Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE628F06BF1C11F0A480E3B0DAE4EC9C.roa
File: EE628F06BF1C11F0A480E3B0DAE4EC9C.roa (raw, json)
Hash identifier: NDD1+nmeOqXDR08W9G9WgWETrh0ynCdViJOHoP3hNPw=
Subject key identifier: 68:73:54:82:B4:2C:0F:4F:EC:4E:A1:CA:88:DF:CE:77:9E:04:C8:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A86D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE628F06BF1C11F0A480E3B0DAE4EC9C.roa
Signing time: Tue 11 Nov 2025 16:39:03 +0000
ROA not before: Tue 11 Nov 2025 16:38:58 +0000
ROA not after: Wed 17 Dec 2025 16:38:58 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 14 Nov 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108653 (0x1a86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 11 16:38:58 2025 GMT
Not After : Dec 17 16:38:58 2025 GMT
Subject: CN=691366a7-32c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:22:4e:89:46:7a:cb:92:81:8e:51:02:fa:
77:f7:d8:cf:15:37:23:36:0c:3c:cd:5a:42:f9:6d:
95:93:3f:0d:d6:1f:19:6d:2d:db:d9:d9:74:41:bb:
c7:17:c9:65:e1:95:5e:f9:95:fd:f2:76:ad:44:9f:
9c:8b:e5:38:e7:89:5e:b0:eb:b4:5d:98:15:56:b0:
ec:e0:9b:ec:a5:3b:c7:f3:9b:0a:e6:e1:3e:48:40:
c4:e7:b1:82:25:4f:4f:07:bd:6f:97:d9:7c:03:45:
28:b1:84:51:f6:8c:2c:fb:63:10:cd:ed:61:57:b2:
a6:f7:b9:47:f2:0e:1b:9e:a2:d7:06:ce:e4:99:69:
ca:7e:ef:d1:7f:02:1b:de:23:8d:96:a6:fc:c4:3f:
c0:34:3f:f8:e4:d5:dd:53:b8:7d:56:f4:02:45:16:
50:07:39:c9:fd:f5:10:a4:98:86:75:70:f4:a0:a0:
4e:38:dc:01:41:bc:e3:c7:1e:51:56:73:54:19:09:
63:ee:f2:cf:e8:7f:40:47:c8:c3:ca:4f:2c:3b:60:
3e:9b:b4:4b:61:de:46:ac:c7:54:45:89:4b:bd:81:
00:ac:32:f4:93:8a:1a:89:d4:6b:d8:8a:74:58:52:
1c:b9:c0:44:47:7f:49:76:b7:10:52:2f:66:62:f1:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:73:54:82:B4:2C:0F:4F:EC:4E:A1:CA:88:DF:CE:77:9E:04:C8:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE628F06BF1C11F0A480E3B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:83:3c:42:31:57:2b:92:aa:1b:c1:7a:74:c5:1d:5a:17:de:
4d:eb:a4:39:34:45:8f:7c:0a:f0:dc:99:b0:ae:a0:f6:2c:1e:
5e:f2:dc:e8:27:bd:50:0a:9f:e4:50:2a:7b:c5:f6:b3:f0:f7:
01:1c:2a:89:a4:cd:56:62:54:0b:54:0e:4d:75:e2:81:6a:01:
85:67:7f:19:68:6c:43:42:6e:02:dc:c7:82:98:60:02:1b:a8:
9f:44:9e:79:2f:ee:f2:8f:93:24:88:0b:cc:20:37:57:84:3b:
4b:c4:fa:66:d8:44:de:58:b8:bb:de:c7:c4:3d:80:26:33:26:
d0:31:0f:07:e0:67:95:04:76:be:5d:72:7b:dd:51:d8:6a:fb:
0b:bc:6e:d6:5e:17:b7:12:b4:82:da:6c:2f:69:24:da:f5:37:
7b:e7:b5:9c:8f:30:2e:fa:33:30:84:87:9a:53:78:fe:bd:63:
14:78:e8:19:f7:4b:d2:8d:b8:4d:c4:ee:9d:ac:2b:1e:2b:90:
44:a8:96:58:1a:a0:cc:61:ed:9c:05:68:0f:a9:44:af:f1:b5:
56:cf:26:a8:c9:c8:6d:a6:37:d8:44:d1:83:a7:d9:b5:b3:11:
28:66:be:80:fa:05:9d:fa:79:18:f6:0f:54:ba:0c:c7:b2:b1:
fa:9e:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 12 10:20:06 2025 by rpki-client