Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD91C672A34C11F0B2E3EE9DDAE4EC9C.roa
File: AD91C672A34C11F0B2E3EE9DDAE4EC9C.roa (raw, json)
Hash identifier: G240GwRtziEBqtBjdEuhjPT9vPhp3D1vBEOrMyP7x8Q=
Subject key identifier: FE:22:5B:29:D4:68:26:89:D2:A9:7D:37:36:F9:A2:21:9A:D3:EC:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A282
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD91C672A34C11F0B2E3EE9DDAE4EC9C.roa
Signing time: Tue 07 Oct 2025 07:10:18 +0000
ROA not before: Tue 07 Oct 2025 07:10:13 +0000
ROA not after: Mon 10 Nov 2025 07:10:13 +0000
asID: 395793
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107138 (0x1a282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 7 07:10:13 2025 GMT
Not After : Nov 10 07:10:13 2025 GMT
Subject: CN=68e4bcda-633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:df:18:08:22:03:5c:85:fc:a4:49:d5:3b:
e2:0d:b5:2b:e9:23:4a:3d:4c:96:02:c8:83:e1:41:
73:f4:52:a4:89:35:30:e0:89:a4:9e:a2:46:1c:d5:
d9:24:d6:7f:ba:17:7f:34:e5:1b:a7:60:72:c3:53:
41:5b:dd:9c:3a:92:f2:e0:f7:22:36:1a:51:3a:05:
72:e4:69:33:c2:96:3f:f6:f3:90:66:9b:c7:94:c1:
e0:4e:59:ed:75:c8:ee:1c:be:67:7c:c2:9e:25:fd:
4f:09:57:40:be:79:5b:1b:f9:c1:87:db:62:21:ae:
76:db:f0:e7:a1:d0:4c:53:b8:d7:2d:8c:19:57:a5:
9b:d5:ab:b7:91:86:08:69:02:1d:a7:82:57:0c:fe:
d4:c3:26:7f:fb:c1:ed:d7:04:7c:26:69:42:20:7c:
17:82:e1:64:76:47:d4:a4:46:18:6d:e2:4a:b9:8d:
47:ad:23:1c:b5:76:21:8b:fb:8a:e0:be:92:21:c7:
41:f1:54:e9:72:d9:16:c8:a5:63:87:fc:96:32:53:
0c:89:19:10:7a:67:12:df:16:4a:cc:e0:07:3c:42:
cd:6e:1d:c0:72:81:32:7f:2a:1b:25:e5:46:8e:b0:
6d:4f:e3:69:fa:5f:19:55:ed:a5:8f:aa:50:e6:9c:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:22:5B:29:D4:68:26:89:D2:A9:7D:37:36:F9:A2:21:9A:D3:EC:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD91C672A34C11F0B2E3EE9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
Signature Algorithm: sha256WithRSAEncryption
47:c6:d8:c3:24:c2:a4:33:59:83:ec:d6:4e:4c:a0:87:c4:d5:
aa:96:fd:ec:db:37:65:aa:ed:f5:66:b7:d9:39:f9:18:94:bd:
2b:93:3a:64:97:a0:94:68:68:89:4a:b6:5a:29:18:bb:e5:2d:
7b:4d:a6:b0:b3:ab:b8:e9:5d:de:4a:81:89:60:0a:2b:e5:93:
83:78:19:2c:5a:42:f2:94:f4:c4:e0:99:64:fa:34:80:e7:df:
e1:5c:33:22:44:62:22:13:dd:97:41:64:84:c3:5a:11:7c:69:
78:13:43:b6:bc:7b:5c:c4:99:ec:19:a5:96:b2:06:e7:e7:aa:
08:1f:91:20:d5:77:ae:45:13:72:97:78:c2:97:08:b2:88:d1:
db:0e:62:d4:cc:ef:0f:ce:44:68:75:49:3d:ae:0d:c7:e3:f4:
f7:07:4a:f0:96:b5:c3:fa:f1:fd:11:6e:d8:63:01:f8:ae:d8:
6f:24:23:29:1e:d8:5a:41:bf:97:e3:f3:ef:75:b3:75:f9:86:
42:df:db:54:9f:11:82:c8:13:9e:b0:76:eb:86:27:6a:6b:72:
5b:88:90:d9:63:78:93:7b:50:4b:8b:af:39:dd:14:6c:ea:1e:
48:bd:23:d5:80:31:39:59:fe:95:35:be:c8:bb:0c:b3:ac:d2:
e5:e8:18:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:48 2025 by rpki-client