Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECBA58E4B37A11F098A6F3E4DAE4EC9C.roa
File: ECBA58E4B37A11F098A6F3E4DAE4EC9C.roa (raw, json)
Hash identifier: vgXO1bCo5AZgE26tg1+QRgPwKHFDQPw8WF+aYnrjsmg=
Subject key identifier: 8C:40:86:94:79:E1:62:65:C6:63:9A:30:89:48:C5:BF:C9:01:22:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A590
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECBA58E4B37A11F098A6F3E4DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 21:21:39 +0000
ROA not before: Mon 27 Oct 2025 21:21:32 +0000
ROA not after: Tue 02 Dec 2025 21:21:32 +0000
asID: 984
IP address blocks: 154.193.62.0/24 maxlen: 24
154.193.85.0/24 maxlen: 24
154.196.133.0/24 maxlen: 24
154.196.161.0/24 maxlen: 24
154.200.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107920 (0x1a590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 21:21:32 2025 GMT
Not After : Dec 2 21:21:32 2025 GMT
Subject: CN=68ffe263-5331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:2e:28:d2:d8:de:f2:85:d7:b1:c8:5e:9b:
c1:e2:4e:5e:d0:0b:82:48:c0:35:fe:8a:a5:ce:d7:
04:21:28:c3:89:3c:54:31:bb:3e:59:13:c8:a6:ae:
cc:11:99:eb:4a:ea:72:7c:aa:31:0d:2b:05:06:31:
dd:2e:39:19:34:1e:13:c7:41:ef:5c:cc:f5:28:55:
97:69:19:59:8d:84:8e:81:19:94:b4:2e:7a:ac:be:
45:51:be:73:77:05:64:35:d5:60:8b:f5:c5:63:7c:
97:b9:2b:bf:d5:9d:1c:05:a5:b1:54:b4:3b:7d:8c:
08:41:93:84:88:3a:66:2d:65:40:fd:21:70:14:01:
da:01:ee:76:37:1e:8d:29:6c:c5:1b:3c:b1:36:85:
c4:d0:b9:25:9d:f7:73:79:79:fa:92:5c:8b:fa:eb:
10:c2:d0:6f:a7:83:8b:2e:f3:eb:7b:6c:ed:ac:d3:
ec:0f:8e:98:62:2e:e4:c6:98:d0:0e:a9:37:3a:fe:
71:3a:1d:24:23:a0:98:13:65:ce:ca:d1:03:e5:5e:
0b:e4:53:c3:9b:9a:af:a9:bd:fd:30:a4:ef:bf:db:
a2:72:28:88:53:52:8e:34:6d:37:9e:95:6e:70:b4:
5b:a0:3d:7b:2e:76:52:66:17:4c:6a:91:8e:cc:41:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:40:86:94:79:E1:62:65:C6:63:9A:30:89:48:C5:BF:C9:01:22:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECBA58E4B37A11F098A6F3E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.62.0/24
154.193.85.0/24
154.196.133.0/24
154.196.161.0/24
154.200.155.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f4:f4:3a:e5:66:64:b5:61:7f:4d:df:6e:e3:b8:1e:70:f8:
d5:05:d0:c7:8c:73:4f:16:55:8d:0a:9f:5c:7e:af:2d:11:73:
e9:79:50:79:9f:07:81:10:24:29:c5:c2:45:f7:67:7d:e0:a9:
31:23:2e:e2:4b:58:a7:ed:76:23:be:e7:59:17:ef:c6:0c:34:
89:45:ba:5d:70:5c:de:86:15:05:cb:2d:f5:cc:93:cd:b0:2d:
2c:df:81:4f:94:a3:d1:25:7c:63:71:59:87:25:7e:cb:cc:f9:
27:aa:76:47:1b:5c:c6:ef:89:50:30:8a:2f:cf:de:40:04:24:
30:a9:bb:d2:27:71:1c:50:c4:8a:c9:f5:3f:5c:5a:b1:15:9a:
ea:2a:ee:2b:c4:d1:55:14:e8:74:f3:6c:c4:0d:7f:c4:54:72:
88:be:39:28:58:98:10:2d:3b:8d:d5:d4:36:7f:0f:e2:7d:fd:
71:c3:a1:dc:3c:e2:ed:82:42:b7:6c:eb:f3:7a:e6:b3:d4:16:
1d:b2:ac:8b:7e:8f:52:ac:21:24:00:8e:e6:a4:82:fb:b8:21:
0b:4a:4b:6b:7f:19:64:af:07:6e:49:a7:d8:a5:6b:60:e0:b3:
36:62:49:b3:4e:4b:3d:e4:95:47:b0:6d:12:1a:95:ed:4d:5c:
62:8d:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:14 2025 by rpki-client