Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23C438F29D8011F0A6AA8EEEDAE4EC9C.roa
File: 23C438F29D8011F0A6AA8EEEDAE4EC9C.roa (raw, json)
Hash identifier: 8WMla0BLqz8C3DbEn8MST2MlOKoqn+PTI4TP4q7Rb1s=
Subject key identifier: 07:4D:29:7A:B3:C8:9F:70:69:28:07:18:E0:A4:E1:EF:F7:4D:26:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A19D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23C438F29D8011F0A6AA8EEEDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 22:03:33 +0000
ROA not before: Mon 29 Sep 2025 22:03:29 +0000
ROA not after: Tue 04 Nov 2025 22:03:29 +0000
asID: 398993
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106909 (0x1a19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 22:03:29 2025 GMT
Not After : Nov 4 22:03:29 2025 GMT
Subject: CN=68db0235-b378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:71:8c:88:4d:72:d8:fb:83:57:cf:da:10:
36:84:0f:6f:ef:5c:78:b3:bd:fb:83:4a:07:01:53:
23:39:58:36:d0:73:14:83:4c:81:17:a7:fb:b0:bd:
11:3d:45:87:9e:eb:57:a2:fd:c9:17:17:7f:1b:cf:
52:da:be:84:ad:11:55:86:6d:3e:6f:96:fc:ba:e1:
62:77:3f:7f:6a:48:bd:65:30:45:3f:69:a6:20:3e:
c0:d9:fa:87:26:ee:3b:4b:18:a8:28:60:57:86:8b:
32:60:ae:77:d5:ef:fd:73:ce:e7:27:20:93:f0:89:
3b:fb:89:32:74:25:4d:66:9f:a2:87:a1:cc:73:3a:
dc:fa:0d:cf:1c:23:41:6f:50:44:e2:73:1b:ec:2b:
04:af:ea:f1:b8:c5:88:15:c4:e0:e7:c6:fc:12:5f:
24:88:e4:3b:c2:aa:01:c1:26:17:2c:8f:16:d9:6c:
5a:5c:17:f9:f0:8c:77:f3:c8:91:90:88:27:4e:93:
4e:5f:ee:c6:5d:e8:3b:b2:18:25:29:5a:99:bf:9b:
49:94:9b:27:7e:19:60:be:d0:c8:2d:bc:30:09:84:
a3:e0:e0:dd:88:5b:0c:56:3f:ee:db:04:59:a7:19:
67:b8:01:d1:64:32:c1:bd:8d:a4:51:b4:9d:fc:d0:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:29:7A:B3:C8:9F:70:69:28:07:18:E0:A4:E1:EF:F7:4D:26:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23C438F29D8011F0A6AA8EEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:e1:12:db:c2:02:a8:64:4b:ec:c5:4b:a7:bc:66:64:f1:0c:
00:21:ad:25:a4:0d:52:6c:4a:85:86:37:30:0d:ae:53:4d:29:
17:9c:ce:c0:83:8a:35:45:a2:e9:1f:6d:fb:32:c8:e3:c7:4d:
2c:34:bc:e4:86:c2:10:83:93:eb:d6:61:40:4a:13:c8:7e:02:
af:f0:2a:6c:b3:8e:07:c8:3c:93:20:b4:52:ea:8f:95:52:e2:
9c:45:ca:41:bf:60:7a:7e:30:68:8f:ee:a4:ba:48:32:3d:38:
92:ae:00:bc:27:56:98:5a:29:76:ab:07:b3:b6:d4:3b:02:38:
8e:44:5d:d5:00:50:61:12:95:f8:e6:61:65:30:cd:cb:93:81:
47:9b:5f:6d:32:38:7e:55:03:48:f3:3f:de:05:89:44:df:7f:
55:c2:0d:06:0b:20:9a:4d:bf:a4:5f:67:54:12:82:e9:b1:7c:
79:3f:bf:3a:26:4e:84:80:85:ce:2f:60:a9:ce:05:bd:51:17:
53:04:bb:60:2e:bf:2a:33:6f:a6:f2:ed:92:cf:5c:c9:84:07:
db:aa:e1:12:98:49:7d:0e:71:37:cb:b7:3a:5a:97:5a:98:7c:
a0:4f:dd:63:26:a6:28:86:64:b6:7f:7f:c7:fc:7d:e4:73:93:
b8:31:18:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:49 2025 by rpki-client