Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0D8CDA4B32B11F09DC6D8E3DAE4EC9C.roa
File: C0D8CDA4B32B11F09DC6D8E3DAE4EC9C.roa (raw, json)
Hash identifier: lwsiCoEI66cEVRs1asFzWH4s/OIS9Xz8RyGJnKJpZpo=
Subject key identifier: 95:D4:07:84:0E:AE:EF:6F:FD:D6:36:B6:31:EB:22:20:01:A4:9A:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A51B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0D8CDA4B32B11F09DC6D8E3DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 11:54:55 +0000
ROA not before: Mon 27 Oct 2025 11:54:50 +0000
ROA not after: Sat 29 Nov 2025 11:54:50 +0000
asID: 2914
IP address blocks: 154.222.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107803 (0x1a51b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 11:54:50 2025 GMT
Not After : Nov 29 11:54:50 2025 GMT
Subject: CN=68ff5d8f-53f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:68:0e:a7:a5:28:3e:42:ed:f6:d1:83:98:
c9:18:44:7e:c2:49:61:db:98:f2:cd:fa:ca:46:2c:
19:98:5a:56:22:cd:13:dc:9a:41:c7:de:72:02:e5:
09:bb:76:2a:18:da:bd:25:ae:94:3b:a3:18:82:3c:
db:10:f6:8f:5d:a9:d4:5d:c8:0b:f5:c8:a5:26:33:
15:38:e8:ee:47:6b:e1:cf:73:c7:5d:ed:4d:d3:d7:
59:bf:6c:0e:ff:2e:18:43:5d:1e:b6:1e:98:9f:53:
d5:40:b3:e6:2d:05:0c:9c:cc:44:d2:22:1b:a2:bc:
6b:5d:52:78:4d:ef:01:07:f5:23:82:c9:e0:41:56:
22:72:8f:47:05:0d:55:0a:fb:b8:42:cd:f3:07:f2:
65:04:81:37:ba:9e:5d:42:15:17:89:81:38:c4:f0:
75:38:66:a0:a1:a1:11:ee:ce:94:78:f7:f7:a0:e7:
36:ac:a2:95:96:cd:f3:fe:c8:7e:86:ec:78:7d:05:
36:7e:f3:1f:c9:e7:46:55:f1:80:fe:8d:50:ee:96:
ab:f5:fa:dd:ae:0d:b0:a4:18:d2:a1:1c:bc:93:d4:
0f:03:af:71:7a:94:be:b8:dd:63:67:1d:40:f4:8c:
fb:7d:94:de:c5:de:40:ef:bf:9f:74:1e:22:0a:78:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D4:07:84:0E:AE:EF:6F:FD:D6:36:B6:31:EB:22:20:01:A4:9A:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0D8CDA4B32B11F09DC6D8E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.74.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:8e:2a:aa:ae:29:34:db:5d:0b:41:53:a7:b8:5a:71:de:d2:
0e:aa:a3:80:47:51:52:25:7f:5d:ed:73:0d:9f:d6:94:c6:0b:
97:b0:0a:a0:82:38:5c:f1:3b:b5:91:c4:3c:da:a6:f3:d6:91:
50:07:b2:3a:ea:e4:2d:d4:f1:da:42:ca:f9:7c:15:8c:90:88:
b1:1c:28:2f:b3:56:7a:82:21:81:eb:65:ae:63:d4:99:20:f3:
ba:9c:51:05:83:ad:7f:87:8e:ca:a2:eb:d4:cf:2c:b0:ba:b1:
de:fb:08:17:11:b4:cc:7f:c0:84:26:6d:8d:d1:d2:f1:e2:b5:
2e:7c:4c:47:7b:c5:a5:ff:ee:ca:8f:1b:71:a9:d9:02:57:82:
c6:5b:eb:ef:8e:eb:b3:22:f7:5d:b1:76:f1:7b:83:9e:46:d3:
3b:75:5a:a3:19:08:b0:e3:7e:5d:3d:17:2e:b1:3d:68:7f:04:
bc:89:1e:f0:5b:89:64:9c:37:28:5f:21:56:18:5a:06:eb:48:
ce:a0:0c:96:1f:97:45:4f:03:2b:ba:e7:47:f0:a4:69:0e:e4:
76:df:9d:9a:53:8b:78:8d:a4:fd:c7:f4:5d:55:9d:5e:27:ae:
a2:c6:b1:61:1f:d3:53:95:85:d8:9f:a0:a6:64:ee:a1:ce:70:
d8:ff:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:12 2025 by rpki-client