Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF5E9668A8111F0921EF6BADAE4EC9C.roa
File: 5CF5E9668A8111F0921EF6BADAE4EC9C.roa (raw, json)
Hash identifier: 3lvx0szs01HFTZ+hxNRyIN10n9aZLHmcsuZhQxQE22M=
Subject key identifier: 64:B5:25:EC:6E:4D:6E:46:46:53:94:D2:98:7A:1A:71:88:B1:1D:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF5E9668A8111F0921EF6BADAE4EC9C.roa
Signing time: Fri 05 Sep 2025 17:54:27 +0000
ROA not before: Fri 05 Sep 2025 17:54:22 +0000
ROA not after: Wed 29 Apr 2026 17:54:22 +0000
asID: 395886
IP address blocks: 154.86.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106050 (0x19e42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 17:54:22 2025 GMT
Not After : Apr 29 17:54:22 2026 GMT
Subject: CN=68bb23d3-b762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:b1:ec:37:b3:48:2c:79:21:6a:f5:ba:33:
68:b5:89:86:43:4a:53:6a:65:92:72:63:a3:74:f7:
ac:bc:79:4c:85:57:c0:59:d2:36:dd:c9:9b:0f:f6:
af:40:ea:c6:c9:1c:dc:52:91:41:d9:88:b1:ad:c5:
4a:6e:f9:f9:a9:51:29:ec:f6:17:48:08:a3:64:95:
eb:71:6f:36:be:79:aa:21:9c:d8:10:43:40:7e:4a:
bc:24:cd:e2:5c:45:a3:97:0a:d8:2b:74:31:6f:de:
6e:80:7c:66:8d:81:5b:9a:40:df:b3:dc:99:d4:b7:
20:20:fb:33:4b:24:4b:8b:f5:95:cb:29:5e:56:fa:
e2:0b:d3:15:2c:05:e5:cd:c7:f4:cd:08:ab:7c:e4:
cb:2f:dd:5d:ca:c1:19:b6:67:2e:8c:9d:0b:ac:84:
42:bf:16:07:af:b6:2f:5f:b3:62:d2:2b:80:e3:1d:
22:7c:c7:a8:b1:91:76:b1:e9:c2:ef:1d:d8:17:7a:
1a:de:5c:76:c5:b3:ab:07:db:3f:72:4e:b0:53:cd:
e3:f1:f1:dc:40:04:12:db:ed:be:dc:cc:c3:96:d8:
20:18:f2:6f:44:79:fa:3f:a1:7d:6d:57:09:55:29:
86:c8:bb:2d:78:37:f1:92:af:52:85:81:47:6b:70:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B5:25:EC:6E:4D:6E:46:46:53:94:D2:98:7A:1A:71:88:B1:1D:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF5E9668A8111F0921EF6BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:71:67:6e:2e:d1:75:71:01:31:7d:76:4b:52:41:02:4d:f5:
fa:8a:0a:dd:5d:de:86:5c:d3:a9:33:7e:9f:b4:ed:f9:54:8d:
dc:63:6e:e4:a0:3e:8a:5c:0c:cb:d1:00:65:7a:be:ef:5f:88:
eb:18:5a:51:78:75:f7:ab:38:75:21:ae:e7:59:59:f1:1c:d5:
15:76:b8:bb:ef:59:af:81:0c:82:6a:c9:4a:d8:be:ad:fd:73:
0d:37:cd:44:03:66:1f:f9:c0:31:10:96:74:40:50:d6:15:0c:
db:a6:cf:7a:d5:04:2c:c5:3c:44:bf:2d:03:93:59:7e:22:b5:
17:93:74:c9:a3:a5:79:2c:71:34:7d:42:07:ad:2c:d6:7c:95:
7f:0a:fa:b2:1f:48:10:4a:60:3c:7c:a3:3b:e9:42:0b:95:c6:
8c:0b:13:74:74:44:8d:f1:af:3e:ad:ef:b2:11:5e:de:09:16:
89:05:b5:1f:1c:55:5b:08:4c:00:38:70:9f:3e:b1:33:84:e7:
6d:1c:61:c5:b5:3a:48:66:40:f4:77:7a:31:ff:d6:55:c2:4b:
00:29:69:3b:a7:17:56:bc:e7:a2:db:4d:ed:a3:9f:5f:83:93:
95:8c:8e:49:b2:42:b9:7a:b1:4b:ab:7e:fb:cc:ff:34:d6:ef:
ef:2e:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:34:55 2025 by rpki-client