Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A494EB82A4EE11F09D379AB2DAE4EC9C.roa
File: A494EB82A4EE11F09D379AB2DAE4EC9C.roa (raw, json)
Hash identifier: kkztrgAHE6YTjaFc6fz9v442M8q1PYk9ZjBr7oyGqDA=
Subject key identifier: F3:E5:DE:39:10:A9:82:05:8C:5C:03:FA:E7:2F:D8:F5:08:AB:96:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A494EB82A4EE11F09D379AB2DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 09:02:12 +0000
ROA not before: Thu 09 Oct 2025 09:02:07 +0000
ROA not after: Sun 16 Nov 2025 09:02:07 +0000
asID: 22773
IP address blocks: 154.202.78.0/24 maxlen: 24
154.202.79.0/24 maxlen: 24
154.202.80.0/24 maxlen: 24
154.202.81.0/24 maxlen: 24
154.202.82.0/24 maxlen: 24
154.202.83.0/24 maxlen: 24
154.202.84.0/24 maxlen: 24
154.202.85.0/24 maxlen: 24
154.202.88.0/24 maxlen: 24
154.213.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107262 (0x1a2fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 09:02:07 2025 GMT
Not After : Nov 16 09:02:07 2025 GMT
Subject: CN=68e77a14-94df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:45:b0:98:17:a1:a0:7e:96:30:81:b5:8c:
b9:80:ef:a8:b0:9f:87:5f:0a:75:e8:3f:5e:12:a9:
3a:da:ed:fc:02:6e:55:36:5f:b6:27:7a:20:d4:70:
67:c0:88:cc:83:0d:a6:11:fc:56:4c:81:8a:4f:27:
46:c6:95:d3:c1:5e:af:11:d7:d9:3f:ea:24:c6:77:
b2:ad:b4:d1:76:cc:29:55:c4:28:67:d6:bc:1e:7a:
ef:1a:82:ba:8d:45:0c:aa:54:82:0b:0b:b7:10:f0:
f8:2e:7d:77:07:50:f6:d4:a9:3f:cb:19:f5:04:3f:
f9:42:5e:65:28:71:68:38:48:e1:d3:7e:9c:73:5a:
7d:18:16:2b:4b:42:e6:cc:9d:4e:98:41:ca:48:cf:
c8:60:cd:9c:9a:0c:2f:cf:3f:ab:a6:66:e5:40:ca:
ae:6d:94:9a:f3:e3:fd:92:a5:e0:b9:11:6f:87:54:
fa:71:83:90:1b:4f:1b:87:03:ef:12:d8:3b:5a:08:
eb:6f:7e:63:6f:28:29:64:1e:da:27:39:23:88:76:
97:52:fc:b1:69:0f:39:b6:4b:0f:36:dd:c6:7a:4b:
08:14:f8:6d:6c:66:59:9d:3e:9e:90:56:6a:3a:02:
4b:7f:9a:e6:5c:ce:88:dd:4d:b4:fa:94:5b:32:e5:
3a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E5:DE:39:10:A9:82:05:8C:5C:03:FA:E7:2F:D8:F5:08:AB:96:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A494EB82A4EE11F09D379AB2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.78.0-154.202.85.255
154.202.88.0/24
154.213.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a4:c3:cd:4d:58:54:4b:72:ad:3e:21:ab:69:5f:93:7e:83:
ae:fd:f5:ff:05:23:72:c4:51:1a:7a:12:30:26:63:91:b7:b1:
87:75:3f:bf:22:71:be:b0:85:fa:8d:4e:85:34:94:47:1c:b6:
4a:e1:2e:b5:d3:62:42:b0:59:42:dc:40:c2:95:75:22:57:72:
02:c0:cc:82:70:d3:41:d7:53:e7:54:ff:14:31:c7:22:14:7b:
0b:0e:61:14:9b:a7:93:1d:3d:43:18:b6:67:c5:ee:12:d9:de:
7e:49:11:aa:94:36:49:7e:0b:42:90:1f:ef:c4:0f:3f:5d:e6:
9a:54:3a:6e:53:38:8e:ab:b2:b0:68:0b:68:d8:40:55:5b:e8:
d5:46:7f:2f:22:e2:ba:2f:d4:1c:ba:83:00:bb:fd:3c:8e:55:
6a:3d:f6:93:d6:17:f0:1b:e0:02:bb:eb:0a:6a:ea:e2:3a:c5:
9d:78:8f:b8:0b:96:31:c4:92:a5:41:5c:19:6b:a1:4c:89:82:
08:0d:ae:65:11:0d:91:f9:3e:a4:88:b0:01:69:86:f5:b5:ea:
d7:e1:b6:aa:37:78:19:47:51:56:ab:95:24:32:9a:6e:8d:de:
2a:71:f1:12:fa:c0:a2:8a:5c:cb:04:f9:16:92:62:c5:b3:de:
e1:1e:cc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:47 2025 by rpki-client