Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57E568FEA28A11F08B3FA9B1DAE4EC9C.roa
File: 57E568FEA28A11F08B3FA9B1DAE4EC9C.roa (raw, json)
Hash identifier: mkLlM0TMI3Ic/zTNyTTntjLLqLqrd/6RuuWA4AgvzA8=
Subject key identifier: 05:F2:89:B4:B2:BA:EC:E0:81:18:2A:B5:96:D0:22:9A:AB:B9:05:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A25F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57E568FEA28A11F08B3FA9B1DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 07:59:12 +0000
ROA not before: Mon 06 Oct 2025 07:59:07 +0000
ROA not after: Sat 15 Nov 2025 07:59:07 +0000
asID: 397423
IP address blocks: 154.93.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Oct 2025 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107103 (0x1a25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 6 07:59:07 2025 GMT
Not After : Nov 15 07:59:07 2025 GMT
Subject: CN=68e376cf-87ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:8b:fc:c4:df:58:05:be:5d:5b:16:32:aa:
f5:dd:1b:6b:52:e6:f0:73:5b:94:df:1b:45:77:fe:
02:7c:c0:e0:e5:b3:c7:da:4d:c9:35:e4:57:77:64:
89:49:c5:5f:9b:ca:c0:7f:94:77:59:dd:85:09:70:
a9:82:14:f7:ff:99:94:22:d4:cb:a1:19:40:7a:ee:
b6:69:d7:ab:f2:e4:dc:f2:3b:2a:5e:75:7f:2c:e2:
2d:2d:bc:e2:e4:0c:68:22:b6:27:b9:49:8a:ba:2e:
0a:10:65:2f:1c:12:9a:47:96:e1:d1:d2:ab:30:41:
24:b3:1b:00:3a:8a:09:d5:38:dd:fe:e8:40:52:83:
e4:e5:66:12:f9:8a:b0:f9:2c:66:3c:d6:3d:c1:99:
1a:88:64:b9:4d:28:6d:73:61:4b:29:65:7b:64:a9:
46:06:5c:fc:3b:48:be:81:49:13:11:d7:0f:8e:9e:
13:1b:2f:86:4a:5f:07:58:e6:1a:1c:c2:6e:ef:37:
a7:31:82:d9:ac:9e:45:db:e8:92:49:2c:86:b2:3b:
ec:36:9b:73:d8:22:3e:e2:24:b8:97:39:71:36:e2:
24:bb:00:2e:c9:12:d5:6b:52:45:9c:3b:d5:61:4a:
5d:dd:cc:7c:dc:99:59:04:72:eb:9a:b4:b3:0e:de:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F2:89:B4:B2:BA:EC:E0:81:18:2A:B5:96:D0:22:9A:AB:B9:05:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57E568FEA28A11F08B3FA9B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.27.0/24
Signature Algorithm: sha256WithRSAEncryption
af:6a:d6:fe:66:54:c0:a8:51:a2:07:93:6a:2e:87:36:93:14:
96:81:33:07:52:34:d8:5b:a0:54:4f:e1:6a:05:4e:d0:26:9c:
99:c2:56:d5:9c:58:63:59:26:01:97:b6:0b:7c:59:fe:1c:84:
0a:0d:6c:32:bb:56:ac:c8:de:7b:f0:5e:0b:90:66:11:e8:e9:
10:00:48:73:f3:46:db:04:f0:cf:fe:5b:a5:3f:4d:b0:bc:8e:
04:ef:04:5e:26:ae:02:a7:fa:3b:92:63:f7:c2:47:cd:49:7f:
ca:d1:c6:3f:17:63:a0:42:31:32:a6:03:6f:93:ab:a4:d5:82:
a4:dc:b1:a2:4c:5d:18:61:80:5f:ed:40:1f:72:b3:7c:8c:ad:
a3:cf:7b:e8:26:3a:44:c6:ed:6a:af:8b:6e:79:d6:c9:c1:b6:
24:03:37:01:c0:ae:99:6c:42:01:85:04:73:fb:61:63:4f:54:
80:e8:c4:6c:6d:d0:70:d4:74:fb:8c:f7:fa:f7:06:f6:f6:e0:
37:76:33:21:dc:9b:6b:35:55:d8:7c:e1:0f:d6:3d:47:93:36:
35:7e:bc:45:d8:4d:b6:df:53:63:71:6f:d9:92:9c:90:3a:91:
92:6a:95:3b:f4:0b:49:e3:74:51:52:8f:03:1c:0c:b2:5d:1a:
6c:31:be:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:35 2025 by rpki-client