Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C271EACEA50711F08A05FFD2DAE4EC9C.roa
File: C271EACEA50711F08A05FFD2DAE4EC9C.roa (raw, json)
Hash identifier: WWBOcPXlw0tcu4mXNWT/cF6DVQxbIXjcQBJh+SNF+nY=
Subject key identifier: 41:39:B0:CD:C8:B0:4F:93:75:5F:69:A5:E2:94:7F:E2:3E:FB:05:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A30C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C271EACEA50711F08A05FFD2DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 12:02:00 +0000
ROA not before: Thu 09 Oct 2025 12:01:54 +0000
ROA not after: Sun 16 Nov 2025 12:01:54 +0000
asID: 22773
IP address blocks: 154.82.3.0/24 maxlen: 24
154.82.4.0/24 maxlen: 24
154.82.5.0/24 maxlen: 24
154.82.6.0/24 maxlen: 24
154.82.7.0/24 maxlen: 24
154.82.8.0/24 maxlen: 24
154.82.9.0/24 maxlen: 24
154.82.10.0/24 maxlen: 24
154.90.8.0/24 maxlen: 24
154.94.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107276 (0x1a30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 12:01:54 2025 GMT
Not After : Nov 16 12:01:54 2025 GMT
Subject: CN=68e7a438-3628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:5f:af:b9:32:e0:70:a9:e3:08:97:d1:0f:
fe:b6:12:73:a4:0b:17:31:c3:8b:7c:5c:0f:41:b9:
36:b4:db:30:ff:45:f0:59:98:d0:2d:b9:38:59:eb:
1f:6a:bd:f0:b4:de:f7:c7:85:77:6b:c5:74:0d:d1:
fb:fb:da:7e:2d:3b:a7:27:d6:c0:bf:8d:d2:9e:68:
57:01:b7:a2:2c:ed:a9:9b:92:82:55:ec:52:0a:81:
57:98:36:a0:b0:c5:c8:19:b4:62:d7:ff:4e:bb:44:
e1:10:32:10:a9:cc:2d:80:53:fe:fb:c6:0c:5e:70:
2b:b2:cc:e2:25:10:0e:4b:ac:43:1b:dc:c6:04:fd:
0e:a5:d3:64:f0:df:10:4e:ab:f4:20:6e:86:9a:fc:
3a:4f:ea:88:86:43:d3:09:4b:77:38:82:ac:72:21:
9e:0d:23:52:2a:84:c1:4e:b4:d9:5a:20:ff:21:47:
e3:a0:d8:01:c2:3a:b5:d2:a0:b1:41:46:b2:2c:74:
97:be:61:87:42:c2:43:f7:cc:33:6c:4c:24:21:3a:
37:f8:3a:33:f0:f4:8c:29:b8:cc:2a:9e:45:f3:fd:
a7:46:9f:45:94:64:8a:0d:bb:4e:44:a7:68:c8:23:
ec:5c:c5:44:0a:ee:87:1c:58:e7:fb:8a:ce:79:da:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:39:B0:CD:C8:B0:4F:93:75:5F:69:A5:E2:94:7F:E2:3E:FB:05:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C271EACEA50711F08A05FFD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.3.0-154.82.10.255
154.90.8.0/24
154.94.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:7b:b9:27:d1:fd:65:cb:16:73:7c:c3:ce:41:b3:31:9c:ea:
9a:63:1b:2d:92:f5:e6:dd:d0:b1:5f:32:51:93:fd:ea:19:09:
66:49:b7:3b:67:eb:60:ad:d5:42:27:eb:d6:74:97:7b:50:3a:
29:90:e1:1d:a6:d3:dc:cb:2b:8d:da:28:f6:20:2c:e4:61:ec:
9f:3d:89:fe:d0:dc:bb:16:d8:c2:cc:de:82:f5:11:4c:4c:00:
6a:84:a4:6f:d0:5e:e5:c0:16:fd:85:cc:5e:9f:b0:7c:0f:5f:
67:b9:de:53:35:ba:0a:12:9d:db:d7:4d:06:60:5a:b4:f2:69:
ae:98:6f:89:ad:6c:44:c3:31:ff:e9:af:2d:87:3b:14:fe:9a:
84:d7:59:09:e2:63:a7:d3:27:ad:2d:c2:93:23:3b:55:3f:59:
7b:84:d6:55:53:69:94:2c:a0:a2:5e:bb:65:0c:d8:00:7e:b5:
d1:15:41:b4:68:7f:66:58:68:61:31:8a:4a:6e:70:80:87:4a:
a1:b0:45:d4:40:ba:27:d7:a7:8a:64:ce:59:c3:93:37:6e:51:
90:d6:66:fd:80:87:05:ba:b6:06:59:dd:2b:79:36:58:16:f0:
70:9a:a8:ae:95:9c:9d:c4:3b:a5:34:de:ee:dc:e7:b2:8f:79:
74:46:55:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:45 2025 by rpki-client