Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA3A6E82BBBB11F0A63D3DE3DAE4EC9C.roa
File: CA3A6E82BBBB11F0A63D3DE3DAE4EC9C.roa (raw, json)
Hash identifier: TTb1ebjr3uEWvqOsZjD0HYJtvImqpo6+YD2jHZ7j2b8=
Subject key identifier: 7F:3D:13:79:61:C8:CF:E8:EE:1D:8A:63:37:92:12:53:7F:18:BE:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A7D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA3A6E82BBBB11F0A63D3DE3DAE4EC9C.roa
Signing time: Fri 07 Nov 2025 09:26:08 +0000
ROA not before: Fri 07 Nov 2025 09:25:59 +0000
ROA not after: Mon 09 Nov 2026 09:25:59 +0000
asID: 138995
IP address blocks: 154.92.4.0/24 maxlen: 24
154.92.6.0/24 maxlen: 24
154.92.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108503 (0x1a7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 09:25:59 2025 GMT
Not After : Nov 9 09:25:59 2026 GMT
Subject: CN=690dbb30-eb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:06:d1:ed:9f:67:21:ec:1a:fd:78:65:0c:
fb:9e:d6:5f:8f:20:37:ff:2c:60:8e:81:08:a2:20:
b2:80:d4:1f:36:b5:58:f6:ae:b3:71:84:9f:39:42:
04:67:3b:66:77:2f:2d:4f:2d:74:d0:ab:9c:ee:8f:
58:28:5b:a9:14:73:97:68:60:8f:cb:28:7b:8b:52:
44:5e:8e:41:8f:13:68:d3:6b:f8:7e:49:cf:b1:83:
d3:0d:29:c6:d6:cb:69:e7:d3:2f:71:e1:a7:a6:ac:
9d:c2:af:8e:d1:ba:24:a8:a9:df:fb:15:c4:d4:b1:
9b:a6:f3:2d:09:8b:b1:32:d2:78:9f:5d:0e:da:5e:
7e:64:93:5f:67:69:ce:77:1e:f1:8f:10:a9:f1:4f:
4f:c3:88:94:71:1c:63:ec:9c:42:5a:a7:d5:43:97:
5e:0b:0d:c9:9a:5e:55:d8:90:6f:bf:25:55:4b:93:
76:38:f2:cf:83:0a:a4:4e:83:a8:6a:16:d4:c6:17:
54:39:75:ae:82:b7:fb:0a:80:6d:45:45:e0:aa:06:
13:46:b7:41:e6:e7:d2:d3:00:53:03:4f:cc:5f:b0:
93:6a:0b:04:93:c6:a7:62:e2:80:bc:2a:29:76:06:
7b:ce:27:f9:f2:99:2f:a4:75:a1:83:b6:fd:9e:20:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3D:13:79:61:C8:CF:E8:EE:1D:8A:63:37:92:12:53:7F:18:BE:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA3A6E82BBBB11F0A63D3DE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.4.0/24
154.92.6.0/23
Signature Algorithm: sha256WithRSAEncryption
57:2a:66:ab:3b:ee:9b:fe:92:f3:18:61:4f:a2:e3:68:9d:71:
61:c7:46:8b:cb:d5:5b:fc:ab:37:be:a9:06:1f:b9:b7:89:ac:
13:20:4e:94:0f:a4:f3:a0:1a:c0:04:54:20:3d:d2:59:1e:c9:
74:58:ef:50:a3:ea:f6:8b:36:60:f6:4f:4a:1b:c1:cd:28:82:
86:b5:d0:2d:53:21:ae:2f:0c:d9:60:b7:a9:15:07:c1:aa:ef:
10:79:41:a5:73:f6:42:b0:ff:15:da:85:66:7a:cd:99:cc:83:
37:bb:3c:c2:0d:35:50:72:0d:14:f7:45:5a:d1:c6:29:83:c7:
2a:56:7a:4f:a8:e5:7b:00:3d:bf:a3:69:f9:a3:9c:41:8f:a9:
2d:48:d5:34:be:6b:92:c5:19:e3:14:2d:be:4f:ab:d8:9a:73:
75:49:1e:a4:51:5f:25:39:70:66:8c:5d:57:7b:6a:47:4f:40:
2e:6d:d1:b5:38:db:50:16:52:50:b7:b3:04:06:82:d2:c2:68:
25:69:e1:7c:ac:3f:fc:9e:6d:91:79:e5:d5:ed:a2:af:84:f1:
4f:2c:ba:1e:1d:de:1c:08:8b:e0:44:da:ee:27:39:8e:56:00:
97:b1:5d:be:0b:3b:ad:4b:32:ce:2b:36:57:c5:f7:49:ff:a6:
02:f0:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 07:28:53 2025 by rpki-client