Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D335BAAA08A11F08E4EDDA6DAE4EC9C.roa
File: 6D335BAAA08A11F08E4EDDA6DAE4EC9C.roa (raw, json)
Hash identifier: s2bjVzAvlXkhDNSFN05m5qXa+uUfrHSjnw2yr7iE7jQ=
Subject key identifier: 8F:C8:FD:FD:AF:1E:A5:60:B6:5B:CF:3F:B5:DF:AA:E6:DC:57:AD:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A23E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D335BAAA08A11F08E4EDDA6DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 18:54:45 +0000
ROA not before: Fri 03 Oct 2025 18:54:37 +0000
ROA not after: Sat 31 Jan 2026 18:54:37 +0000
asID: 19318
IP address blocks: 154.88.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107070 (0x1a23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 3 18:54:37 2025 GMT
Not After : Jan 31 18:54:37 2026 GMT
Subject: CN=68e01bf5-33b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:61:36:a1:f4:90:e4:e1:d9:39:9d:d4:c3:35:
e3:6d:1f:6d:ec:dd:f9:38:87:88:63:89:d2:87:de:
49:a7:09:27:bb:06:6d:7c:2c:35:21:c8:23:3e:af:
d9:b2:05:c5:7d:40:c8:db:d5:56:33:d2:13:5a:8f:
f7:7f:cb:d5:02:b7:1a:1a:ee:05:1f:06:0a:5d:10:
4b:7a:97:16:2c:ef:5a:63:cd:d8:4e:ba:f3:f5:05:
fe:ed:8b:df:e5:87:be:2a:be:2a:83:7c:b7:e4:4f:
ad:93:d4:2a:53:1b:75:b8:59:58:d2:7b:c4:7d:3d:
5c:ce:df:07:8c:22:ec:5b:9c:6b:ab:1d:39:ad:a9:
00:46:88:d3:88:09:7b:ed:21:53:bb:ec:55:52:c7:
a2:a5:7e:ec:2a:03:5c:6d:af:3b:b8:f6:26:34:3b:
6e:6c:e5:bd:91:86:9f:a3:5e:46:69:c1:93:5c:d2:
11:ae:4b:4e:22:0b:3c:f8:4e:c3:36:d1:20:2e:46:
b5:b9:88:ba:e0:11:5c:6c:35:4f:7c:f3:d4:da:a9:
a7:e5:98:dd:c3:6b:7f:0b:45:a6:ac:08:78:1a:f0:
02:05:7c:32:ed:61:fb:d6:17:4a:60:7a:27:9b:22:
42:14:c4:94:1c:1d:96:43:79:ed:60:32:94:ae:b6:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C8:FD:FD:AF:1E:A5:60:B6:5B:CF:3F:B5:DF:AA:E6:DC:57:AD:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D335BAAA08A11F08E4EDDA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:40:af:7d:22:7d:ae:14:82:a8:4d:32:aa:3f:fb:c3:bb:e5:
0e:ff:8f:1f:b0:cb:cd:d4:d8:bd:1e:20:94:49:51:5a:af:32:
02:49:61:13:06:e3:f1:a4:23:8e:a5:a9:fb:60:ca:ed:e8:0e:
4e:7c:79:e7:32:84:28:4a:66:9d:91:03:6d:08:78:23:36:cc:
ac:a4:4c:36:79:b7:25:23:91:ca:03:57:5d:b4:11:1d:d5:64:
03:91:a8:13:55:15:0e:55:03:a0:f6:ae:36:db:45:e6:22:c2:
e9:0f:10:06:a2:dd:ff:3c:44:a4:51:93:98:34:bf:ca:98:4d:
f1:90:49:55:2f:d1:f3:e9:f9:e3:ff:09:e5:3c:f6:8c:6e:02:
68:2b:90:b5:81:b0:77:da:4c:57:f1:44:74:0f:fe:cb:32:34:
43:1e:06:fd:c6:ef:db:3a:aa:40:0f:74:6d:54:58:1e:77:eb:
4b:69:10:82:9d:b5:ee:50:2d:28:e0:87:80:f9:4a:bf:12:6c:
d8:90:04:72:e0:b6:2c:06:ff:b0:1b:85:43:89:d4:81:ad:ff:
3a:6c:4d:73:bf:5f:30:de:61:59:90:f2:65:e3:de:9a:a1:58:
81:90:6a:1e:d5:ef:ba:e1:bd:1b:20:a0:6c:13:db:56:ef:a1:
e7:40:3e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:53 2025 by rpki-client