Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A12D7738B86811F0858315E4DAE4EC9C.roa
File: A12D7738B86811F0858315E4DAE4EC9C.roa (raw, json)
Hash identifier: w5q268SpwUq/i3c1ayoYf8wNvpAMw4axUg9g0x4GKvU=
Subject key identifier: 53:0E:8C:8C:B7:55:10:58:0E:BF:CF:CA:C1:A6:A4:0F:6E:BE:BB:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A12D7738B86811F0858315E4DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 03:53:17 +0000
ROA not before: Mon 03 Nov 2025 03:53:09 +0000
ROA not after: Thu 05 Feb 2026 03:53:09 +0000
asID: 9294
IP address blocks: 154.195.64.0/19 maxlen: 24
154.203.96.0/19 maxlen: 24
154.206.192.0/19 maxlen: 24
154.218.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108266 (0x1a6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 03:53:09 2025 GMT
Not After : Feb 5 03:53:09 2026 GMT
Subject: CN=6908272d-5c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ec:27:d8:17:90:d8:f3:b9:b7:c7:4f:d3:f1:
b0:b7:05:ec:9f:7d:c9:8d:89:e8:40:cf:9b:ab:73:
84:3d:34:9d:6d:3f:6e:30:65:26:09:e3:c9:29:5c:
1b:37:e7:8e:f8:0a:1f:ec:85:3f:a0:0a:f3:0f:1b:
24:a7:ba:1e:8e:01:19:31:d5:d4:3f:53:d7:af:6d:
9b:b3:86:ac:b3:39:55:4b:1c:ff:19:61:80:6d:96:
94:3b:3d:92:50:66:ad:0b:34:7e:25:c7:c5:44:eb:
82:46:8d:d5:ef:eb:90:23:c6:61:65:ba:d1:fe:83:
25:0b:f8:26:fe:67:a4:e5:72:22:01:d1:94:c0:80:
26:03:e7:ee:21:24:4b:44:93:3d:8a:e1:1d:3f:81:
d5:44:9d:13:21:12:fc:b5:12:b6:dd:c5:7c:fc:d2:
83:cc:d6:e7:f5:7b:8b:c0:c3:e5:b5:63:a2:13:19:
24:0a:0d:40:c8:ca:a0:46:32:a8:93:56:22:f5:38:
66:e2:a8:cc:0f:b7:12:c8:fa:fe:be:29:f1:f4:36:
33:c7:9e:d5:39:37:db:14:c1:53:10:ab:21:73:b8:
c1:a4:7c:5b:96:cc:27:ed:b4:da:be:b5:d2:1a:c1:
50:8d:94:b2:e0:30:2f:7e:31:20:da:d2:f5:2a:4e:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0E:8C:8C:B7:55:10:58:0E:BF:CF:CA:C1:A6:A4:0F:6E:BE:BB:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A12D7738B86811F0858315E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.64.0/19
154.203.96.0/19
154.206.192.0/19
154.218.32.0/19
Signature Algorithm: sha256WithRSAEncryption
cf:41:78:8f:35:38:72:17:d7:0f:63:f2:b5:42:86:bd:23:f6:
ea:4d:be:28:80:8b:98:da:71:aa:5d:62:89:2c:fd:fa:2e:f3:
c1:03:9b:6a:65:0e:63:68:fd:5a:5a:dc:30:68:3d:13:23:86:
33:bc:b5:5f:87:7d:aa:0b:bc:aa:19:0f:a7:70:b3:cf:76:9c:
94:36:0b:dd:c6:4a:ec:e0:2d:61:86:b7:32:9b:05:59:d8:4f:
ea:49:8f:aa:cb:ac:1b:a2:13:b3:24:0d:af:44:de:d9:28:45:
2b:00:b1:58:85:3d:97:b3:f7:03:f6:f1:b5:46:31:1a:e0:e0:
c8:90:39:86:c8:31:53:88:08:f6:ef:74:a9:e2:32:66:ae:b4:
61:35:79:ce:fa:ef:7b:ec:48:2f:d0:2c:8c:78:af:98:cd:0c:
b7:79:7d:4b:bc:48:31:fa:44:50:72:9c:46:fb:b5:fe:6f:d1:
de:bd:70:0e:48:b1:3d:85:74:3c:1b:de:4b:74:3c:33:3c:95:
4d:b1:6c:b0:d5:6a:bf:69:d2:94:c8:57:9c:ce:08:67:b4:4a:
3f:9d:e3:21:f0:2b:13:1b:cc:da:90:1b:89:5e:8c:87:e2:97:
53:ca:3c:2f:43:2b:f7:85:f4:eb:f7:48:5a:27:09:a6:db:06:
e6:a9:66:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:58:04 2025 by rpki-client