Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C31C2C4AE5511F0A14A7AD4DAE4EC9C.roa
File: 4C31C2C4AE5511F0A14A7AD4DAE4EC9C.roa (raw, json)
Hash identifier: Eo+9/CCcrjTnSqMpA4CrMYS1BL73n1QM7oULtU8zeTk=
Subject key identifier: 0D:75:0C:EF:34:F2:67:B5:C3:CF:7C:60:F3:9B:E0:6F:CF:EE:FF:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A470
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C31C2C4AE5511F0A14A7AD4DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 08:09:43 +0000
ROA not before: Tue 21 Oct 2025 08:09:38 +0000
ROA not after: Sun 25 Jan 2026 08:09:38 +0000
asID: 135097
IP address blocks: 154.212.164.0/22 maxlen: 24
154.213.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107632 (0x1a470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 08:09:38 2025 GMT
Not After : Jan 25 08:09:38 2026 GMT
Subject: CN=68f73fc6-6f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:b3:51:75:06:1a:5c:c4:83:55:f5:20:be:
bb:d8:7b:58:a5:18:de:4a:20:b4:0b:82:d4:cb:78:
7c:7d:ba:42:d0:e7:e8:a1:49:c1:7c:f4:cb:3a:6f:
89:f1:ba:70:52:e4:2d:c7:90:3e:b2:b5:3f:78:75:
b3:15:d0:5d:25:16:f3:c4:93:63:89:06:d8:2e:94:
41:fd:8c:6d:b0:27:7e:49:eb:96:d5:07:a8:b0:c6:
fc:99:a6:b1:60:57:64:df:c9:60:e0:5f:6f:1b:66:
ae:ce:6d:5d:79:c2:d8:b8:c2:18:d5:7d:9c:1f:8e:
29:fe:8f:3a:28:74:95:a0:71:8c:50:05:ed:6c:c1:
5d:d5:15:fe:bc:d3:9e:c1:44:c7:67:7d:23:ae:38:
88:34:bc:26:68:39:f6:14:cf:aa:c0:7c:bd:ff:d8:
06:49:87:00:9f:69:f8:e0:9d:32:4a:ad:75:67:f4:
50:ba:c6:cd:88:85:b5:af:8a:db:f9:11:96:f3:d0:
3b:1f:44:b0:87:8e:ee:28:83:ef:0a:90:02:18:cb:
e2:d3:0c:c0:ed:b4:66:54:4b:76:89:9c:db:76:f5:
7f:06:b3:be:c0:45:b7:9f:82:96:81:68:b9:8f:30:
04:b9:13:58:79:48:d5:b4:c8:c4:3c:01:9e:c2:8d:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:75:0C:EF:34:F2:67:B5:C3:CF:7C:60:F3:9B:E0:6F:CF:EE:FF:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C31C2C4AE5511F0A14A7AD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.164.0/22
154.213.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:ae:65:02:8b:29:a0:55:71:0f:70:3e:9f:6a:44:b9:db:7e:
01:89:e8:34:55:1b:1e:f9:bb:52:98:9b:12:80:47:9e:5b:81:
f5:79:c5:9f:08:9a:96:3f:7b:a7:cf:55:ae:53:a9:e4:f1:4a:
21:bc:c8:6a:d3:f7:14:7e:1a:dd:1b:9a:9c:7a:77:82:9a:11:
6e:19:45:df:96:ba:30:50:91:17:5e:36:6a:61:5c:3c:bb:26:
9c:5c:51:a9:1b:9e:ef:62:bd:7a:33:15:f6:f4:35:8a:ac:fe:
52:0d:f0:7f:1a:02:92:a7:17:41:20:8a:cd:a5:b0:0f:50:dd:
fc:7e:f1:87:c2:bd:c4:a4:00:71:4a:2b:2e:48:94:17:19:ef:
f4:66:ee:7a:4b:08:18:3c:e1:39:9c:5b:28:cc:ba:9c:e6:2a:
fa:1e:09:4f:54:20:7a:57:72:4d:27:e1:38:0c:ac:61:5e:b1:
26:36:21:d9:5e:3d:69:54:33:0b:6b:1a:1b:7e:c9:f8:79:04:
8d:ee:6d:da:48:33:c8:51:ed:36:5f:c9:a9:76:3d:1b:1d:69:
cf:99:4c:dc:a5:c3:ea:67:c3:8b:d8:03:6d:34:47:dc:a9:41:
df:32:71:86:20:f8:d6:55:c9:2b:8d:15:d3:05:d8:35:da:a5:
14:b1:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:45:35 2025 by rpki-client