Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E3AF986B40711F097DE72E3DAE4EC9C.roa
File: 7E3AF986B40711F097DE72E3DAE4EC9C.roa (raw, json)
Hash identifier: MXZlJ4IwMevJT/uDcRDo2/35WToQNZwao/D6F/9IrVg=
Subject key identifier: 70:94:FD:54:68:E4:43:E1:71:95:0D:53:30:46:76:7C:12:5A:51:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E3AF986B40711F097DE72E3DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 14:07:53 +0000
ROA not before: Tue 28 Oct 2025 14:07:48 +0000
ROA not after: Wed 10 Dec 2025 14:07:48 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
154.203.153.0/24 maxlen: 24
154.203.154.0/23 maxlen: 24
154.203.156.0/24 maxlen: 24
154.203.157.0/24 maxlen: 24
154.203.158.0/24 maxlen: 24
154.203.159.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.223.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108029 (0x1a5fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 14:07:48 2025 GMT
Not After : Dec 10 14:07:48 2025 GMT
Subject: CN=6900ce39-82b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:1a:4c:c5:09:3c:84:02:5a:4d:00:2e:c2:
1d:9f:f5:cb:3a:f6:a5:32:99:11:28:44:e4:39:6a:
55:3a:92:fe:af:05:d7:4a:18:17:b9:5d:21:23:35:
d7:d8:27:c6:b0:bb:fe:d0:24:b1:e6:1d:f9:ba:e5:
18:ef:5c:a1:4f:d9:01:6d:bf:2a:b8:c4:1a:57:8f:
4a:b3:00:4f:6e:58:87:e6:a8:7e:bc:d4:98:72:ba:
1c:3c:49:5b:c8:0f:6f:b6:7d:2f:8b:48:9c:dd:49:
dc:ee:a7:85:8b:27:17:f2:9c:f9:fc:d1:11:47:fe:
e2:2f:bb:40:0d:b6:0e:d1:a6:25:31:da:ef:e0:0e:
5f:a3:87:61:eb:13:97:3b:93:f8:e6:e9:a4:7a:74:
f6:37:f2:df:5f:3f:c4:6d:06:19:ac:d2:2d:92:bc:
1a:52:91:3f:48:c1:3e:9e:30:65:cf:fa:08:b6:ff:
d7:52:f6:18:3d:3f:4f:73:44:9d:16:9a:ae:b1:50:
bd:3b:bc:5e:dd:57:26:87:61:02:1d:b3:c0:fe:2b:
07:00:8f:c3:9b:9b:b1:93:29:6a:8f:c6:16:17:eb:
be:bd:40:01:16:ef:c4:16:64:50:ad:18:8d:8b:a4:
6b:19:40:68:77:d7:9b:62:96:42:c4:e8:1c:a8:d2:
f2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:94:FD:54:68:E4:43:E1:71:95:0D:53:30:46:76:7C:12:5A:51:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E3AF986B40711F097DE72E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0/24
154.203.153.0-154.203.159.255
154.203.164.0/24
154.203.166.0/24
154.223.16.0/24
Signature Algorithm: sha256WithRSAEncryption
90:03:fd:92:06:75:a5:66:a0:a9:c4:f0:8a:27:65:15:04:1c:
aa:80:5a:12:cd:cd:37:36:62:d1:50:c0:3c:06:66:4e:d8:57:
52:93:be:c4:0f:38:f8:c7:51:7c:b5:c2:d1:20:1d:1a:d5:58:
6d:95:64:42:a3:d1:77:ab:13:6b:49:98:fa:da:93:89:e5:ea:
2f:a1:7b:22:71:95:91:af:c4:fa:45:8b:6e:4e:7f:a3:df:17:
d9:64:15:b6:50:ef:90:2c:90:70:f3:3c:d5:bd:3c:ed:53:fd:
65:4b:ca:64:8c:5a:30:d8:8f:64:d2:2c:d4:3e:95:ef:cd:a8:
61:5d:6a:2a:24:6c:04:66:4c:8a:9a:10:e1:6d:e3:39:a6:8c:
af:6d:05:90:d2:27:a9:14:7d:01:a2:a1:3d:27:e7:15:1f:c6:
3f:eb:d9:9e:e3:ba:ae:32:e0:fd:57:95:57:fd:f8:f8:e6:25:
20:d5:d8:47:04:85:7e:1d:91:a3:9e:99:87:6f:11:b7:81:9b:
cd:27:1f:06:83:75:9c:ce:91:63:c7:24:47:f6:ea:4b:20:ce:
6c:34:3e:16:3b:03:f9:7b:3b:e2:a2:19:df:ca:f0:8e:40:bb:
d4:47:1b:5f:26:c0:5d:07:c7:35:8b:8d:23:92:d4:92:b3:58:
3c:b9:76:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:28:39 2025 by rpki-client