Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021391BE9D8311F0B7FBEE81DAE4EC9C.roa
File: 021391BE9D8311F0B7FBEE81DAE4EC9C.roa (raw, json)
Hash identifier: ZDqXOnltVjm6n0kTRrRHTfMezVwWDnmyNzhYzeOghyE=
Subject key identifier: 3B:07:D6:19:98:0C:B2:83:CA:0D:52:C5:8B:DF:5B:F0:51:50:FC:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021391BE9D8311F0B7FBEE81DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 22:24:06 +0000
ROA not before: Mon 29 Sep 2025 22:23:57 +0000
ROA not after: Wed 05 Nov 2025 22:23:57 +0000
asID: 49505
IP address blocks: 154.212.30.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106915 (0x1a1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 22:23:57 2025 GMT
Not After : Nov 5 22:23:57 2025 GMT
Subject: CN=68db0706-3dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:52:d5:17:ea:80:4b:62:27:d8:b9:a5:6e:
08:3b:fb:5a:ea:78:b8:08:04:48:71:8f:45:5f:f9:
50:79:ae:47:6b:2d:4e:1e:5b:af:38:2a:de:ba:66:
1e:7d:97:f8:ff:d2:92:b3:85:26:d9:2b:27:08:89:
64:05:15:8a:1f:64:ce:f6:7a:ab:ba:fe:33:59:12:
03:dc:f9:8b:ab:04:b5:49:4b:b5:44:8c:7c:8e:88:
a8:0f:44:c7:c9:f0:98:67:a9:69:39:d6:32:54:20:
4c:80:94:78:22:ea:94:18:cc:76:df:46:1d:5e:b3:
5f:8b:c7:a1:4f:c3:eb:d8:26:b4:89:2f:b0:2d:c2:
eb:00:d6:8d:07:00:25:78:24:1a:76:b4:bf:ba:73:
a3:dc:6e:a3:d6:9c:c8:39:38:fd:f2:3f:0a:de:fe:
35:16:f9:06:4f:43:ea:50:91:b1:88:c4:5e:03:c7:
b9:f2:ae:9b:3b:54:b0:11:ab:e3:76:da:dc:af:64:
47:4d:a5:47:a6:36:ad:3d:3f:ce:f8:5b:48:c6:44:
cf:a2:6e:41:73:78:b1:4d:39:cc:75:b4:9c:99:b3:
f3:e3:97:2b:85:1f:71:a4:e1:0d:c5:df:9c:9b:92:
8d:75:69:aa:f5:db:96:9f:41:16:29:b5:0c:a3:7c:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:07:D6:19:98:0C:B2:83:CA:0D:52:C5:8B:DF:5B:F0:51:50:FC:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021391BE9D8311F0B7FBEE81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.30.0/24
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:dc:72:8d:ee:0d:cb:a1:bf:44:60:7a:ee:35:e0:8b:2a:e8:
7c:87:71:9f:12:a2:5f:22:29:49:45:ef:23:a8:d1:fe:c4:33:
f6:3a:61:99:80:88:8f:65:49:97:5f:0c:e9:39:7c:3c:27:67:
d2:e1:ae:d0:44:73:45:79:57:7f:22:12:eb:e3:ac:41:2e:9e:
0e:94:cc:8d:30:21:f8:5f:d5:eb:e1:48:9f:a3:a7:80:62:c9:
7d:b6:4f:df:64:1f:60:75:c8:0d:68:62:4c:d8:18:f1:b2:79:
4b:b1:cb:d7:14:f2:82:ff:af:70:6a:92:02:94:39:23:95:a8:
75:f6:3a:57:f8:1f:50:42:81:0b:15:c6:bb:09:bd:60:cc:3d:
f3:fa:aa:64:8c:b5:09:7a:62:be:59:45:09:cc:38:c6:34:8e:
b5:26:e5:dc:92:ce:7c:0b:f8:b3:4b:45:6d:5c:ba:be:a7:f9:
1f:3a:83:b3:9d:4b:d2:17:62:3c:25:cf:1f:2d:ec:3c:00:0f:
dd:56:54:f1:3e:c6:8c:51:97:51:b5:65:dc:04:f2:6a:6e:cd:
99:70:0e:cf:00:4d:85:92:f0:f2:8f:d1:07:de:c2:7a:ed:ce:
37:72:f1:fb:cc:9a:15:32:de:fa:f5:af:6e:00:6a:74:88:f0:
04:0c:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:26 2025 by rpki-client