Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4746CB4B88A11F0899714C6DAE4EC9C.roa
File: E4746CB4B88A11F0899714C6DAE4EC9C.roa (raw, json)
Hash identifier: TYIGVC7a33LDNKN+XhD+eP+7LINzqumd07p6aIdV5Ow=
Subject key identifier: B0:CB:0C:83:8E:E8:7B:B0:DB:1E:94:61:D9:B0:D5:ED:66:34:AB:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4746CB4B88A11F0899714C6DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 07:58:33 +0000
ROA not before: Mon 03 Nov 2025 07:58:28 +0000
ROA not after: Thu 05 Feb 2026 07:58:28 +0000
asID: 9294
IP address blocks: 154.195.64.0/19 maxlen: 24
154.203.96.0/19 maxlen: 24
154.205.64.0/18 maxlen: 24
154.206.192.0/19 maxlen: 24
154.218.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108280 (0x1a6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 07:58:28 2025 GMT
Not After : Feb 5 07:58:28 2026 GMT
Subject: CN=690860a9-dc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:ef:3d:00:75:34:e1:50:4d:fe:d3:70:01:
07:11:ff:0f:02:04:96:f5:eb:a1:6a:0d:53:b0:8c:
6d:64:5c:4a:b0:e2:eb:78:43:02:21:50:eb:8f:5d:
44:97:02:b9:e5:5e:4a:3d:e0:4e:71:e9:58:29:43:
67:0d:94:6e:5a:5b:23:ae:a0:87:a8:48:1e:46:98:
03:06:c0:dd:7a:bd:ff:10:ea:2b:67:39:15:4d:be:
aa:74:f5:5a:99:1e:44:83:5f:82:7b:c8:20:bb:87:
91:d2:40:c9:7f:33:f3:7f:99:33:1b:79:26:44:72:
e4:a6:d8:e3:67:cf:10:6d:0e:69:5c:2e:51:fb:86:
fd:70:25:0b:bd:42:4b:60:d5:a1:c2:df:03:f7:c3:
47:34:15:df:a7:0a:89:b9:c4:1e:44:ea:65:dc:eb:
5a:3f:c8:75:bc:58:93:05:79:52:e4:ee:b1:f8:bf:
58:48:a9:01:cb:b1:1f:44:e3:6e:9c:f7:08:88:6a:
f8:75:cc:69:0b:66:da:6a:92:10:1a:bd:f2:0a:7d:
d1:39:24:eb:e6:1b:f9:1c:0e:ec:2d:87:97:86:6a:
a4:d5:07:fd:ee:15:c6:6b:c7:a6:80:c9:e1:be:54:
df:50:7f:78:d9:fd:2b:d4:35:ef:93:e6:2e:92:e4:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CB:0C:83:8E:E8:7B:B0:DB:1E:94:61:D9:B0:D5:ED:66:34:AB:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4746CB4B88A11F0899714C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.64.0/19
154.203.96.0/19
154.205.64.0/18
154.206.192.0/19
154.218.32.0/19
Signature Algorithm: sha256WithRSAEncryption
77:43:5e:91:eb:2a:2a:cc:09:c7:67:df:ae:b3:b3:7b:3c:77:
cf:09:b9:14:92:9b:67:f4:cb:28:c5:5b:27:9b:4e:11:2d:27:
22:f3:08:41:75:fd:e7:24:fe:8b:cc:38:4a:f6:bb:3c:88:3b:
da:a1:fe:a7:17:49:c6:2f:12:9d:42:58:7a:4d:75:09:de:9a:
3b:32:f4:2c:ca:e0:29:37:91:95:35:2c:7e:e4:42:0d:ad:13:
0a:10:4c:52:b8:7c:cf:14:76:3d:ef:06:1f:3f:14:24:c0:24:
de:c5:f1:70:13:ff:c7:08:3a:12:a7:fa:65:5b:96:45:ee:37:
6d:69:74:53:33:2c:8d:4d:13:02:0e:d0:a3:59:26:39:16:45:
35:f2:11:be:93:62:8b:fd:6f:b3:6f:03:f0:3e:8e:5b:fc:29:
d3:81:69:4e:a8:8f:01:80:23:b5:96:9d:74:3b:28:1e:28:c0:
2b:00:74:1f:d9:51:e9:76:b8:f3:36:1e:48:d6:2e:2b:cc:bc:
15:25:fb:f9:ac:09:fa:c8:23:fa:be:c4:c9:28:01:ba:55:85:
03:8d:b9:2e:ae:3d:09:58:e0:2d:ab:b0:82:b4:40:c2:c8:f9:
5b:87:14:f9:71:5f:9f:90:74:47:d6:76:9d:ab:e1:c3:c1:c7:
3d:40:a1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:05:01 2025 by rpki-client