Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AD1C272B89D11F0938A4CB7DAE4EC9C.roa
File: 1AD1C272B89D11F0938A4CB7DAE4EC9C.roa (raw, json)
Hash identifier: DNPRwUsKY9ddI2ScxSYG/qiTAwzQaE3p8p9fUzhazFE=
Subject key identifier: 7C:0E:52:65:34:57:D3:D4:A6:AC:02:99:FF:55:59:78:BC:7A:78:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A71E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AD1C272B89D11F0938A4CB7DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 10:08:55 +0000
ROA not before: Mon 03 Nov 2025 10:08:50 +0000
ROA not after: Mon 08 Dec 2025 10:08:50 +0000
asID: 62084
IP address blocks: 154.210.239.0/24 maxlen: 24
154.219.94.0/24 maxlen: 24
154.219.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108318 (0x1a71e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 10:08:50 2025 GMT
Not After : Dec 8 10:08:50 2025 GMT
Subject: CN=69087f37-b84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:ed:bc:ff:2c:8b:ce:d2:81:28:e5:b0:dd:
18:fb:38:53:ef:65:62:94:83:ec:54:10:29:6f:ea:
30:98:c9:01:1e:ee:57:8d:12:bd:4a:6d:c8:7e:00:
de:a8:52:69:9b:3a:dc:9a:6a:b8:f0:ff:9d:c4:74:
9c:27:01:da:3b:a1:86:40:aa:65:03:41:77:14:cb:
ac:ac:b7:dc:f7:c8:8d:cc:9a:51:87:90:76:62:c8:
7c:2d:c9:7e:ca:1b:6e:9a:c7:3a:b4:2d:3e:a0:ed:
23:4e:45:e0:06:ed:be:cc:a7:1c:1e:e7:76:24:16:
f1:df:0f:2d:34:26:c3:bb:4c:7e:1e:76:32:45:6b:
7f:c7:98:af:c3:fe:fc:01:61:43:7e:63:7c:d4:db:
59:bb:52:0a:a4:50:6e:76:2f:ba:cd:4c:0e:1e:ee:
39:56:74:e3:db:6e:86:d7:3c:25:da:27:16:dd:c6:
5c:80:32:d4:19:e7:4a:72:70:d0:ce:02:32:fc:ff:
53:7a:b2:c1:b4:2a:f6:91:45:60:bb:32:ff:70:43:
8d:86:bb:00:f4:b2:5a:f3:e5:b2:8b:f7:ee:d3:55:
bf:1f:ef:83:1c:3f:2f:8d:f1:74:17:7e:b6:85:a8:
94:1b:e5:88:2c:9c:dd:93:6a:58:8a:bf:1d:bd:d3:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0E:52:65:34:57:D3:D4:A6:AC:02:99:FF:55:59:78:BC:7A:78:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AD1C272B89D11F0938A4CB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.239.0/24
154.219.94.0/23
Signature Algorithm: sha256WithRSAEncryption
35:1a:ba:8c:e7:36:7d:bd:e1:01:93:2c:5d:c3:43:22:c0:bd:
42:b3:4f:a2:1e:eb:de:c8:96:b8:f7:42:a8:34:c0:7e:90:18:
41:01:6d:c0:b5:e0:88:80:b0:b5:16:15:a8:bd:40:a2:ec:72:
96:3c:3a:30:ae:9c:f1:eb:9a:c9:7f:43:f2:17:43:28:22:80:
af:00:d3:b7:38:fb:1f:5d:28:26:52:7f:5a:2c:c1:a0:64:d3:
ac:24:05:fe:9f:b6:18:01:e3:46:b4:10:28:a1:12:21:ad:45:
7b:6e:6f:f5:cf:5c:b6:97:d1:2b:7b:e2:c3:50:2c:fd:32:6b:
c5:39:9f:a1:ce:c0:cc:0a:1e:0a:b1:fc:d5:7c:6a:af:40:76:
69:59:da:dc:ce:98:a7:14:7f:23:89:74:57:94:2b:74:50:54:
38:f6:99:7d:ca:93:9e:c8:25:c7:4b:83:95:1d:07:54:e9:35:
fd:45:f8:1b:72:4c:19:48:ee:ee:29:ce:67:e0:91:92:4a:b8:
9f:13:5b:e3:88:f3:4c:b3:d5:e2:0e:75:0f:da:6e:2c:2a:62:
d6:47:f8:86:1d:0b:d4:8a:1a:b3:b4:09:2e:ef:6c:cc:9a:b3:
32:cb:10:96:cb:1e:a5:40:18:1d:f3:55:e9:20:5a:2f:b7:00:
f1:0a:ab:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:41:07 2025 by rpki-client