Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52222AF0B35C11F082802BA7DAE4EC9C.roa
File: 52222AF0B35C11F082802BA7DAE4EC9C.roa (raw, json)
Hash identifier: fcqlOuV7ls2pidmWL571d87tArofLbKFyN0LUVIxQNM=
Subject key identifier: 57:84:FE:35:91:68:BC:65:C5:C6:1C:A0:8B:4E:D6:82:51:0F:0F:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A563
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52222AF0B35C11F082802BA7DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 17:42:35 +0000
ROA not before: Mon 27 Oct 2025 17:42:30 +0000
ROA not after: Mon 01 Dec 2025 17:42:30 +0000
asID: 62240
IP address blocks: 154.194.4.0/24 maxlen: 24
154.194.7.0/24 maxlen: 24
154.194.38.0/24 maxlen: 24
154.194.70.0/24 maxlen: 24
154.194.71.0/24 maxlen: 24
154.194.86.0/24 maxlen: 24
154.194.87.0/24 maxlen: 24
154.194.88.0/24 maxlen: 24
154.194.90.0/24 maxlen: 24
154.194.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107875 (0x1a563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 17:42:30 2025 GMT
Not After : Dec 1 17:42:30 2025 GMT
Subject: CN=68ffaf0b-7f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:89:76:bb:46:2b:7f:31:1f:b4:8f:7e:55:
23:ed:ae:69:28:ce:a8:20:35:b0:50:b5:de:64:f4:
07:8c:a0:e0:b0:a6:0c:e3:f6:a1:0c:81:f9:2e:e0:
49:30:7c:b9:37:cd:5d:b4:11:3f:ac:ea:9b:bc:55:
c3:ba:bc:ef:76:9f:71:f9:13:cb:02:79:28:e7:81:
99:bd:9b:92:5f:f1:ef:85:3d:39:d3:94:31:83:a5:
1f:c5:c9:93:6a:a4:f3:57:b0:c4:4d:32:1e:7a:3b:
0d:8c:71:53:f3:63:e3:1b:61:d0:a1:e4:ad:05:89:
61:58:77:55:90:27:b1:66:21:ac:ae:96:b2:22:85:
78:48:4e:91:3e:4e:3a:84:29:b2:27:d6:e0:c7:80:
7c:42:72:9b:ff:e7:7a:67:e9:1d:6f:69:71:4a:fe:
38:e9:6c:c6:24:ce:12:a9:f5:6b:17:af:1e:a6:ec:
0e:c6:3f:e9:c8:38:db:57:d3:d4:8d:01:f8:27:f1:
b0:b0:8a:f7:c6:b7:8a:e6:74:2c:c1:ae:ce:c2:64:
fa:e3:44:29:c7:94:8e:68:0e:91:7e:8e:7a:4e:9e:
8e:de:a3:a8:ae:ee:a1:f7:ae:26:98:3d:d5:ac:d4:
99:1c:6e:23:a2:3a:0e:a9:9e:d0:70:57:77:42:f2:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:FE:35:91:68:BC:65:C5:C6:1C:A0:8B:4E:D6:82:51:0F:0F:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52222AF0B35C11F082802BA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.4.0/24
154.194.7.0/24
154.194.38.0/24
154.194.70.0/23
154.194.86.0-154.194.88.255
154.194.90.0/23
Signature Algorithm: sha256WithRSAEncryption
50:08:22:07:fa:2f:34:af:3a:d4:80:68:98:4b:26:c6:15:9f:
67:a0:ff:c5:6f:2a:41:c9:35:23:01:9c:02:8c:49:61:b7:82:
8f:fd:a6:62:c0:b1:1c:51:30:6e:48:56:71:62:6f:60:2a:87:
38:a8:0d:f6:81:3f:e8:a7:2f:68:ac:d8:4d:0a:f6:b0:66:e1:
94:0e:ff:33:00:a5:1a:2c:11:a3:19:d8:cc:0b:a5:1a:87:27:
54:fe:45:4d:7d:69:5d:13:61:06:f5:f1:c5:28:ef:b8:8b:27:
bd:89:f7:8b:93:8c:1e:af:05:83:c9:82:57:2b:bb:e6:d0:a6:
a4:f9:2c:64:85:f3:24:76:e4:4c:85:cc:0e:43:96:9f:c6:25:
22:4b:62:cf:73:3b:d3:fd:ae:03:f1:8f:32:d8:33:d5:5f:64:
b9:cb:b3:ff:e1:30:d4:d9:42:99:4c:fd:16:8f:1d:76:1a:ad:
08:05:48:01:0a:4b:56:f6:1a:51:71:01:17:fe:8e:35:9b:83:
ac:40:36:e7:b4:a3:4f:82:6d:6b:13:ca:af:ec:c3:ab:88:c2:
0c:99:3a:39:82:a9:4c:18:06:30:5f:f4:ce:50:9a:84:5d:59:
ff:a9:c1:03:56:69:65:21:0b:47:39:17:30:87:b3:80:05:c8:
5e:be:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:49 2025 by rpki-client