Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6A6ABF6997F11F093381C88DAE4EC9C.roa
File: F6A6ABF6997F11F093381C88DAE4EC9C.roa (raw, json)
Hash identifier: +a7/S1b8ZY/DHBuZIDTMKViiZk/tn0gJLYKUbWIy/vU=
Subject key identifier: A7:94:10:6C:52:4B:DE:88:29:95:AC:3C:E0:6D:4B:5A:B1:B2:DD:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6A6ABF6997F11F093381C88DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 19:52:13 +0000
ROA not before: Wed 24 Sep 2025 19:52:06 +0000
ROA not after: Tue 04 Nov 2025 19:52:06 +0000
asID: 20326
IP address blocks: 154.194.32.0/24 maxlen: 24
154.194.192.0/23 maxlen: 24
154.194.206.0/24 maxlen: 24
154.198.165.0/24 maxlen: 24
154.198.166.0/23 maxlen: 24
154.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106688 (0x1a0c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 19:52:06 2025 GMT
Not After : Nov 4 19:52:06 2025 GMT
Subject: CN=68d44bed-9a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:39:0a:3a:b3:9d:bf:5b:4c:c7:d3:65:dd:
10:9f:be:09:3d:be:70:dc:bf:e1:af:28:67:07:4c:
18:96:3e:9c:de:02:fa:00:e8:45:8d:b7:ad:f6:14:
56:d1:21:5d:b5:6f:7c:c9:d9:68:3b:e8:7e:ec:43:
de:80:ad:25:9e:f4:7c:f4:f9:03:cc:e9:09:17:0c:
7e:49:73:ef:79:90:d4:b1:05:8b:19:de:ea:f7:e7:
da:8c:c5:e3:0d:3a:99:40:4a:4e:5c:66:9e:30:2f:
66:04:4a:e3:a3:7a:bc:8c:19:bf:f6:e9:14:b7:e3:
8d:77:15:5a:9f:db:1b:69:19:06:42:64:39:cb:3e:
2d:7b:19:fb:61:6b:b0:ae:c9:85:cc:34:29:56:3d:
51:4b:67:4a:8d:6f:9b:aa:d9:1f:7f:ab:f5:25:f5:
54:5d:a5:fd:8e:93:9d:75:a5:e6:e0:36:a7:d9:3d:
84:55:7d:b7:45:88:0e:36:36:25:57:c2:2f:ee:cc:
72:a3:fb:a6:8a:41:ac:da:6a:06:d2:ec:c1:64:82:
02:60:82:54:97:77:73:3c:ad:d0:89:52:c5:0b:e7:
16:4e:51:a9:da:d2:23:a9:1e:24:3f:61:24:91:8d:
4c:1a:35:db:73:c2:2d:31:50:33:c0:3b:43:ad:b4:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:10:6C:52:4B:DE:88:29:95:AC:3C:E0:6D:4B:5A:B1:B2:DD:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6A6ABF6997F11F093381C88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.32.0/24
154.194.192.0/23
154.194.206.0/24
154.198.165.0-154.198.167.255
154.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d8:e5:c9:de:87:21:a4:8f:88:70:59:98:42:9b:b1:52:bc:
18:1c:25:1a:f8:4a:1c:3b:aa:65:16:fd:cd:78:54:ce:ce:3e:
b2:01:40:44:eb:2d:1b:72:d6:03:a6:b8:bd:9d:8c:21:96:ef:
1f:8c:6b:b1:58:06:9f:0b:dd:16:6f:51:a2:c2:48:b6:00:3c:
a2:2b:8c:b4:b5:4f:6b:db:3b:da:70:88:c2:62:bb:a7:72:65:
3d:bf:c6:78:1a:fa:1e:1e:9d:01:bd:a2:df:44:e7:27:de:b0:
fc:6f:e7:37:43:37:17:c0:29:da:f4:73:2e:6b:d0:2a:35:51:
ef:58:61:27:6e:90:67:30:54:72:33:cd:8d:70:7d:4c:c2:45:
7f:e0:e6:5d:79:a7:c4:28:f4:f2:1b:38:24:ca:50:84:79:22:
b0:66:37:73:1d:dd:a7:57:f6:47:fb:e4:1e:47:5e:3d:c1:d3:
3e:45:50:6b:6c:ea:fa:b5:84:4c:1c:57:6b:53:b7:48:4b:9b:
d5:0c:b2:bf:96:e3:97:83:f9:37:9e:6d:77:b9:57:92:da:a3:
34:2f:16:67:56:d8:ff:65:d3:0a:f1:4e:05:0b:b7:31:1c:61:
c3:2f:f5:e6:96:fc:f9:0d:c6:98:14:f7:ef:ab:93:c2:32:bc:
dd:36:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:30 2025 by rpki-client