Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5A7B1489D8D11F08EE33CC8DAE4EC9C.roa
File: F5A7B1489D8D11F08EE33CC8DAE4EC9C.roa (raw, json)
Hash identifier: CFJPSvEpgmC/3Aml+aHuxsieVeA2o0f9z9QgbaxgUAU=
Subject key identifier: 38:C4:52:34:60:F2:89:61:8D:08:DC:BA:C7:4D:BC:E5:6E:F0:35:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5A7B1489D8D11F08EE33CC8DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 23:42:29 +0000
ROA not before: Mon 29 Sep 2025 23:42:23 +0000
ROA not after: Wed 05 Nov 2025 23:42:23 +0000
asID: 48031
IP address blocks: 154.213.6.0/24 maxlen: 24
154.213.7.0/24 maxlen: 24
154.222.248.0/24 maxlen: 24
154.222.249.0/24 maxlen: 24
154.222.250.0/24 maxlen: 24
154.222.251.0/24 maxlen: 24
154.222.253.0/24 maxlen: 24
154.222.254.0/24 maxlen: 24
154.222.255.0/24 maxlen: 24
154.223.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106937 (0x1a1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 23:42:23 2025 GMT
Not After : Nov 5 23:42:23 2025 GMT
Subject: CN=68db1965-ea7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:67:99:ad:1c:bf:6b:1d:11:28:4e:9e:a0:
f1:29:32:fa:82:bb:d1:0c:7f:02:af:03:5f:26:0c:
15:c2:27:d9:18:b9:f7:bb:40:83:d5:5f:19:9a:1d:
bb:a0:db:96:58:72:cf:70:d9:19:41:0d:f6:98:ea:
37:bb:fd:f0:5c:2f:1b:83:aa:16:27:20:c0:55:5c:
e9:7c:fa:19:77:d5:d3:14:fe:76:23:0f:5a:79:e5:
d5:8c:84:cd:e0:e1:14:c5:65:50:c0:23:95:ec:a9:
66:58:51:f7:24:8e:f6:f3:e5:d1:fe:b4:8e:9b:40:
f9:c5:93:f2:8d:4e:50:28:78:9e:11:aa:41:20:b7:
44:84:f2:70:f8:e2:79:d9:68:a9:56:f2:63:44:e4:
fd:7d:3d:be:77:71:e8:d8:ee:c2:3f:77:9d:f4:c7:
93:c6:48:f8:02:30:6c:5d:fd:57:4a:1e:e4:7a:58:
c8:89:8b:ed:7f:86:8d:df:52:aa:b9:73:8a:4c:50:
0d:1e:9e:d0:b3:e0:d0:1f:ff:bc:7d:26:49:94:4c:
29:30:60:da:7b:8b:3e:88:4e:6b:96:4d:b2:d7:a7:
24:b1:df:37:0b:ab:fe:17:b1:92:1d:0e:9f:79:bd:
82:56:a7:f7:17:a1:c7:84:80:88:db:60:77:b1:11:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C4:52:34:60:F2:89:61:8D:08:DC:BA:C7:4D:BC:E5:6E:F0:35:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5A7B1489D8D11F08EE33CC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.6.0/23
154.222.248.0/22
154.222.253.0-154.222.255.255
154.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2d:9a:79:34:4a:a5:84:14:e9:b1:5e:2a:7b:98:e1:3a:70:
71:26:f9:a1:d2:d7:37:6e:fe:15:c3:91:08:14:ae:09:07:4c:
51:00:e4:34:48:47:7a:01:aa:86:ce:3b:ec:56:e7:10:9e:1d:
e8:2f:2c:4b:9b:df:af:97:04:19:05:92:66:47:15:1c:ab:f0:
d1:3d:cb:7b:32:c4:18:62:a5:a6:9d:77:72:44:ef:08:77:79:
6c:8b:9f:50:3e:08:70:d8:ba:6a:6b:80:e9:65:1b:80:24:58:
c7:d2:ab:de:af:75:f8:f8:8c:b6:a5:12:b0:5b:25:c9:06:e0:
22:ea:b8:84:0f:f0:b1:c5:be:16:8b:81:8f:dd:a2:a4:43:d4:
4d:49:4a:d2:78:6c:3a:dc:66:3a:98:5e:38:57:fa:42:99:f6:
49:a0:e0:c5:07:d8:c9:56:ec:7c:31:8d:45:07:03:ce:31:f7:
fe:7c:c1:90:96:46:c6:f8:90:2a:64:b5:3b:27:8c:18:b2:bd:
01:cb:0c:82:04:0b:f5:39:d2:ef:d9:d2:aa:d1:b5:fe:74:1b:
dd:3b:43:72:a9:fe:8f:77:72:2e:7f:22:a7:50:fe:be:88:09:
75:e2:b1:28:17:36:96:10:8b:7a:e7:12:35:c3:f3:1f:5c:71:
d8:e6:9f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:38 2025 by rpki-client