Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12AD8E94B40311F0BE8FE8C9DAE4EC9C.roa
File: 12AD8E94B40311F0BE8FE8C9DAE4EC9C.roa (raw, json)
Hash identifier: 6KWEpucrnFyWxJKSdlsvfgo4B94suHwKSH7ve0YOa7M=
Subject key identifier: 3A:5D:EE:E8:44:D4:D0:D1:90:11:7B:61:8D:D4:9F:C1:DB:71:E9:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12AD8E94B40311F0BE8FE8C9DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 13:36:16 +0000
ROA not before: Tue 28 Oct 2025 13:36:07 +0000
ROA not after: Wed 10 Dec 2025 13:36:07 +0000
asID: 138915
IP address blocks: 154.223.46.0/24 maxlen: 24
154.223.47.0/24 maxlen: 24
154.223.48.0/24 maxlen: 24
154.223.49.0/24 maxlen: 24
154.223.51.0/24 maxlen: 24
154.223.52.0/23 maxlen: 24
154.223.54.0/23 maxlen: 24
154.223.56.0/23 maxlen: 24
154.223.58.0/23 maxlen: 24
154.223.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108018 (0x1a5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:36:07 2025 GMT
Not After : Dec 10 13:36:07 2025 GMT
Subject: CN=6900c6d0-1783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:7f:61:de:cf:dd:a0:71:eb:08:82:85:0b:
b8:42:d6:54:94:4c:a5:60:cf:f3:8a:b2:4f:2c:29:
d5:b0:72:eb:bd:1a:0c:90:0e:95:ab:9e:6a:09:95:
30:4f:f8:7e:37:15:87:24:77:51:3b:37:8f:0d:8f:
0f:10:68:be:63:4c:ba:60:99:63:2b:63:da:3f:35:
7c:6a:4a:00:f7:d6:3d:20:dd:22:87:0e:40:c2:74:
c1:05:2e:dc:3f:1a:19:5a:ff:76:7f:4b:5a:cd:ad:
d2:bf:e0:df:48:8d:d2:77:ce:fe:95:54:eb:40:0a:
bd:75:c1:e5:0d:b5:a8:3c:26:70:0d:44:6e:a7:08:
34:37:af:14:65:80:6d:1d:58:49:a2:35:c9:20:2c:
42:78:1d:5b:88:ff:41:9a:e5:0b:eb:56:92:b3:38:
e8:29:b5:1a:d7:f2:d2:15:eb:ab:69:0d:16:b2:72:
9d:58:97:23:75:4a:68:49:4d:3a:32:6c:d4:c4:9b:
fd:ee:9c:c2:25:a1:9f:de:4c:60:a0:5b:19:06:db:
08:00:09:15:43:6e:72:db:d5:b7:48:3e:de:5f:69:
ae:4f:f5:a3:49:e5:8d:fe:e5:f4:fc:7a:e5:cd:0b:
2e:40:d1:e8:10:35:74:4a:25:39:f4:14:82:7a:f9:
58:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5D:EE:E8:44:D4:D0:D1:90:11:7B:61:8D:D4:9F:C1:DB:71:E9:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12AD8E94B40311F0BE8FE8C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.46.0-154.223.49.255
154.223.51.0-154.223.61.255
Signature Algorithm: sha256WithRSAEncryption
6b:ec:57:52:d0:47:56:be:06:ee:b1:02:ff:6b:9d:cc:e8:6c:
09:40:b0:6f:28:22:ba:fe:06:6b:b2:7a:42:97:03:a2:8e:dc:
aa:35:b5:67:1d:6d:6c:e4:33:aa:7f:47:a6:37:b5:d2:78:24:
80:41:99:4e:6a:9c:dd:97:7f:4a:66:80:e5:26:d2:ef:c6:6b:
a0:d4:9f:5f:73:c0:6c:5a:d4:8e:c9:53:d3:39:61:99:06:25:
e6:dd:9e:c7:95:73:f8:89:4c:7c:ef:40:e9:d8:30:e4:eb:bf:
67:9b:d0:a5:28:26:ef:97:a5:6d:0a:9f:d9:27:d7:13:31:16:
02:95:63:f8:1b:df:a4:a0:f4:c7:f1:4a:da:5d:7a:e9:dd:f0:
ce:9d:4c:37:c8:94:b1:be:6b:12:84:e9:07:3a:26:2a:05:8f:
f2:a7:54:45:4a:7b:72:12:72:4f:42:d9:ab:f3:04:20:ae:43:
92:3b:bf:b9:0a:6d:10:b7:a9:c9:37:1f:2f:98:e2:16:af:ac:
ab:c9:e9:22:4b:9e:24:a7:65:06:6b:f6:83:9e:fc:c8:58:58:
87:45:20:68:0e:2d:ae:d2:8d:92:db:38:f4:6f:64:31:16:cf:
b0:a2:9a:6d:b4:ff:1b:c7:90:9d:ef:ee:37:0d:05:ec:12:e1:
58:53:1d:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:29 2025 by rpki-client