Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3A6B202B33711F0B361A5B8DAE4EC9C.roa
File: B3A6B202B33711F0B361A5B8DAE4EC9C.roa (raw, json)
Hash identifier: 4jHPmXQMJD3dvXA+SCyBja5eOa7dlDVJ8hCkIDkNMos=
Subject key identifier: BA:56:E2:78:FA:8E:63:F7:BA:09:4A:F4:94:DF:55:A5:8E:6D:D5:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A527
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3A6B202B33711F0B361A5B8DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 13:20:27 +0000
ROA not before: Mon 27 Oct 2025 13:20:22 +0000
ROA not after: Sun 30 Nov 2025 13:20:22 +0000
asID: 401783
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107815 (0x1a527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 13:20:22 2025 GMT
Not After : Nov 30 13:20:22 2025 GMT
Subject: CN=68ff719b-3ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:cb:5d:bf:12:02:a0:8e:7e:a2:2e:85:85:
24:61:43:d2:66:e9:64:45:82:c7:c6:a0:31:3f:5d:
e7:dc:fe:f0:24:63:2c:9a:dc:be:fe:73:9f:72:09:
0f:31:b1:71:73:f6:66:aa:04:64:e0:1f:3d:7f:1b:
9c:f5:cc:aa:6d:fd:58:b9:5e:90:26:0e:4f:54:bc:
48:cf:47:44:b6:f2:56:56:8d:2b:1f:b9:74:61:59:
30:e8:9b:42:35:e6:0e:3e:25:ff:8e:6a:ee:29:7f:
e2:6a:3e:52:8d:9d:38:41:88:78:cf:3b:96:a4:47:
c1:75:c6:e6:68:37:2e:2a:d2:a1:20:e8:38:8a:f2:
bb:93:64:a2:b3:6c:cf:ba:f2:86:a3:cc:a4:f3:03:
26:34:1d:7e:2f:2a:f2:3d:c0:e1:de:ca:2f:ae:2d:
fc:02:a4:b1:aa:35:26:23:ed:6b:65:31:8b:64:ed:
0d:28:cf:c0:b7:54:09:19:d3:c7:ca:86:e4:d9:b7:
6a:15:8d:df:a0:41:cf:1c:e1:a4:f7:8b:ab:55:f6:
6d:8e:11:63:ef:43:4a:73:98:5a:67:8a:70:08:90:
4d:6d:50:0e:7a:61:57:00:d5:e0:f7:8a:95:82:e6:
ac:72:3f:4d:f9:4f:fd:d7:77:37:fd:ed:af:0c:cd:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:56:E2:78:FA:8E:63:F7:BA:09:4A:F4:94:DF:55:A5:8E:6D:D5:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3A6B202B33711F0B361A5B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.82.158.0/24
154.83.65.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
31:52:d3:38:6f:08:16:95:32:10:e6:bd:9a:4e:c3:24:37:72:
84:68:24:53:02:ef:2a:da:6a:78:04:5c:10:1c:a2:1e:b0:f8:
8c:ea:b1:6f:6c:be:3a:58:c1:05:a5:f1:50:1c:71:13:6e:d0:
7d:20:11:9c:73:ec:ba:2d:75:a3:f4:cc:83:8a:f5:b7:13:74:
0c:72:64:f2:a6:24:43:40:8b:3d:c3:61:ac:b9:85:9d:4c:14:
af:c4:14:f7:40:d6:55:74:22:43:bd:d8:ec:d0:6b:81:25:4f:
cf:eb:76:1c:19:24:dd:22:00:ca:96:7c:a4:36:ff:d5:66:74:
40:28:38:84:08:76:b7:5c:2d:f0:ef:3c:6a:da:ee:ec:a5:a0:
f1:68:61:58:32:a6:e7:72:fc:24:d1:d8:4b:e4:7b:18:3e:ac:
01:99:98:9f:3a:a4:42:1b:f1:c7:77:0d:cf:4f:a8:a5:e2:34:
f4:aa:20:39:05:32:29:14:db:54:b9:62:31:f5:e5:49:06:95:
7b:41:d0:3b:da:66:56:da:ca:e7:79:60:98:60:53:ba:65:7d:
b4:8c:e1:e1:91:7b:c9:dc:d8:ac:5f:c0:02:48:e5:ef:b4:8b:
03:4e:ad:f8:a4:50:46:d8:1a:ab:98:e6:ec:65:7c:4d:5b:06:
59:6c:24:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:21 2025 by rpki-client