Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/465AAB2CA9C811F0BEC7A384DAE4EC9C.roa
File: 465AAB2CA9C811F0BEC7A384DAE4EC9C.roa (raw, json)
Hash identifier: tim5Kos0XiBScHHPCYiq2bXAiOriBqsIZtzNE5V+RBg=
Subject key identifier: 2F:0C:86:26:3D:F9:AC:57:E8:06:CC:86:18:BE:6B:87:41:54:9B:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/465AAB2CA9C811F0BEC7A384DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 13:10:09 +0000
ROA not before: Wed 15 Oct 2025 13:10:04 +0000
ROA not after: Tue 25 Nov 2025 13:10:04 +0000
asID: 401615
IP address blocks: 154.85.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107431 (0x1a3a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 13:10:04 2025 GMT
Not After : Nov 25 13:10:04 2025 GMT
Subject: CN=68ef9d31-148e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cc:53:84:8c:7e:d0:97:a0:ed:bd:de:65:31:
cb:c2:be:b3:3a:8a:15:b7:ba:3a:40:5f:a4:a0:01:
6d:5b:b9:2f:e4:34:09:1b:35:f8:c2:f1:09:0d:07:
4c:1c:a4:ba:a2:1a:0a:c0:5b:06:56:99:c1:4f:75:
cf:92:dd:1e:c1:11:93:b6:c5:92:2c:aa:15:88:67:
3f:c4:7d:fe:ef:25:e3:8d:c0:f7:6e:1e:c0:aa:9a:
4a:b4:03:18:bd:e9:27:57:71:d2:1c:fc:dd:cd:95:
c0:c5:4a:d7:5e:2c:99:cd:c0:12:86:51:31:5d:d3:
b2:80:0d:0a:ef:cb:02:fe:ff:a0:ec:b9:5a:44:34:
ef:a2:c7:a6:55:f2:38:ca:29:97:4e:59:39:b4:7c:
68:13:af:f3:ec:ec:78:ef:da:fc:3a:de:00:d2:b6:
cf:b2:c1:6a:e7:63:66:3c:04:36:fc:3c:19:71:c0:
75:05:88:91:9d:e5:b7:17:61:54:92:65:1c:a2:0e:
22:8d:11:e8:78:dc:62:9e:7b:d0:63:cd:0f:e9:d3:
8b:70:e9:cd:84:62:fd:4d:bd:a9:7d:81:11:3d:a6:
6b:c1:1f:8b:cf:9e:58:35:20:2b:54:f7:b7:26:bb:
fb:ee:28:f9:0f:6b:33:2c:36:b0:9d:a5:af:e2:17:
78:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0C:86:26:3D:F9:AC:57:E8:06:CC:86:18:BE:6B:87:41:54:9B:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/465AAB2CA9C811F0BEC7A384DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.20.0/24
Signature Algorithm: sha256WithRSAEncryption
60:03:dd:22:c9:f6:1c:ff:9f:44:c1:46:a9:76:62:a5:6f:cc:
3c:9c:72:73:7e:d8:b1:8c:c4:dc:fc:91:8a:a2:77:07:37:9f:
14:02:39:e4:fd:fd:e1:b5:07:7e:fa:fe:45:dd:96:f9:29:81:
a0:07:9b:a9:8a:ea:7a:6d:a0:04:c1:fd:62:40:69:cb:27:7f:
4e:6b:b4:7f:c1:50:0e:bb:15:29:31:4c:ec:0e:42:f1:91:1d:
d3:20:55:c9:bf:df:a4:13:0b:69:cf:e0:69:e3:80:28:f7:f5:
76:ab:65:00:1b:07:e1:1f:dc:11:43:d4:59:ae:f4:7e:0c:7d:
63:9e:5d:99:20:32:e7:c8:11:d9:36:d6:98:75:63:5e:06:e9:
88:0e:20:95:33:22:54:ca:2d:dc:e5:71:cd:27:ea:07:b1:9d:
1b:ac:90:3d:a3:bf:67:5e:59:f7:79:54:a5:f5:11:c6:72:37:
60:fd:29:ce:28:7e:af:98:b0:65:96:b8:1c:cd:56:f9:fd:e8:
41:bb:3b:56:1d:53:5b:38:b1:66:fe:17:e6:cd:86:90:64:3b:
b2:1c:ba:0a:22:3d:99:bf:a4:bc:cb:9c:2b:dc:ef:a8:b0:06:
00:04:3a:7a:13:83:4c:86:9a:d2:6b:76:1f:c1:46:d8:28:82:
95:e0:91:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:18 2025 by rpki-client