Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D9E3F32B32D11F0A0945EF1DAE4EC9C.roa
File: 6D9E3F32B32D11F0A0945EF1DAE4EC9C.roa (raw, json)
Hash identifier: 7ut2YUC8nJ6lDtAonMdLOlViuJSyUSdNd6POySk1sJM=
Subject key identifier: CE:6A:99:83:9D:75:10:4F:5F:0C:31:40:AF:2F:BD:BA:61:9F:46:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A51F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D9E3F32B32D11F0A0945EF1DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 12:06:55 +0000
ROA not before: Mon 27 Oct 2025 12:06:50 +0000
ROA not after: Sat 29 Nov 2025 12:06:50 +0000
asID: 214143
IP address blocks: 154.196.214.0/24 maxlen: 24
154.203.196.0/22 maxlen: 24
154.203.208.0/22 maxlen: 24
154.203.240.0/24 maxlen: 24
154.206.11.0/24 maxlen: 24
154.208.88.0/22 maxlen: 24
154.222.80.0/23 maxlen: 24
154.222.82.0/23 maxlen: 24
154.222.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107807 (0x1a51f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 12:06:50 2025 GMT
Not After : Nov 29 12:06:50 2025 GMT
Subject: CN=68ff605e-d14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:50:33:3e:53:dc:10:4c:ad:de:9d:05:57:
96:64:2c:81:51:4e:8c:35:e5:96:6f:20:e1:84:dd:
d1:a8:fd:88:87:a6:a0:10:bf:e1:b9:17:4f:e2:d8:
93:b7:33:77:de:cb:5b:b2:c8:49:88:e1:71:0b:68:
02:f3:1b:23:59:67:80:f4:06:ea:da:4b:29:91:ba:
0d:b1:67:32:b3:e5:f2:c9:25:1e:75:0e:18:16:4f:
e4:e5:58:6a:e6:2b:b2:03:5c:c8:98:bd:0d:df:5d:
02:a3:cf:5a:d1:61:b9:1e:c2:1d:0d:d9:a9:8b:fd:
e5:39:02:d6:57:fa:3c:36:38:6e:09:71:cc:8a:19:
16:c2:fd:c3:0c:62:bd:82:ca:01:41:f6:da:07:02:
35:35:9f:8c:5f:61:d9:73:15:01:fd:f0:f0:86:1c:
58:4d:ca:3b:59:fe:f0:96:2b:5b:74:13:1b:e6:3d:
d5:5f:44:98:3d:79:e1:26:93:6f:57:0a:a8:07:33:
ca:d0:6c:8e:29:75:1f:bb:7c:cf:a3:a2:89:7b:32:
de:81:fe:ae:3a:75:05:bf:01:bd:9a:aa:80:1f:13:
b3:57:7e:a6:a3:30:eb:f9:fe:23:fe:51:c3:d8:ba:
9f:b4:70:ff:6a:5a:9f:13:73:ab:ac:a4:3c:c8:25:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6A:99:83:9D:75:10:4F:5F:0C:31:40:AF:2F:BD:BA:61:9F:46:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D9E3F32B32D11F0A0945EF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.214.0/24
154.203.196.0/22
154.203.208.0/22
154.203.240.0/24
154.206.11.0/24
154.208.88.0/22
154.222.80.0-154.222.85.255
Signature Algorithm: sha256WithRSAEncryption
74:6d:a8:41:d7:f1:ff:53:6d:2d:00:f3:24:e9:0a:e5:55:d5:
1d:13:e4:04:a0:af:9e:96:1f:17:27:63:b9:9c:d7:42:93:14:
f6:eb:71:a1:e7:1c:09:de:6a:ee:6c:fd:6a:f1:e8:65:55:47:
e4:a5:45:d2:59:52:ef:75:39:d0:22:2c:65:36:fb:72:bc:04:
88:a5:3a:73:78:34:4c:f5:4a:99:bd:df:29:dc:92:41:3a:7a:
8a:69:af:79:7a:16:b7:0f:d8:57:dc:8a:82:a7:5c:4f:ea:9a:
27:39:03:58:95:94:30:21:e2:a1:9c:46:0c:8e:2b:9c:1a:ad:
ed:ea:49:fa:00:6b:78:80:9c:9b:b4:b3:7c:bc:2a:8d:69:59:
ef:49:a3:71:49:42:cc:b7:b5:88:b0:f5:a5:e9:e4:b1:48:c5:
fd:8b:9b:b5:5f:56:1b:d0:99:92:e2:f8:33:34:8f:4f:c0:95:
c8:10:b7:08:62:4a:96:b9:a1:ec:1e:1a:46:95:65:f1:0e:ac:
8a:4b:18:92:79:02:51:4e:79:8e:c4:83:d5:e7:28:b4:47:05:
b1:9a:37:aa:ad:fb:e2:94:c7:b9:cc:87:21:a8:d5:8e:d7:c8:
7e:5d:39:b7:bb:54:2b:61:21:00:64:65:c3:fe:fa:26:61:53:
a8:63:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:27 2025 by rpki-client