Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25FF1A48998311F08A7F109ADAE4EC9C.roa
File: 25FF1A48998311F08A7F109ADAE4EC9C.roa (raw, json)
Hash identifier: hMq8aHR3HNQm+CR2QMvoiUNgPRyB2ZS5PJ9LI21BH4g=
Subject key identifier: 86:40:A3:71:3B:DB:87:A6:FB:6F:73:EC:ED:1C:02:18:7C:AB:5E:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25FF1A48998311F08A7F109ADAE4EC9C.roa
Signing time: Wed 24 Sep 2025 20:15:01 +0000
ROA not before: Wed 24 Sep 2025 20:14:55 +0000
ROA not after: Tue 04 Nov 2025 20:14:55 +0000
asID: 20326
IP address blocks: 154.193.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106692 (0x1a0c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 20:14:55 2025 GMT
Not After : Nov 4 20:14:55 2025 GMT
Subject: CN=68d45145-71dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:2a:a5:cd:af:42:29:66:97:7e:f4:54:97:
a5:83:bb:53:89:7d:d1:f2:7a:7c:d1:e8:b9:cf:a8:
3e:1f:51:35:7c:30:54:03:7b:3c:14:b3:61:db:55:
dd:cc:3c:30:c2:81:9f:0e:b0:d3:30:f0:05:5b:42:
fd:82:61:f9:e5:04:fa:22:56:19:cd:9b:4e:ef:63:
92:1b:97:1d:be:43:74:5e:cf:ef:c6:54:16:85:6d:
35:2a:82:f5:a6:0f:2c:fa:fc:51:62:52:66:93:35:
64:0f:8c:a9:3d:4e:cd:e4:17:92:ae:0e:25:f3:18:
b1:30:fb:e3:8b:de:00:34:f3:6c:34:51:b6:fb:9b:
41:b9:b5:6d:44:b8:f1:b8:40:7c:78:66:75:27:af:
4c:de:f8:44:5f:26:90:ae:ce:59:60:20:9a:7d:70:
3c:24:e1:c9:9a:b1:48:80:6d:30:b4:82:1e:1d:b8:
97:87:58:70:3c:a3:fb:f9:43:c1:0e:d0:00:d8:26:
8d:71:a2:c1:22:ff:b4:43:a9:fc:db:fe:64:b5:be:
4e:9c:00:34:4d:5e:d0:5d:cb:bd:3c:78:aa:3c:8d:
bd:a6:03:7d:76:f3:22:a3:3e:60:f8:41:3e:d4:c0:
d5:1a:cc:d6:e3:ab:55:5a:ae:8b:42:e2:8b:c2:db:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:40:A3:71:3B:DB:87:A6:FB:6F:73:EC:ED:1C:02:18:7C:AB:5E:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25FF1A48998311F08A7F109ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.163.0/24
Signature Algorithm: sha256WithRSAEncryption
14:73:55:bd:eb:5c:13:bd:dd:95:61:85:b0:da:62:06:48:2f:
05:3a:ef:8f:d2:4f:47:c9:d1:b7:21:62:77:47:49:b5:49:bd:
e4:a0:46:5b:d5:f0:49:4a:5f:f8:6c:de:6c:20:80:d2:6c:72:
6d:45:b2:66:22:02:9b:3f:72:91:9a:a8:10:24:21:5a:a9:23:
be:51:dd:5a:89:24:8d:e2:c3:b3:9b:bc:84:f6:8a:89:2b:72:
32:45:68:ce:f7:88:c2:1a:fe:19:a2:eb:60:a9:5c:37:c1:39:
85:95:c5:e9:d9:b1:a3:ec:09:11:15:9e:a1:ad:9f:16:f0:82:
42:7a:4f:08:4d:bd:7e:31:b1:bd:78:69:7c:b3:5f:9e:b1:3a:
e7:f2:fe:a3:50:12:dd:1b:9f:eb:42:56:fd:69:cc:e7:d3:22:
45:8d:4b:cd:09:3a:b7:45:2d:c0:7e:59:b5:fc:dc:bd:7a:8a:
9e:56:8b:14:0d:1d:30:d7:72:a7:f9:fb:bd:a0:58:d1:25:de:
be:0f:b5:a5:b1:38:fe:d2:95:0d:39:77:3a:4b:34:d5:f5:73:
d1:1d:09:ec:cf:da:16:58:cc:20:5a:48:ae:08:5d:66:a7:54:
ac:0f:96:84:cb:7c:99:74:bb:ff:43:0d:98:58:a8:55:5c:35:
a7:90:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:58 2025 by rpki-client