Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D74315EB4A311F092E9B2C1DAE4EC9C.roa
File: 9D74315EB4A311F092E9B2C1DAE4EC9C.roa (raw, json)
Hash identifier: KVD5nconfjPvxO6ZrmekiZOxnH3IaretSD+oSK5H0Q0=
Subject key identifier: EE:8C:02:FA:31:42:AD:92:C2:CF:3F:C5:5C:65:39:74:3D:9E:18:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A620
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D74315EB4A311F092E9B2C1DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 08:45:27 +0000
ROA not before: Wed 29 Oct 2025 08:45:22 +0000
ROA not after: Thu 06 Nov 2025 08:45:22 +0000
asID: 38193
IP address blocks: 154.194.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 08:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108064 (0x1a620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 08:45:22 2025 GMT
Not After : Nov 6 08:45:22 2025 GMT
Subject: CN=6901d426-0a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:0f:e7:aa:56:55:8f:9e:38:56:a2:46:f4:
94:4c:a1:8b:67:9d:69:2a:5a:90:f7:f0:48:d2:41:
46:79:12:d2:26:bc:0b:08:7e:26:ff:b6:47:db:36:
f8:53:b5:ab:92:e2:6f:bb:58:15:74:08:dd:77:0d:
b7:54:5d:38:c3:cd:d9:72:ec:1c:ff:ad:8b:a2:56:
8d:0d:47:97:86:a8:0b:58:5c:35:59:d9:33:9e:a4:
98:9f:07:28:94:9b:74:d3:33:25:9c:47:90:04:09:
c2:f0:a9:1d:de:57:e5:4b:1b:3e:07:83:55:f5:b3:
b4:3b:a5:92:c2:7b:9d:12:79:f5:01:77:19:d6:28:
ee:0e:a3:1b:91:f8:9f:bf:45:f3:73:c5:75:36:7d:
d9:71:88:56:33:5b:c3:14:9f:65:d2:b5:c0:d8:d0:
55:ed:30:4b:8e:28:b2:ef:e6:d6:be:b9:88:ba:fb:
40:24:26:05:97:89:c9:60:93:69:3c:32:09:e6:46:
a8:09:1a:72:27:94:25:9f:d0:48:cb:5b:28:bc:9c:
64:06:17:50:7e:5a:7e:8a:dc:04:23:98:f5:c1:93:
bd:05:5e:af:76:da:4e:27:b3:fb:25:c0:5e:bd:2b:
bf:ab:b2:63:7e:a8:71:33:88:5e:96:c8:46:99:40:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8C:02:FA:31:42:AD:92:C2:CF:3F:C5:5C:65:39:74:3D:9E:18:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D74315EB4A311F092E9B2C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.2.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:21:30:65:d6:6a:3b:28:54:e7:0d:7d:af:4d:f1:db:c0:1d:
b6:9e:03:49:a3:b6:7b:86:b5:86:4e:3b:ac:2b:c0:9b:c2:62:
95:a9:36:cf:2e:9a:06:6b:24:a8:1d:ee:09:f0:d3:aa:ac:1e:
60:51:5f:42:1b:54:f7:94:cc:72:02:33:20:2d:5a:ab:e7:08:
71:0a:a2:92:2f:95:38:72:53:87:bc:5b:f0:2c:80:02:cc:b8:
c6:53:07:39:d0:fb:84:0e:82:2c:0c:07:41:9d:34:72:98:da:
ec:59:b0:5f:55:a5:ae:ee:5c:22:46:cc:89:c7:2d:e6:01:54:
73:3c:42:b1:3a:c3:7b:4b:25:4b:fe:0b:b6:ff:cf:76:a5:d0:
21:ec:b5:8c:8f:c1:3c:76:ee:e0:2a:a3:d8:4b:5f:0c:e1:87:
19:38:74:1e:c6:ff:b3:35:fb:b9:9e:e8:a0:3c:6b:95:a4:64:
e0:14:97:65:74:f9:32:2f:af:31:69:c4:e6:55:74:b4:d3:d0:
f3:57:66:9e:1b:42:43:09:f9:7b:b1:07:ed:87:6c:a1:ad:7e:
78:d7:99:1e:92:4c:23:1c:a4:ec:0c:89:b7:dc:5b:18:50:00:
ef:30:5d:77:8b:d8:f5:83:b6:7b:8c:af:ef:55:bf:b1:a6:99:
67:aa:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:15:39 2025 by rpki-client