Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F02AD7CAB31011F0B8E224BBDAE4EC9C.roa
File: F02AD7CAB31011F0B8E224BBDAE4EC9C.roa (raw, json)
Hash identifier: bNHlWLvD7E8qsgLFZS51uXIgtlKXcy6TA5hu5Ujx6s0=
Subject key identifier: BA:AA:44:FD:96:73:13:04:98:4C:E0:26:8F:3A:F0:71:A8:E4:13:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A508
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F02AD7CAB31011F0B8E224BBDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 08:42:58 +0000
ROA not before: Mon 27 Oct 2025 08:42:52 +0000
ROA not after: Sun 30 Nov 2025 08:42:52 +0000
asID: 9304
IP address blocks: 154.196.160.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107784 (0x1a508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 08:42:52 2025 GMT
Not After : Nov 30 08:42:52 2025 GMT
Subject: CN=68ff3092-de28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:ff:42:83:17:07:64:63:eb:5c:b5:cc:ad:
4f:3c:2c:f9:6c:9e:92:e4:6c:07:dc:ec:f5:e3:e8:
58:7b:e7:75:9a:b3:8d:02:8c:09:7d:8f:f0:0e:f3:
25:64:e9:98:80:90:58:0a:98:0f:b4:81:33:47:bd:
4d:29:9a:6d:eb:90:a9:94:b7:eb:0b:e3:98:9e:0a:
24:da:75:df:56:d4:1f:86:8b:ca:73:4c:fa:cd:4a:
9d:84:7c:df:b1:7f:68:bc:b7:c4:e5:ff:0b:a0:05:
17:c5:44:26:77:ea:14:32:a0:f8:38:13:e7:9d:27:
65:9f:f6:89:a1:69:09:ac:5f:be:61:a1:91:67:d2:
21:0d:d1:c1:42:0f:6b:ea:d2:00:ef:6e:1b:0d:74:
40:75:7c:70:43:14:96:9c:46:be:f9:32:bd:95:c8:
1f:2c:0b:ef:0f:df:41:57:c7:15:8e:2c:25:30:98:
81:bf:17:14:60:6d:3c:e4:7a:74:6b:83:7b:9d:0c:
f0:68:5c:e0:a3:47:52:1f:e4:c5:82:36:f8:ba:c6:
dc:7f:0c:67:93:a0:02:6e:f6:6f:2d:ec:32:1d:fc:
df:82:22:e6:72:55:75:49:52:bc:04:dd:b1:74:86:
9a:6a:cb:3b:8b:cc:f8:b1:b3:5b:9a:af:7b:8f:e2:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:44:FD:96:73:13:04:98:4C:E0:26:8F:3A:F0:71:A8:E4:13:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F02AD7CAB31011F0B8E224BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.160.0/24
154.199.4.0/24
154.200.46.0/24
154.200.48.0/24
154.200.54.0/24
154.200.60.0/24
154.200.129.0-154.200.130.255
154.200.154.0/24
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
12:eb:e7:ca:4b:ed:d5:df:6c:f8:06:16:16:b3:84:c8:39:20:
66:46:a9:cf:c1:2f:89:1e:23:8a:cd:0f:4b:4a:91:5c:a1:ca:
9b:50:a5:66:4d:f3:5e:48:f0:14:09:6d:cb:0d:51:69:5b:50:
dd:de:d8:31:50:39:2a:57:d7:df:fd:ec:4e:67:26:fd:8e:43:
01:4a:01:26:24:4e:86:be:fc:90:31:ca:9e:84:b7:88:14:ac:
d0:d5:c1:05:e7:b5:a8:10:cf:e1:4b:0e:57:ac:c4:a5:d8:b5:
97:1a:ff:37:2d:c4:8d:c3:85:7b:ce:82:05:df:44:49:b9:75:
13:ad:17:57:a9:a8:30:74:3c:45:5c:96:74:ca:a1:e1:5b:e5:
93:cf:c9:ef:c7:e0:4f:fa:c6:96:85:14:87:8a:1d:04:0e:58:
80:a0:7e:31:91:70:a6:48:6b:39:e2:23:d4:57:60:48:2c:54:
a1:ed:74:05:7f:06:36:a3:ef:50:91:54:c1:1c:95:80:7d:1f:
37:eb:a6:81:a1:c1:d2:c0:48:19:bb:e2:13:9b:63:cd:75:11:
10:6f:ff:69:80:84:d4:09:7b:f7:25:9e:70:67:90:6f:6e:4c:
02:7d:0d:85:56:c8:52:d2:05:68:ff:af:a3:b2:6d:44:62:68:
2a:84:8f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:36 2025 by rpki-client