Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24D3509CA02911F08860A7BDDAE4EC9C.roa
File: 24D3509CA02911F08860A7BDDAE4EC9C.roa (raw, json)
Hash identifier: I2EN0EFXMLsPMEgb9TJ3s4H1bleyvR3K6e9DL43IRiI=
Subject key identifier: 13:E5:49:CF:7E:29:49:A5:B0:14:1B:1C:4C:DC:52:F9:C5:D7:AB:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A219
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24D3509CA02911F08860A7BDDAE4EC9C.roa
Signing time: Fri 03 Oct 2025 07:18:22 +0000
ROA not before: Fri 03 Oct 2025 07:18:14 +0000
ROA not after: Fri 07 Nov 2025 07:18:14 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107033 (0x1a219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 3 07:18:14 2025 GMT
Not After : Nov 7 07:18:14 2025 GMT
Subject: CN=68df78be-391b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:f2:83:a6:9e:20:c3:56:59:6e:09:ac:46:
b0:89:c7:92:8b:84:80:ab:1e:fd:a2:c1:87:94:78:
0f:10:d2:1a:d9:27:d6:23:de:ae:28:75:ce:4d:6c:
68:1d:20:2b:4d:7d:d7:2d:0b:d6:a5:e4:da:84:d6:
73:d0:3b:31:55:86:42:75:7a:ec:70:d0:e7:8a:c1:
1d:c4:a6:87:04:bb:7c:bf:9a:31:d3:0d:4b:2b:fc:
8d:30:04:e0:42:76:a6:bd:e9:ed:35:86:7f:eb:e3:
09:dc:9d:03:5e:c7:08:a1:5f:c5:06:24:95:8a:d7:
e2:08:86:f5:bf:04:72:30:69:8e:fa:c6:57:33:cc:
b6:b2:cf:a0:49:65:14:03:1e:de:b6:cd:e0:33:12:
4b:e1:6e:e7:e7:07:2c:b5:22:33:bb:91:89:2e:2f:
04:73:7d:08:90:e9:9e:8b:67:92:d0:85:2a:1a:7b:
ef:53:64:64:29:b2:b0:6f:d9:b7:86:31:bb:03:d1:
e3:c1:81:b0:24:7a:4f:5a:5f:74:f5:bc:2f:15:aa:
c8:46:de:1f:06:e0:2b:85:96:67:e6:f3:0c:e0:a7:
0b:32:e7:3b:14:6f:e1:a0:b5:c4:aa:38:3d:5f:cb:
3a:fb:2b:dc:24:d9:12:50:34:98:69:4b:26:c1:a3:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E5:49:CF:7E:29:49:A5:B0:14:1B:1C:4C:DC:52:F9:C5:D7:AB:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24D3509CA02911F08860A7BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5b:6e:8e:45:74:c2:7a:06:ca:d7:38:e8:08:8c:a0:73:28:
9e:29:5b:62:97:a6:82:e8:96:c6:49:ef:d4:0e:4f:63:11:3a:
43:52:8c:8f:63:9a:21:66:0a:e2:91:d8:53:06:f6:0d:49:13:
a3:70:22:22:d6:dd:6b:9e:7b:34:5e:02:26:46:84:ac:6e:ee:
e4:c7:46:74:55:f2:ff:0e:4d:7a:cf:2f:b4:04:9b:ee:02:db:
f6:53:99:6a:d5:4e:aa:b2:f7:d6:60:95:17:f0:4c:f9:d6:ed:
35:df:cb:74:92:3f:3a:ce:14:d0:c7:66:2e:3d:35:06:47:d0:
17:81:d8:b4:d2:4c:02:2a:72:00:e8:48:ab:33:6d:f9:0c:ed:
16:db:da:36:55:3e:52:ed:ac:75:69:f4:e3:4e:9e:cd:33:80:
49:57:e4:65:ba:45:09:8a:99:32:2d:33:2d:6b:6e:40:24:00:
62:cd:4e:12:e1:29:0a:20:d4:6c:d6:57:f1:79:a3:04:2d:f4:
fb:86:9c:29:3d:67:68:3d:d5:e5:cd:38:1a:46:e1:29:53:64:
35:93:de:4d:b7:92:18:3d:10:c7:85:09:60:1c:d3:ee:14:07:
cd:b5:52:ed:3b:e7:c2:e6:93:65:98:f7:3a:1c:b0:0b:db:91:
65:c3:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:58 2025 by rpki-client