Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD04DDB4B31111F0BA9061BFDAE4EC9C.roa
File: AD04DDB4B31111F0BA9061BFDAE4EC9C.roa (raw, json)
Hash identifier: FetmfD9by2RzoXnOrBCF+6liOtdU90o5851x2zI6B5g=
Subject key identifier: 0D:4D:72:98:71:38:15:2B:76:68:53:A7:88:04:D2:69:C6:32:DC:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A50A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD04DDB4B31111F0BA9061BFDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 08:48:15 +0000
ROA not before: Mon 27 Oct 2025 08:48:10 +0000
ROA not after: Sun 30 Nov 2025 08:48:10 +0000
asID: 9304
IP address blocks: 154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107786 (0x1a50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 08:48:10 2025 GMT
Not After : Nov 30 08:48:10 2025 GMT
Subject: CN=68ff31cf-e898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:56:3d:48:f1:25:5c:d4:b0:85:73:55:47:ea:
9e:6b:3d:db:6d:8f:c2:f7:4d:b2:ee:fe:4a:a3:73:
7e:aa:1b:fc:80:3d:a4:ec:cf:cd:08:49:44:13:80:
6d:6d:9a:8d:96:63:61:b4:12:09:4c:09:79:3f:9c:
ab:ce:de:9c:5e:e0:bc:68:51:22:f2:78:d8:aa:9e:
4f:51:bc:6a:77:71:60:75:42:38:29:e8:e5:59:f0:
40:c4:99:e1:76:2e:ea:14:f5:7d:15:5e:62:1b:ad:
e3:7a:ee:cc:f2:24:bc:89:e6:7f:87:50:c7:30:2a:
b7:4b:98:20:6b:53:b9:ef:0e:8f:97:15:45:1f:5c:
4c:ae:19:25:c4:db:b0:47:e1:f4:c0:36:5f:49:ae:
87:df:1c:d0:10:fb:6b:8b:e6:90:6a:fd:ad:24:75:
aa:70:a1:d4:4b:20:ac:fa:d6:0c:2f:b1:18:7d:ac:
54:2d:63:3e:cf:ef:04:85:8e:bd:a9:38:4d:3e:a3:
a0:ff:73:33:86:24:20:d9:41:93:1d:e1:5c:0b:b0:
73:c6:d3:bb:45:64:dc:aa:6e:46:d0:19:ed:f8:46:
ac:41:25:1b:be:94:55:df:93:be:1f:d7:58:b1:a3:
94:f5:04:a9:83:1d:6a:73:d3:50:90:ed:28:2b:5d:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4D:72:98:71:38:15:2B:76:68:53:A7:88:04:D2:69:C6:32:DC:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD04DDB4B31111F0BA9061BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.195.0/24
154.196.134.0/24
154.200.1.0/24
154.200.37.0/24
154.200.53.0/24
Signature Algorithm: sha256WithRSAEncryption
01:59:f1:7e:52:12:6a:c8:73:31:c9:4d:29:92:50:42:ce:45:
e2:58:af:55:57:fa:c8:c0:e4:65:64:2a:65:39:77:a9:90:36:
3c:b1:fe:05:a9:fd:5c:b5:c6:08:94:9f:40:0c:c7:a0:9a:32:
fc:fa:ae:c1:0d:94:88:2f:7a:3b:84:63:fc:29:07:5f:18:0e:
cc:d1:75:69:7c:af:b4:6f:fb:d7:a1:80:f4:b0:fc:8c:5d:ad:
e0:4b:5c:dd:a7:95:48:2f:8b:60:07:10:74:6d:7f:3a:b9:2e:
df:c1:90:0c:56:fe:86:88:d1:67:04:7b:46:f5:f5:73:ed:27:
6a:0b:a2:ee:df:eb:d3:88:42:f3:0c:40:ff:17:cb:54:88:20:
38:69:e0:f8:3e:4d:3c:e6:4c:86:2a:6e:ca:eb:e0:e8:9d:63:
b6:0f:fa:81:20:33:51:22:f4:8a:27:d9:c7:51:b5:80:ee:94:
ed:61:bd:38:3d:4a:b1:79:c4:58:6e:91:4d:fb:f4:71:de:99:
ee:7d:13:84:f9:cb:7f:03:18:d5:39:08:dd:e7:0c:9d:39:c1:
ab:57:94:2a:3b:c7:51:1d:f7:26:64:ec:09:3a:08:03:08:b2:
67:79:4d:13:da:0b:b3:99:54:46:fa:fe:db:53:28:02:96:28:
63:d2:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:00:51 2025 by rpki-client