Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46931F34A9A011F08C0D3D8EDAE4EC9C.roa
File: 46931F34A9A011F08C0D3D8EDAE4EC9C.roa (raw, json)
Hash identifier: g4sUDQRPoz43tCb41D0TwZ/A8QdKHUuY9XNkR1G64WE=
Subject key identifier: D7:D3:73:D3:32:E0:2A:1E:13:43:7C:03:DA:BB:09:51:2A:79:C9:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A383
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46931F34A9A011F08C0D3D8EDAE4EC9C.roa
Signing time: Wed 15 Oct 2025 08:23:49 +0000
ROA not before: Wed 15 Oct 2025 08:23:44 +0000
ROA not after: Mon 20 Oct 2025 08:23:44 +0000
asID: 399989
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 08:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107395 (0x1a383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 08:23:44 2025 GMT
Not After : Oct 20 08:23:44 2025 GMT
Subject: CN=68ef5a15-43c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:7f:ac:d6:c8:52:b5:69:0a:05:05:db:01:
72:f4:0f:f4:38:37:7f:d3:96:b5:b7:8e:57:90:e1:
a1:1d:e9:05:76:f0:8d:f5:aa:1f:0c:fa:29:04:6b:
95:e8:a7:49:e6:ac:f2:a2:85:01:11:3e:ec:59:61:
0a:2f:0a:91:ba:a8:fb:49:ca:7b:99:4d:26:f4:d4:
bd:4d:a3:50:50:dc:bf:7e:77:18:df:ba:ad:09:f6:
bd:54:d5:50:b6:bf:d1:77:5c:62:33:63:d3:fe:74:
18:54:70:45:b6:62:28:30:78:bd:1e:46:49:18:08:
a8:8c:fb:e6:70:55:fe:38:fd:bb:09:24:d5:aa:3b:
8f:52:cf:1c:f9:99:d9:96:b9:77:a6:40:5d:d9:f6:
79:71:b3:65:04:4d:44:af:f7:77:42:6e:7b:38:e6:
1a:3c:e9:2c:a4:3f:ab:76:19:66:26:22:d1:f4:87:
30:ed:d1:83:d9:01:a3:d0:aa:80:ee:87:3a:c4:c2:
87:d4:7c:f4:fd:a8:3a:1a:7d:44:89:15:6d:04:b6:
bc:c7:ac:80:90:33:af:c8:6f:73:58:59:e2:7d:f4:
be:e7:b5:ef:cb:5d:c6:66:73:40:76:37:64:e7:18:
93:5e:98:6c:14:47:ff:a6:9b:d0:c4:9c:35:85:ee:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D3:73:D3:32:E0:2A:1E:13:43:7C:03:DA:BB:09:51:2A:79:C9:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46931F34A9A011F08C0D3D8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:0d:07:07:2d:6c:c1:8a:bf:82:7e:60:88:d8:e2:92:13:2a:
44:75:95:7b:f9:7e:9b:4c:8a:71:d0:7b:99:dc:c0:63:19:b2:
53:ba:e0:45:00:80:d8:4a:9d:ca:96:2c:47:3f:62:42:ed:98:
2c:ae:cf:1e:74:ce:a5:71:da:1c:5c:29:a7:52:d4:b4:fc:ed:
43:f0:08:7c:54:98:af:cb:dd:23:e8:9a:07:86:31:47:25:23:
7e:0b:38:a0:cb:77:16:b7:c4:57:93:8f:b7:9e:ff:a8:47:e1:
21:2b:e0:04:28:a3:e2:26:92:77:8e:af:47:ed:b5:ca:25:31:
32:7e:c7:6c:4c:5b:29:b2:e6:59:67:70:70:c8:14:76:75:88:
88:42:6a:80:bd:40:6b:ca:01:b9:8b:4d:d4:ce:92:04:2d:89:
7f:bc:b3:72:2e:2e:c2:5d:59:10:15:4b:bb:fe:f5:2c:7e:93:
61:40:f8:b3:e7:5f:0b:37:55:32:96:af:22:d0:05:74:2e:fe:
62:ba:f8:40:a6:82:f2:25:14:51:c2:64:c5:f7:64:65:65:91:
ca:c8:1c:76:e6:d3:03:fc:c5:aa:1c:61:a8:86:94:e4:5c:2a:
d7:1c:6a:9f:5d:0a:db:c0:92:ea:b7:62:ff:05:61:53:70:dd:
39:87:91:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:48 2025 by rpki-client