Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22771D36A28311F0BB7ECD85DAE4EC9C.roa
File: 22771D36A28311F0BB7ECD85DAE4EC9C.roa (raw, json)
Hash identifier: u7z9qA/GJW+TYdfvvFzNJ6PIFIDjbIiNnT6PWzxBXZo=
Subject key identifier: 64:42:3D:70:FF:3C:8E:25:8B:B5:BC:44:FE:FC:F5:00:7A:3D:01:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A256
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22771D36A28311F0BB7ECD85DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 07:07:35 +0000
ROA not before: Mon 06 Oct 2025 07:07:28 +0000
ROA not after: Fri 31 Oct 2025 07:07:28 +0000
asID: 44559
IP address blocks: 154.81.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107094 (0x1a256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 6 07:07:28 2025 GMT
Not After : Oct 31 07:07:28 2025 GMT
Subject: CN=68e36ab7-4fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:7f:31:90:7b:aa:40:12:f7:d8:1e:c4:2b:
5c:4f:67:b5:2c:62:15:85:13:b0:71:0c:4c:80:e8:
0b:a3:61:e0:4a:ee:e4:82:33:4d:48:dc:d5:35:fa:
41:39:83:80:8e:43:57:5a:11:ed:78:70:b2:ff:c8:
d8:d5:81:ba:47:1e:78:75:ce:b5:c4:41:e2:6d:4e:
5f:1f:b6:94:2b:e4:d2:4d:6b:33:0b:63:04:b4:1a:
4d:09:0f:4b:4d:3a:f8:f3:59:4b:97:be:bd:45:a3:
8a:2c:ef:15:54:0d:09:84:d6:4f:d4:91:84:9f:5a:
47:3a:86:a6:8f:fe:75:0d:59:55:7d:19:29:29:3d:
e6:9d:18:0b:e8:b6:fa:ff:2c:6f:20:cd:11:45:5a:
90:ad:f6:43:ec:ec:06:87:47:61:92:44:d1:ba:4d:
d0:a5:a0:6a:54:0f:df:b7:e7:83:09:ce:b3:56:21:
79:8a:2e:4d:e6:5e:16:ef:ed:00:db:df:31:bf:64:
cb:2a:e9:c1:24:03:f3:90:e2:2d:4c:2c:19:67:5d:
09:06:7b:48:ad:2f:10:9b:6f:65:db:6c:57:de:c2:
ec:04:ca:c5:1d:03:a1:56:ee:0c:57:75:d5:57:8b:
f6:6e:33:e7:8c:fb:97:c8:49:82:f6:84:5d:54:c9:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:42:3D:70:FF:3C:8E:25:8B:B5:BC:44:FE:FC:F5:00:7A:3D:01:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22771D36A28311F0BB7ECD85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.194.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:40:56:b7:ba:62:4b:64:51:bc:95:a6:dd:c0:42:23:1a:3c:
10:a0:0e:cf:8d:41:3a:09:ca:8b:24:ac:97:84:50:3f:35:b8:
e6:1d:85:c9:c8:c5:35:f4:7f:ac:a0:b4:84:b0:38:b4:14:04:
3f:69:24:c3:bd:b7:40:47:53:41:fc:1e:ff:24:33:51:45:83:
98:22:59:bf:70:ba:a3:8c:57:79:15:3c:67:98:08:7b:67:ba:
39:e9:4e:f2:61:56:12:9e:00:c4:44:0c:07:f3:ab:34:86:3e:
76:be:71:40:55:ef:ab:f6:d9:95:d3:d6:12:7e:34:b7:ff:a2:
e1:0a:52:55:1e:ad:32:6a:6b:3f:e6:38:d1:8d:84:eb:f8:15:
f8:c0:55:6a:67:ba:88:59:5b:99:f3:59:59:c5:6b:2d:73:66:
96:93:c8:ec:67:e6:59:05:67:c3:f8:9d:9f:9b:f0:82:ac:40:
e0:a3:36:18:71:cb:e5:3f:56:88:18:5d:6a:38:e1:c6:bb:0f:
d6:da:e6:98:53:e7:60:6f:fe:b3:06:30:1f:4c:81:96:1e:52:
9c:79:10:03:ee:f1:5f:59:8b:5c:b0:06:97:70:12:e0:93:59:
7f:d2:e0:4c:f2:7d:48:dc:27:3a:16:c0:c8:fd:c6:d2:9c:9a:
ae:1f:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:19 2025 by rpki-client