Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/425A879EBBBC11F0BBB563E3DAE4EC9C.roa
File: 425A879EBBBC11F0BBB563E3DAE4EC9C.roa (raw, json)
Hash identifier: If2ioEuzL2uPgdOFcMaOYybr2smlZap2jGOSxzB7DyA=
Subject key identifier: C0:E6:4B:2E:17:CE:19:E6:29:C3:3B:CC:2B:78:80:3F:81:3C:68:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A7D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/425A879EBBBC11F0BBB563E3DAE4EC9C.roa
Signing time: Fri 07 Nov 2025 09:29:29 +0000
ROA not before: Fri 07 Nov 2025 09:29:25 +0000
ROA not after: Mon 09 Nov 2026 09:29:25 +0000
asID: 138995
IP address blocks: 154.223.1.0/24 maxlen: 24
154.223.2.0/24 maxlen: 24
154.223.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108505 (0x1a7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 09:29:25 2025 GMT
Not After : Nov 9 09:29:25 2026 GMT
Subject: CN=690dbbf9-d660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dc:8d:7c:a7:a1:1c:7b:9c:e4:ee:ea:a4:8a:
f0:58:1f:55:36:2a:d6:b7:67:44:39:3c:0a:1b:bb:
2a:36:08:c0:0e:74:d5:07:17:07:9a:19:d9:03:32:
92:52:da:ec:ba:36:e7:d6:00:b6:d1:4b:8d:93:a2:
5d:b2:6e:29:52:2c:c4:ae:9d:b6:62:3b:e8:c7:22:
92:62:0d:44:a2:00:fa:5c:8b:53:e4:11:13:d3:9d:
77:21:14:61:14:4a:24:e4:33:43:ce:64:c7:2b:06:
20:31:a2:59:42:c1:bd:f8:03:41:44:1e:bd:56:63:
8c:fa:24:97:d1:fe:5e:8e:e5:fd:f0:3e:49:4f:2a:
31:28:5e:9e:52:0d:1e:bf:4e:d5:fc:cf:b4:a0:48:
0f:ba:6c:e0:ea:47:f3:30:fa:00:fe:0c:56:af:ee:
6c:b6:86:5c:fc:5d:24:63:00:94:49:87:10:70:b9:
fe:bc:80:a5:4e:ed:88:7f:67:81:8c:e7:5c:f9:d9:
22:1a:f3:84:d0:4a:e4:25:d2:29:57:01:24:ff:6e:
ad:6b:9b:4a:27:85:d1:94:a0:c4:36:63:19:eb:87:
cb:2e:b7:e7:1c:63:d9:3f:7f:f6:b4:77:db:7c:9e:
d2:0b:67:48:ec:7f:69:8f:75:f5:77:2e:6f:e3:9b:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E6:4B:2E:17:CE:19:E6:29:C3:3B:CC:2B:78:80:3F:81:3C:68:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/425A879EBBBC11F0BBB563E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.1.0-154.223.2.255
154.223.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:51:b9:5a:05:ca:45:d3:50:40:36:29:e0:51:e7:54:22:15:
7a:90:92:b0:02:4d:71:10:d6:3b:de:82:20:b0:54:c0:5c:22:
98:26:e8:ee:56:e9:4f:f2:c3:f0:ab:75:54:58:30:ce:1b:e7:
30:8b:e8:9d:76:f6:a6:8e:c3:83:3f:c4:a3:38:61:c1:f9:0e:
2c:73:68:71:59:7b:5f:ba:8b:fd:24:c8:44:97:5d:9a:0f:76:
2f:39:c1:00:d0:3a:a3:7d:0c:e8:91:23:21:e0:e8:8c:67:e6:
49:1f:69:05:2d:df:e8:38:4a:f9:a6:84:05:c9:86:e8:48:c3:
17:68:88:eb:80:c4:b4:80:6d:bb:47:32:a1:b1:54:f7:e4:70:
ce:74:a5:cd:91:f5:30:c2:c5:9c:bf:0e:5c:68:8f:88:07:6e:
41:37:54:da:dd:93:d4:fe:64:75:0f:d1:e6:83:5e:5b:9a:85:
f5:2e:85:11:5d:09:26:a6:e9:9c:47:02:6c:8c:6f:27:83:74:
47:a1:41:fe:ec:2a:fd:c4:1e:54:0e:3a:11:e6:f5:9e:c0:27:
74:e6:af:db:b5:62:f8:8e:16:75:cd:47:e5:e4:db:8d:f1:20:
ef:e7:9d:96:15:f3:04:ca:02:85:07:e4:ea:8f:5e:a0:b5:a5:
00:10:fb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 07:28:35 2025 by rpki-client