Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/224ED576AF3311F0B8F4C3E7DAE4EC9C.roa
File: 224ED576AF3311F0B8F4C3E7DAE4EC9C.roa (raw, json)
Hash identifier: k1jf8vPXmf2pOTZBVCkanv1TpCK2S4QqRSknq0xQ6iw=
Subject key identifier: AD:DD:A9:C9:77:39:7A:F6:D5:25:75:B3:FB:D0:AD:6E:54:F7:97:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/224ED576AF3311F0B8F4C3E7DAE4EC9C.roa
Signing time: Wed 22 Oct 2025 10:37:41 +0000
ROA not before: Wed 22 Oct 2025 10:37:36 +0000
ROA not after: Sat 29 Nov 2025 10:37:36 +0000
asID: 9304
IP address blocks: 154.203.241.0/24 maxlen: 24
154.203.242.0/24 maxlen: 24
154.208.76.0/22 maxlen: 24
154.208.84.0/22 maxlen: 24
154.212.144.0/23 maxlen: 24
154.212.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107689 (0x1a4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 10:37:36 2025 GMT
Not After : Nov 29 10:37:36 2025 GMT
Subject: CN=68f8b3f4-7b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:ab:42:0c:f1:f2:fd:56:d9:d3:ef:72:4a:
81:58:15:0f:b5:bb:e5:b1:bd:8b:d1:33:b3:68:3f:
d6:f5:c8:92:73:85:c9:e2:b1:d1:ec:2c:28:5b:2d:
69:57:f8:df:b6:fa:e0:a6:ae:92:c1:ed:25:b4:f0:
99:f4:d7:5e:65:9e:bb:e6:91:23:45:d0:ef:d2:f9:
cb:d3:1f:89:05:06:64:0f:ee:51:dd:95:98:eb:9f:
0b:9f:4c:2b:68:ea:8b:d9:a5:a6:8d:4a:f6:ea:1b:
72:e3:05:7a:19:01:44:fe:c7:60:60:7c:3f:cc:19:
d3:94:e8:76:51:d0:db:64:a4:43:af:19:55:e4:9a:
3b:53:03:22:90:5e:10:bb:94:3d:49:eb:87:26:ed:
fd:b4:63:2c:5f:cd:69:91:0b:a8:32:17:25:f1:7d:
e9:b5:9e:50:64:89:47:6b:52:af:d8:84:e0:3f:e3:
a6:a8:2c:3d:2e:73:e4:02:82:d7:2b:09:fd:b0:69:
66:a6:e8:80:02:5a:03:8a:9a:d6:2f:30:36:da:f4:
03:4b:f9:76:61:b4:c9:10:7f:b0:2b:c1:e9:7f:99:
e1:20:46:80:24:2e:7b:53:3e:05:46:8b:a6:0c:70:
f9:c7:f3:e4:ad:c8:37:59:c9:c2:78:1c:97:05:87:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DD:A9:C9:77:39:7A:F6:D5:25:75:B3:FB:D0:AD:6E:54:F7:97:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/224ED576AF3311F0B8F4C3E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.241.0-154.203.242.255
154.208.76.0/22
154.208.84.0/22
154.212.144.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:5a:1a:90:f3:dc:d6:8c:2c:11:f3:f0:90:fd:ea:02:66:45:
14:15:07:60:73:7d:c7:37:cc:03:e7:0d:c8:48:c5:4a:f3:91:
4d:26:90:91:76:b0:a8:8b:3d:a7:e2:06:ed:0e:95:01:2c:3d:
74:10:85:0f:d8:58:6a:3c:72:58:25:b5:ac:2a:80:98:54:13:
c7:54:16:f5:d3:c9:d8:90:55:b3:cd:07:82:aa:13:79:be:2f:
61:64:b4:26:b2:a3:ff:b8:1c:7d:3b:b7:db:4e:46:54:99:fd:
fc:f7:a7:ba:e1:16:a5:9c:83:f8:7b:4c:83:c9:38:38:aa:c2:
30:1a:2e:89:20:60:04:99:fc:68:9c:42:52:b7:81:5b:24:fd:
66:8f:14:6f:25:47:51:55:a8:b2:1a:32:f9:31:a1:d7:60:99:
ce:02:4e:49:34:0c:8b:93:30:93:d7:66:6f:48:7e:77:3b:e4:
86:e3:21:e3:85:5f:6f:75:c3:62:9b:28:0d:6c:9d:61:82:9b:
87:6b:ea:a3:ee:6b:bf:47:0c:24:bb:83:27:e7:45:13:0e:27:
82:53:ae:19:48:4c:50:16:fe:c4:fd:1e:56:1b:d9:a7:8c:c1:
c6:1c:d2:cd:fe:e0:3d:49:ed:ba:34:d7:74:28:0e:c0:14:34:
69:20:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:00 2025 by rpki-client