Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/974237A4B37C11F08CC966EDDAE4EC9C.roa
File: 974237A4B37C11F08CC966EDDAE4EC9C.roa (raw, json)
Hash identifier: cGgkwGCSR+mKszc75F/+ARlbc5FT9NmRj2GmblsjcoI=
Subject key identifier: EE:D7:68:D2:21:BA:39:CF:1A:DC:6B:6C:6F:DC:8B:A5:62:CE:EF:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A594
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/974237A4B37C11F08CC966EDDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 21:33:35 +0000
ROA not before: Mon 27 Oct 2025 21:33:30 +0000
ROA not after: Sun 01 Feb 2026 21:33:30 +0000
asID: 2914
IP address blocks: 154.214.219.0/24 maxlen: 24
154.214.223.0/24 maxlen: 24
154.214.252.0/24 maxlen: 24
154.214.253.0/24 maxlen: 24
154.214.254.0/24 maxlen: 24
154.214.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107924 (0x1a594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 21:33:30 2025 GMT
Not After : Feb 1 21:33:30 2026 GMT
Subject: CN=68ffe52f-22dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:04:ce:01:52:d2:e5:6c:d1:9c:38:db:e7:
f6:b6:f4:1c:30:aa:da:36:b8:21:9f:16:20:5a:5f:
ea:29:9d:9f:89:79:22:79:7a:a0:c2:05:15:55:82:
5f:8b:45:27:a0:31:f8:9c:6d:f1:19:35:d9:16:37:
c4:49:13:b2:ab:1c:ee:5d:bf:7c:43:ce:35:63:4b:
03:88:2c:b2:ab:03:03:69:68:f8:8d:d0:d0:70:76:
bb:65:b1:ef:b7:ae:56:ed:cf:4a:03:e5:92:f0:ae:
cb:43:ee:50:62:b2:58:ce:db:d8:48:81:da:65:3d:
5b:e5:b2:dc:00:f5:7b:9f:a5:da:1e:c6:f9:a8:11:
e7:7d:3f:72:e9:02:a5:1d:cc:f6:5b:2d:f9:14:be:
8c:2a:92:c1:c1:88:fa:05:ec:85:37:70:42:fc:6b:
cd:c7:91:91:4f:82:60:7b:7b:a0:3c:7d:0d:3e:34:
45:7e:7a:7e:21:cb:e5:c0:67:41:ce:b6:84:8e:6d:
53:d3:62:40:55:eb:ec:58:7f:67:66:aa:39:66:d3:
87:54:66:36:5f:d1:f1:be:da:35:f0:b7:ad:b9:2c:
7b:fa:0e:36:49:a7:ac:37:50:c7:97:5c:68:b0:d9:
03:6d:39:60:5f:e9:da:dc:9f:9e:65:00:8d:54:3a:
0d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D7:68:D2:21:BA:39:CF:1A:DC:6B:6C:6F:DC:8B:A5:62:CE:EF:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/974237A4B37C11F08CC966EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.219.0/24
154.214.223.0/24
154.214.252.0/22
Signature Algorithm: sha256WithRSAEncryption
86:58:64:c3:a5:63:7e:69:c3:17:f7:74:7d:42:31:65:9c:03:
ac:49:8c:f9:cf:9b:98:f1:a3:67:60:fa:72:c4:a9:62:00:2c:
e4:f8:05:ad:14:85:50:5c:c1:f3:4b:b5:b7:3b:02:16:9b:09:
9d:81:8a:92:0c:13:c0:20:2e:96:94:38:92:91:90:ad:3c:bc:
bb:4f:db:3e:40:03:6d:01:8b:89:4a:31:aa:75:13:d2:3e:86:
a6:7e:3a:4e:b7:0f:94:95:a7:f5:ac:1b:0c:96:e6:cd:4f:54:
a1:f9:ea:89:b4:a7:36:ca:63:e0:4d:40:9a:61:19:cd:a1:25:
7e:ed:24:f7:e8:d0:7b:8d:09:e2:ff:6a:60:34:3c:eb:b0:39:
8c:6b:6b:1d:f2:75:45:e2:b4:1d:68:48:dd:3d:e2:38:a7:cf:
03:7b:cf:30:19:2c:99:bb:3d:14:91:7a:08:80:3f:65:0d:69:
91:de:ca:78:08:80:0e:e2:c6:08:9c:79:bd:65:79:37:72:69:
17:3f:00:e2:86:75:b6:45:d6:56:f5:fb:7d:28:2a:87:77:ce:
a8:1a:f9:03:1c:69:e6:df:38:49:60:64:f2:fa:19:5f:60:87:
df:37:c1:d9:28:51:46:66:28:11:28:09:89:af:7a:4d:0c:84:
84:b6:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:31 2025 by rpki-client