Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D3A0A3EB36311F0BCC19ED2DAE4EC9C.roa
File: 3D3A0A3EB36311F0BCC19ED2DAE4EC9C.roa (raw, json)
Hash identifier: FW/PH3rtRer24WpEJVpJbmCBBMeucWZ7+QPgJ9OEzQY=
Subject key identifier: 52:8A:BE:74:9E:CB:5D:60:EE:7B:8C:3E:A3:BD:40:5E:CA:F4:2A:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A573
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D3A0A3EB36311F0BCC19ED2DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 18:32:08 +0000
ROA not before: Mon 27 Oct 2025 18:32:00 +0000
ROA not after: Mon 01 Dec 2025 18:32:00 +0000
asID: 62240
IP address blocks: 154.194.36.0/24 maxlen: 24
154.194.59.0/24 maxlen: 24
154.194.67.0/24 maxlen: 24
154.194.109.0/24 maxlen: 24
154.194.110.0/24 maxlen: 24
154.194.111.0/24 maxlen: 24
154.194.117.0/24 maxlen: 24
154.194.207.0/24 maxlen: 24
154.198.63.0/24 maxlen: 24
154.198.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107891 (0x1a573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 18:32:00 2025 GMT
Not After : Dec 1 18:32:00 2025 GMT
Subject: CN=68ffbaa8-8f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a9:f8:81:1f:c8:8b:90:f8:91:19:b0:69:46:
be:0e:e4:48:a8:f3:9a:c7:95:47:24:75:c1:f1:27:
e1:6d:86:7d:9a:5d:d5:1e:2f:44:39:28:a7:a4:69:
53:34:25:ed:7c:d9:b6:32:fd:d6:c5:46:e9:e5:74:
fa:0a:1d:66:02:de:a9:33:05:cd:0d:1a:a8:97:89:
b6:46:0c:2c:cc:20:2e:8e:93:15:7f:be:03:ea:4a:
fc:71:5a:7f:63:10:ab:4a:ea:ac:11:ff:0e:1b:33:
ff:cd:33:2f:67:88:71:3d:9b:79:09:0c:56:8d:a5:
05:23:b8:5a:02:4b:8b:f1:e0:e4:3c:ab:9d:7e:05:
ca:0f:52:b1:81:d6:ed:a4:94:27:3e:2c:58:71:c2:
34:82:53:3e:c6:4a:23:a3:92:8c:c3:15:15:c9:3a:
bc:fc:29:81:70:cb:2d:b2:6e:c0:8b:5d:9d:46:53:
a2:9a:a6:7e:b3:9a:f8:41:af:db:e8:84:4a:59:f7:
dd:26:ea:0d:a7:4e:51:59:0b:ff:37:9f:6a:f9:e5:
b3:09:d1:f5:9f:b8:1d:dc:9e:a8:c7:3b:65:e1:c1:
56:74:80:11:a1:f4:1c:f2:55:d6:97:a9:a9:03:44:
a1:1f:d5:86:88:37:f1:42:57:4c:cb:32:de:74:59:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8A:BE:74:9E:CB:5D:60:EE:7B:8C:3E:A3:BD:40:5E:CA:F4:2A:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D3A0A3EB36311F0BCC19ED2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.36.0/24
154.194.59.0/24
154.194.67.0/24
154.194.109.0-154.194.111.255
154.194.117.0/24
154.194.207.0/24
154.198.63.0/24
154.198.191.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:a2:0b:20:52:73:55:cb:e4:2b:24:57:79:24:dd:2a:99:bc:
58:43:06:7e:74:51:e0:f6:49:c5:35:f0:e5:d4:ab:32:19:fb:
b1:86:9e:13:48:90:39:2d:ba:69:fa:4d:15:e9:f3:65:7d:bd:
aa:e1:bb:fb:26:5b:b1:f2:1c:ad:a1:ed:42:2b:23:f7:d1:6c:
d7:56:26:4b:33:77:5a:5d:95:e1:91:5b:8e:0f:a8:db:0e:42:
96:ef:f4:46:6f:9b:27:48:f9:9f:e8:2c:19:a8:50:48:f0:e2:
9e:eb:7f:6b:6c:19:2b:9f:6c:5a:b8:f2:fd:46:33:2a:03:54:
5e:c5:42:e8:97:fd:b9:a5:cf:53:f0:4e:a1:28:c4:da:4b:19:
9a:4b:97:66:76:39:9d:d4:cb:94:7c:8c:02:53:f3:36:fd:b3:
4e:46:31:ad:20:af:43:a8:9f:4a:0b:ba:42:2c:31:8e:5b:9f:
8d:c6:5c:45:96:e9:2d:83:19:de:d0:05:2a:a4:39:8a:81:b3:
a1:ee:d7:fd:22:74:96:3c:3d:0c:15:c7:55:9e:5d:70:d2:d9:
5e:ca:cf:54:f8:28:89:da:17:ba:ac:6e:5b:78:8e:aa:56:d6:
06:97:6b:fd:fc:8c:fd:37:36:32:3a:c8:8f:58:99:4f:55:08:
77:44:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:48 2025 by rpki-client