Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/940D7C1AB4DA11F08F38118DDAE4EC9C.roa
File: 940D7C1AB4DA11F08F38118DDAE4EC9C.roa (raw, json)
Hash identifier: pWwhrezdtQoZ0UNb3QpuGRg7+sSsi7HYM8TH9NTAO+Q=
Subject key identifier: CB:66:A2:3D:4D:56:EC:DE:AD:28:FE:62:5B:1A:71:74:10:88:4D:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A65E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/940D7C1AB4DA11F08F38118DDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 15:18:53 +0000
ROA not before: Wed 29 Oct 2025 15:18:48 +0000
ROA not after: Sat 06 Dec 2025 15:18:48 +0000
asID: 202656
IP address blocks: 154.218.30.0/24 maxlen: 24
154.219.16.0/24 maxlen: 24
154.219.24.0/24 maxlen: 24
154.219.28.0/24 maxlen: 24
154.219.207.0/24 maxlen: 24
154.219.211.0/24 maxlen: 24
154.219.222.0/24 maxlen: 24
154.219.230.0/24 maxlen: 24
154.219.232.0/24 maxlen: 24
154.219.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108126 (0x1a65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 15:18:48 2025 GMT
Not After : Dec 6 15:18:48 2025 GMT
Subject: CN=6902305d-1da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2d:ab:6b:49:53:cd:12:91:0f:5f:c7:93:f9:
66:27:18:40:8b:d6:1a:41:d9:5a:f7:d8:13:48:68:
60:3e:6c:9f:c9:40:31:bf:f4:a9:f5:01:d7:56:48:
45:2c:4f:fe:96:6f:65:7b:9f:4c:8d:d0:4f:3a:03:
57:e5:90:56:cb:2c:1e:b3:56:72:3e:cd:c4:29:2d:
39:cf:a1:1c:dd:5e:d2:36:d6:9c:0a:9e:1b:70:79:
c3:b0:76:4f:d8:3d:ba:70:ef:be:e7:5a:6a:8e:24:
9b:1c:73:45:68:d2:2a:71:34:0c:69:25:76:e7:21:
17:12:be:d2:a4:2b:af:18:ba:11:4a:02:df:4b:19:
0f:89:87:71:04:00:1c:9d:7f:85:cd:82:cd:fc:13:
f1:d2:77:02:1c:33:ce:3f:40:4e:4c:dd:f8:01:44:
f5:cf:21:e0:40:45:7e:78:a0:b3:33:ce:be:fd:4a:
b4:88:28:52:4a:1e:bc:89:b4:e9:c6:19:a0:1d:f6:
cf:78:bb:74:b8:4d:83:21:94:f2:b0:89:44:e0:a1:
39:53:54:8b:e6:8d:7b:04:21:c6:d1:84:ec:4a:1a:
cd:43:b5:4f:dd:6f:a3:74:01:22:3f:7a:5c:ae:74:
42:74:ec:2f:0c:76:47:0e:dc:48:cb:fc:62:3f:d7:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:66:A2:3D:4D:56:EC:DE:AD:28:FE:62:5B:1A:71:74:10:88:4D:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/940D7C1AB4DA11F08F38118DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.30.0/24
154.219.16.0/24
154.219.24.0/24
154.219.28.0/24
154.219.207.0/24
154.219.211.0/24
154.219.222.0/24
154.219.230.0/24
154.219.232.0/24
154.219.245.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1e:61:6d:c5:71:01:b4:77:ce:4d:e8:c7:49:57:3b:5d:70:
3e:c7:40:a7:da:79:ab:38:e1:61:39:0c:22:61:2b:37:00:17:
de:fd:c2:25:f5:85:8e:5f:30:c4:78:91:f9:60:8e:4a:82:ac:
a1:29:fa:d6:f4:96:ad:e3:44:b0:06:8f:96:53:51:86:64:7e:
25:98:b7:73:1a:85:2a:b1:a0:5b:c6:7a:66:d3:43:da:81:e6:
5e:6e:27:4d:57:cc:26:d7:a1:a5:0b:a7:91:37:9b:f4:de:23:
79:31:fd:01:36:ef:bc:16:44:d0:a7:c6:49:b0:fe:6d:d1:d2:
b2:ee:bd:90:23:9e:1d:da:63:db:15:9e:ca:e2:fa:08:e4:2f:
6b:92:d3:bc:f5:ed:63:41:a1:02:4a:c3:d2:13:7c:ca:ba:be:
ce:be:b4:fe:3b:8d:3a:d5:19:e4:99:06:f7:ba:21:93:fa:83:
4d:ed:b9:ed:bd:29:72:26:6f:c1:3f:d6:dd:f3:f9:16:0f:f8:
5b:d3:3c:f2:1e:ce:c9:ba:b0:c8:86:13:b0:cb:2d:58:77:e1:
59:f3:61:8c:06:c4:85:1f:1d:52:58:fa:cf:80:a7:e9:d9:2c:
0d:06:60:00:91:0e:0e:c4:c8:3d:c9:b6:8f:a1:eb:d2:76:b1:
7b:be:29:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:15:03 2025 by rpki-client