Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0389D920B88D11F08776F4D3DAE4EC9C.roa
File: 0389D920B88D11F08776F4D3DAE4EC9C.roa (raw, json)
Hash identifier: JRY+EnKlE/Jw1U2Sp9GQs+Qlbtisa+lXNyZbV/qKSeE=
Subject key identifier: 28:2F:06:E1:56:3E:93:EA:AB:F4:DF:A1:0B:32:22:84:E0:FE:95:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A700
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0389D920B88D11F08776F4D3DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 08:13:44 +0000
ROA not before: Mon 03 Nov 2025 08:13:39 +0000
ROA not after: Mon 09 Nov 2026 08:13:39 +0000
asID: 138995
IP address blocks: 154.92.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108288 (0x1a700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 08:13:39 2025 GMT
Not After : Nov 9 08:13:39 2026 GMT
Subject: CN=69086438-f9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:2b:78:50:c5:5f:c4:86:66:78:d0:d4:9b:
4d:4d:ce:90:03:b6:fa:58:8b:4b:c0:53:78:04:4e:
30:c2:35:96:82:9b:cd:61:94:88:be:78:cf:ac:95:
42:98:17:90:87:54:3b:7e:7a:30:ee:53:81:29:93:
9e:ed:22:e8:f3:c4:05:75:e9:22:cd:5f:00:e4:c7:
52:d8:89:79:6d:a4:d0:bb:c1:b9:90:bc:72:ba:b7:
e9:b5:a1:4f:bb:11:de:19:2d:f0:b0:34:46:66:03:
52:41:f5:6c:48:0d:f4:bb:d8:e2:ab:6a:c6:14:60:
4f:e8:b9:b1:40:36:e0:23:76:73:f5:8e:86:f7:62:
9c:ac:ce:1c:c7:86:5a:ed:ed:84:5e:ce:dd:1d:e4:
fb:4d:82:05:6f:b2:2e:56:0f:3b:e1:08:6b:eb:72:
69:93:dc:f2:52:de:53:3e:3c:30:f6:77:5b:60:87:
14:51:db:09:7d:b0:58:6d:da:cf:90:9c:ae:9a:17:
27:a2:ba:82:02:10:33:dd:7d:45:4f:35:ac:15:91:
7f:55:ce:bb:9e:97:cc:d2:8e:7c:42:f8:21:0c:f0:
6b:f6:38:01:c0:e6:2f:36:f9:a7:11:02:d6:18:50:
26:df:9c:3f:de:83:f8:cf:25:c5:a9:5b:6d:0f:00:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2F:06:E1:56:3E:93:EA:AB:F4:DF:A1:0B:32:22:84:E0:FE:95:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0389D920B88D11F08776F4D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c7:83:90:01:e3:f6:65:1c:0a:e1:72:6b:18:02:f7:69:5d:
8c:19:e3:60:bc:83:10:85:e3:fd:50:a4:fc:25:1d:38:58:00:
00:4b:09:c8:f8:c2:b0:1a:8f:a7:13:b3:dc:e3:ae:9a:20:9d:
8f:7a:2b:2b:e9:4e:b9:5b:3b:7d:3b:f2:12:e2:86:16:f0:c4:
a6:50:6d:6f:de:91:00:d0:d4:e8:5d:6b:b1:33:cf:3d:78:c2:
0b:58:73:09:15:b7:f9:a8:ca:53:da:ab:79:cd:e7:f0:10:97:
a0:99:71:e6:27:e3:97:9d:8a:55:c7:41:63:e3:a3:33:aa:bf:
9c:6d:18:ae:64:db:26:b9:3d:bc:64:04:0e:8f:de:ca:f4:39:
36:8b:0d:e6:b2:4d:66:59:dd:ab:a8:f0:2c:56:3e:eb:58:b2:
be:9e:ca:02:6f:bb:f5:30:aa:54:09:5c:14:dc:b3:61:22:cf:
3e:9a:a8:d1:16:10:2f:b9:6c:04:97:06:54:90:63:7b:45:3b:
2c:69:1c:39:02:00:14:7e:2e:c7:4b:c1:e6:d3:9e:7a:f4:75:
8b:78:a4:01:11:5b:09:e2:ea:1f:83:93:42:33:ec:03:e4:d7:
64:81:52:65:ef:1a:e7:ea:31:58:77:cc:8e:25:d8:dd:b4:c1:
4b:73:14:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:41:42 2025 by rpki-client