Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF076D08B37411F0A10A21BFDAE4EC9C.roa
File: FF076D08B37411F0A10A21BFDAE4EC9C.roa (raw, json)
Hash identifier: c7Gjhc8n+lE60XKOOmysjTVqtVMe31uzBKszoG9EDDc=
Subject key identifier: 25:92:DB:1A:56:19:03:FE:50:6C:73:9E:50:1B:0C:E3:B9:23:56:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A58A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF076D08B37411F0A10A21BFDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 20:39:13 +0000
ROA not before: Mon 27 Oct 2025 20:39:04 +0000
ROA not after: Tue 02 Dec 2025 20:39:04 +0000
asID: 395793
IP address blocks: 154.200.2.0/23 maxlen: 24
154.200.4.0/23 maxlen: 24
154.200.6.0/23 maxlen: 24
154.200.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107914 (0x1a58a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 20:39:04 2025 GMT
Not After : Dec 2 20:39:04 2025 GMT
Subject: CN=68ffd871-7ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:30:cc:2e:55:af:4a:e5:e2:41:85:69:52:
38:f4:bd:be:3c:6b:a5:a9:b8:81:13:6c:92:33:3b:
ab:03:38:51:83:46:bb:a6:51:31:24:7b:82:52:5f:
84:ad:c1:9d:e4:de:b6:47:ae:b8:35:5d:14:16:32:
4e:32:41:b6:6b:26:86:54:bf:12:4d:19:1d:9c:e2:
48:58:cf:6a:d2:6d:dc:3e:a3:65:72:55:61:45:fa:
dc:5a:c0:97:0d:bb:c3:c0:f0:95:08:b5:62:83:a6:
2d:8f:78:ec:5b:e3:81:61:23:55:15:06:e0:3a:09:
4d:e6:44:ef:85:0a:52:22:55:e4:6a:ad:81:1a:1c:
47:16:d9:8e:3d:f9:aa:fb:99:a1:1c:cb:c7:bb:97:
49:8d:54:de:fe:ee:c2:66:79:85:77:56:95:19:ac:
fb:79:56:fe:ee:10:e5:f5:d4:ec:6a:e4:52:4c:57:
84:8c:17:0a:7c:54:2a:3f:80:e4:7c:15:d8:a7:70:
3c:c8:87:45:06:c0:ac:58:c1:fa:5b:0e:38:c7:ce:
89:25:4a:ab:52:49:63:18:49:85:9d:b6:05:e9:49:
34:af:9f:92:33:f7:99:83:3d:75:ac:4d:5e:68:28:
ec:7f:97:57:77:2c:08:13:52:c9:0c:97:1c:03:0b:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:92:DB:1A:56:19:03:FE:50:6C:73:9E:50:1B:0C:E3:B9:23:56:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF076D08B37411F0A10A21BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.2.0-154.200.7.255
154.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:25:7b:38:94:d3:6a:de:dd:8e:b6:90:e9:85:3c:08:0c:10:
dc:31:d1:eb:2e:0d:66:ec:28:20:ce:9e:e5:13:24:55:61:0d:
6e:1b:66:89:3a:ad:21:cf:d8:96:7a:71:23:c3:27:49:d3:e5:
33:cf:09:81:07:4d:c6:d9:89:78:e8:a5:d2:7d:1b:c3:ad:68:
86:bc:29:68:5e:1e:a7:7b:c6:c4:1a:32:92:2e:36:cd:8a:ef:
6d:0b:29:2a:e2:25:3d:5e:6d:30:d5:79:07:66:78:66:f0:9a:
bd:5b:77:fb:68:29:e6:85:77:17:19:a0:0a:f4:34:4c:48:53:
b7:3f:ea:5a:af:fd:51:3a:6f:f3:ce:53:bb:52:ea:4c:b6:34:
17:46:4b:34:fa:26:95:dc:68:47:59:04:41:e8:54:f7:94:f7:
fc:fb:42:9b:3b:d0:9f:db:0f:13:b4:e7:a0:f1:55:a2:49:9f:
af:5b:db:ab:2c:d8:63:88:88:84:47:a8:cf:e0:b0:2b:91:5f:
af:40:58:dc:65:b2:6c:ab:fe:92:0d:50:3c:d4:ff:cb:f6:2e:
29:80:79:35:28:e3:49:49:ba:1b:eb:62:52:a6:b8:56:96:b8:
52:43:96:59:01:4a:86:27:3d:9c:f3:ce:81:ee:5f:36:5c:5c:
91:46:b7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:11:52 2025 by rpki-client