:
6c:96:d4:97:aa:1c:40:a3:6a:36:44:2f:74:b3:7a:9c:c9:a8:
90:4e:be:ed:e5:62:20:3a:f2:9f:b6:21:e2:96:73:9e:72:bd:
30:a3:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:22:13 2025 by rpki-client