Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C496681CB4F611F0BD0C8BBCDAE4EC9C.roa
File: C496681CB4F611F0BD0C8BBCDAE4EC9C.roa (raw, json)
Hash identifier: 6v0jyRSvpkHLOrLccJa0Zm2NXVIdeSXCEfFqi8PNXc0=
Subject key identifier: FB:10:AC:4B:F1:54:DA:13:1B:83:FE:4A:64:59:ED:DE:5D:DD:77:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A691
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C496681CB4F611F0BD0C8BBCDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 18:40:40 +0000
ROA not before: Wed 29 Oct 2025 18:40:33 +0000
ROA not after: Sat 03 Jan 2026 18:40:33 +0000
asID: 63139
IP address blocks: 154.94.64.0/24 maxlen: 24
154.94.65.0/24 maxlen: 24
154.94.66.0/23 maxlen: 24
154.94.75.0/24 maxlen: 24
154.94.76.0/24 maxlen: 24
154.94.77.0/24 maxlen: 24
154.94.78.0/24 maxlen: 24
154.94.80.0/24 maxlen: 24
154.94.81.0/24 maxlen: 24
154.94.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108177 (0x1a691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 18:40:33 2025 GMT
Not After : Jan 3 18:40:33 2026 GMT
Subject: CN=69025fa8-ee86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:d4:e1:d3:0f:ed:bc:19:21:a2:b2:9b:2d:
4c:7e:5a:75:8f:e9:64:a8:79:6f:1d:01:d7:1a:53:
b3:c6:fa:12:01:7e:8d:5f:85:ca:15:e7:a7:dc:e4:
27:9c:22:31:4f:ff:b0:6d:79:68:9f:ac:2e:ae:c5:
be:fb:fd:a6:db:ee:06:f6:a7:fe:2f:c1:4f:d0:f6:
f6:d1:29:1a:84:0c:91:c3:f2:f3:9f:2a:54:8f:d1:
cb:86:24:97:aa:47:48:90:1d:d3:de:88:dd:72:1a:
f0:c6:30:f9:65:45:f6:be:02:69:27:bf:c0:fc:5a:
9c:2a:a4:33:9f:63:da:e4:11:d5:86:f3:a6:85:3f:
6c:91:ff:57:b1:97:ba:a3:a8:88:9e:4f:f2:a8:b1:
d1:72:6c:1c:78:e9:29:b1:ee:0c:e5:cf:36:6f:fd:
a7:be:11:ee:73:0c:b0:b0:14:b9:a0:0d:3d:85:d4:
d5:4b:45:26:12:e5:ca:7a:0c:f1:83:d9:1f:48:86:
77:4d:fd:3a:ef:c2:8a:3a:41:04:2b:ac:a4:46:5e:
83:60:c9:be:82:3a:f1:43:82:67:23:16:88:c8:89:
f3:74:45:04:ea:19:fc:00:5b:00:35:8c:d7:4e:d6:
23:ae:8d:81:53:93:00:f1:c2:0e:28:0e:a3:9a:8e:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:10:AC:4B:F1:54:DA:13:1B:83:FE:4A:64:59:ED:DE:5D:DD:77:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C496681CB4F611F0BD0C8BBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.64.0/22
154.94.75.0-154.94.78.255
154.94.80.0-154.94.82.255
Signature Algorithm: sha256WithRSAEncryption
92:22:8e:6c:ec:47:9f:36:6a:f2:61:e1:35:56:99:68:67:8b:
4b:18:b3:b5:f2:ba:ec:88:19:cb:f6:ad:20:87:da:f6:e3:de:
f2:e8:fa:1d:9b:5d:6f:c9:f6:fc:5c:7c:00:17:86:3c:46:4b:
8b:03:c2:c2:d6:7a:09:8c:ef:87:5a:e8:79:5b:0a:7f:b4:c5:
09:bd:29:dd:a7:27:b4:6c:8c:d0:a6:aa:4f:59:ec:4d:61:87:
1c:3b:37:b6:d0:af:d1:67:be:5f:e8:78:f5:f6:bd:7e:1e:bc:
3b:ed:8d:14:30:2c:a0:de:9d:0b:4b:af:55:dd:8a:bb:7a:93:
e8:96:12:a6:34:2b:79:34:80:6e:a1:61:27:be:d0:43:19:4c:
ca:14:39:6e:96:8d:0e:d6:7f:28:6e:55:9c:d6:c7:ed:dd:8f:
46:20:6c:61:a8:a9:af:1a:3f:3e:a3:ec:88:74:3d:a2:ed:c7:
b9:4d:78:ab:b1:5e:ee:2e:e9:13:c1:80:6b:0c:c1:26:da:f2:
1f:13:1f:eb:f2:b8:15:50:6e:1f:3c:42:bb:27:7b:80:ea:e1:
5c:33:f5:67:82:ef:f3:08:c9:83:59:41:fc:47:22:d7:60:b6:
bd:bc:49:a4:3d:80:c0:8a:e9:3c:21:a8:19:c8:3a:05:d8:01:
a1:08:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:13:39 2025 by rpki-client