Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEC45EB8B8B211F0A36D99BDDAE4EC9C.roa
File: EEC45EB8B8B211F0A36D99BDDAE4EC9C.roa (raw, json)
Hash identifier: UedHIgTkyTJS3RdyfXQAKjZ3noS0Hml6dTfTNTniekE=
Subject key identifier: D7:4A:48:D8:65:3C:23:9C:B7:48:24:F7:B1:38:B9:EC:91:39:7D:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A73C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEC45EB8B8B211F0A36D99BDDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 12:45:10 +0000
ROA not before: Mon 03 Nov 2025 12:45:05 +0000
ROA not after: Mon 15 Dec 2025 12:45:05 +0000
asID: 396356
IP address blocks: 154.93.8.0/21 maxlen: 24
154.95.48.0/22 maxlen: 24
154.95.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108348 (0x1a73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 12:45:05 2025 GMT
Not After : Dec 15 12:45:05 2025 GMT
Subject: CN=6908a3d6-1f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:83:bd:dc:d3:25:68:c2:d0:04:8c:15:d4:7c:
05:e2:1d:59:d4:40:64:e9:fe:c8:55:73:4f:14:e3:
f8:41:ce:12:b1:8c:ce:e3:a3:e9:6b:59:9d:a7:36:
84:ad:3a:b9:e6:8e:13:e3:29:7a:8d:89:d6:a9:84:
5b:ef:0d:e8:99:db:dd:52:47:dd:27:9c:db:88:ae:
fe:6a:16:43:cf:6d:f3:b6:2b:70:25:d3:8d:8b:b9:
24:eb:9b:e3:3a:72:94:e6:0e:c3:76:c5:cb:c3:87:
4e:21:c1:a8:49:ad:06:c1:5c:ac:62:7b:22:1a:9a:
c2:f7:b1:8c:e1:54:d7:45:97:a5:84:b5:69:d8:75:
0c:48:0d:b9:5a:70:e3:76:ca:4b:22:3a:4a:c2:09:
23:c1:a7:20:05:0c:5f:8a:83:ac:cd:61:37:ce:8b:
25:86:a8:63:b9:72:c8:e1:6c:6e:2c:0e:6d:ed:de:
5d:9d:ac:33:e9:c7:a0:23:d4:0e:68:ef:56:49:76:
71:0d:e5:db:e3:73:c5:b1:da:56:31:9c:64:3d:01:
ec:48:bb:67:cc:84:6e:f4:fc:03:8a:52:da:c5:af:
61:b7:2e:21:9a:3d:09:5e:71:6e:20:e1:4a:d0:4f:
55:6e:fb:4c:80:cd:34:b8:33:6e:9a:33:df:e2:50:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4A:48:D8:65:3C:23:9C:B7:48:24:F7:B1:38:B9:EC:91:39:7D:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEC45EB8B8B211F0A36D99BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.8.0/21
154.95.48.0-154.95.52.255
Signature Algorithm: sha256WithRSAEncryption
5f:e8:68:44:32:ca:21:16:b8:df:2b:8d:ad:12:e8:58:3e:3c:
9d:f0:56:b0:8b:93:00:c2:b7:3f:d7:7e:ee:b3:4c:87:79:92:
77:1a:25:26:67:eb:b6:8b:d6:7a:d7:28:c4:ac:74:2f:7e:fc:
d1:80:f1:aa:f3:36:b1:ab:9d:57:d1:96:8b:ad:04:cb:e0:b6:
22:55:9d:8e:5a:9c:08:9c:b4:8e:36:f4:ef:6e:81:4d:1b:cf:
3d:95:cc:06:b9:97:72:5c:7c:2c:8b:e5:23:96:d9:ae:82:32:
75:4e:2b:12:cf:d4:b5:3c:a8:8e:46:8f:f4:f2:54:23:b2:12:
c6:d7:0a:2b:41:6e:8d:55:e4:ed:0f:ab:1d:8e:8c:9a:e8:8a:
58:b8:e8:95:84:d7:35:b3:ff:2c:b7:56:c9:e9:1a:88:2f:63:
bd:e5:6e:f4:e5:ec:ea:e2:bd:85:41:39:b0:7e:51:f4:1c:6e:
ef:eb:1e:52:aa:68:9d:d1:17:a1:58:e4:4e:fe:24:62:46:76:
6c:07:d7:f8:91:96:af:4a:a4:a5:89:38:24:a9:fb:b9:d1:76:
de:a8:40:a7:92:39:63:48:c2:84:7c:7f:44:5c:09:21:08:13:
60:23:74:3e:b3:ed:ec:1f:f0:74:28:8c:89:b1:07:d3:f9:af:
fe:e1:ff:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:09 2025 by rpki-client