Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95CF1C0AB3F111F09C9445DDDAE4EC9C.roa
File: 95CF1C0AB3F111F09C9445DDDAE4EC9C.roa (raw, json)
Hash identifier: C1DqR87aDaUz9TIxRRUkD8zEh2olBHPqUAla69lMa5M=
Subject key identifier: 02:E6:1C:C1:23:84:12:D7:C4:D9:4E:9C:94:2C:B3:69:DC:2C:2B:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95CF1C0AB3F111F09C9445DDDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 11:31:03 +0000
ROA not before: Tue 28 Oct 2025 11:30:58 +0000
ROA not after: Tue 02 Dec 2025 11:30:58 +0000
asID: 49505
IP address blocks: 154.223.204.0/24 maxlen: 24
154.223.205.0/24 maxlen: 24
154.223.206.0/24 maxlen: 24
154.223.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108004 (0x1a5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 11:30:58 2025 GMT
Not After : Dec 2 11:30:58 2025 GMT
Subject: CN=6900a977-bc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:00:a5:58:7a:1c:17:5f:13:45:90:2f:2b:
9b:21:78:1c:b9:f0:d4:46:7a:3f:4a:ae:3b:19:77:
8e:d3:f6:bc:80:90:73:37:3e:ea:76:bc:f8:ac:f1:
79:42:d5:e9:c5:16:9a:ce:0b:f4:02:1b:2d:59:2d:
03:4f:8d:24:5a:be:fc:19:a7:a3:50:eb:a4:5d:4e:
56:d3:09:11:23:d4:ba:8f:31:42:fa:5d:0c:e0:98:
7d:a1:ca:53:20:5d:12:0e:ee:9c:d0:4a:df:78:b2:
e5:f2:71:44:a1:4e:63:7b:61:04:2a:aa:1a:03:b7:
a0:2f:94:9f:18:fb:ea:d3:80:0c:46:ca:99:f5:e2:
7e:a1:12:eb:64:81:b9:30:fe:11:fe:94:a8:13:13:
06:4a:a9:75:1d:00:a0:fe:92:e2:ed:59:7b:aa:ca:
f2:11:34:04:f8:78:75:fd:36:4a:bb:7f:d9:14:ca:
55:fb:48:79:26:73:d7:d7:44:25:ca:77:d8:48:bd:
97:af:82:97:0f:2b:af:82:b9:32:4c:a7:00:ca:08:
8e:1d:72:b8:93:44:4c:c0:33:a4:77:5d:39:75:53:
9d:db:96:18:bb:51:ae:8b:a6:5c:3a:12:7a:dd:19:
db:34:18:ab:ba:2c:d0:3e:98:2a:c2:8b:e5:d0:4a:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E6:1C:C1:23:84:12:D7:C4:D9:4E:9C:94:2C:B3:69:DC:2C:2B:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95CF1C0AB3F111F09C9445DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.204.0/22
Signature Algorithm: sha256WithRSAEncryption
76:b3:73:bf:ec:ae:d2:f6:3a:84:7c:fc:b3:06:23:f7:86:18:
99:b6:3e:92:01:55:2f:1a:ef:4a:72:44:18:a2:4d:04:31:4a:
ae:04:ac:fd:4c:91:98:ff:32:d9:9e:1f:78:5a:56:b5:b2:f5:
9d:29:b9:30:fa:5d:18:96:53:50:c1:8a:99:14:f9:ae:bb:c3:
6a:8a:0b:35:42:ba:95:e9:ee:d5:e3:ae:e2:c9:c1:4b:f8:e6:
0f:de:e5:35:90:e7:9c:d8:f1:6d:81:17:62:21:b1:bc:2d:f4:
ee:cd:dc:58:2d:c8:29:5c:cf:de:7b:67:26:92:ba:a2:92:00:
3a:29:33:ad:22:ea:d6:19:d3:59:29:3a:2c:46:0a:00:db:ab:
50:d1:51:7f:80:4c:c9:66:90:bd:c1:f8:d1:ea:0f:33:c6:0c:
b1:25:b6:ab:61:ea:a1:01:5f:3c:09:8c:b2:bc:18:52:6d:64:
23:8a:dc:8e:4c:c2:63:5e:87:5b:c5:b6:2e:32:3a:e8:70:9a:
d6:2c:b8:51:16:a8:db:a7:16:12:f9:a9:d4:4a:7d:52:51:69:
06:dd:16:a2:5c:09:89:9f:fe:ab:8c:03:c2:9f:cf:85:3e:0c:
d8:dc:0a:51:2b:ce:d4:51:c4:e9:d6:b6:73:9c:e1:73:0f:fa:
f3:af:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:31:20 2025 by rpki-client