Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80DD6502995411F093519EF1DAE4EC9C.roa
File: 80DD6502995411F093519EF1DAE4EC9C.roa (raw, json)
Hash identifier: WbwmmpAakcw6LhsljrD+T0ZI91o2OQaeKIVLph1g/Q0=
Subject key identifier: 5B:2C:DA:76:A1:5E:FE:C2:A0:AA:51:6B:43:60:B8:81:14:91:E8:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A084
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80DD6502995411F093519EF1DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 14:41:07 +0000
ROA not before: Wed 24 Sep 2025 14:41:02 +0000
ROA not after: Tue 28 Oct 2025 14:41:02 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106628 (0x1a084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 14:41:02 2025 GMT
Not After : Oct 28 14:41:02 2025 GMT
Subject: CN=68d40303-8261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:9f:de:b1:1e:9a:71:80:59:84:45:ec:c1:
49:ba:2b:97:a0:c1:02:f3:63:6a:ef:57:e6:64:db:
d0:5f:41:c3:36:79:98:79:9e:95:31:de:71:62:b2:
19:a3:29:62:31:d1:97:65:05:bb:06:b7:a3:f1:f4:
8f:6e:a6:51:77:bb:05:18:7b:5a:57:0f:e9:70:ac:
1c:23:e7:40:76:a4:5b:f1:bb:eb:58:97:26:0e:2c:
8a:2a:44:09:9d:a6:b7:27:1f:95:40:ed:b8:2d:4d:
b9:6a:bf:38:e9:fc:73:96:ce:35:11:a6:f5:34:2b:
d6:93:a6:70:da:b1:a8:0d:88:62:37:d2:fe:af:e1:
9d:16:0a:d0:17:60:32:e6:c3:42:6d:f0:cc:ba:8a:
50:2b:76:f0:53:a7:2b:9d:e3:e1:5f:5c:b8:7b:b1:
b7:1b:55:81:34:99:08:72:3a:9b:39:b5:3a:46:ff:
ee:58:80:02:46:c4:79:a9:a1:6f:06:34:af:d9:2e:
4d:fd:80:13:46:cd:5f:d3:a2:f1:93:4f:9d:ba:82:
38:a9:d2:8f:18:48:44:9e:0a:bd:17:7c:fc:84:ba:
be:5b:78:15:71:41:95:0c:e9:da:67:52:78:b3:f2:
fc:3a:78:61:aa:b9:54:84:14:74:4a:e5:f6:d2:c0:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2C:DA:76:A1:5E:FE:C2:A0:AA:51:6B:43:60:B8:81:14:91:E8:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80DD6502995411F093519EF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
64:9f:3a:be:1f:10:8a:7e:63:ed:15:1f:9f:38:97:3a:60:27:
c4:33:20:1f:02:c7:cc:4f:56:78:9d:11:83:f3:04:e8:0c:99:
ed:2d:05:c7:53:bb:a7:7b:08:39:e1:bb:fb:69:80:5e:2f:7e:
73:e2:ae:d8:d1:65:0c:a6:7e:c8:41:50:1d:c3:23:06:ef:a8:
ee:36:94:27:9d:e7:0b:4c:01:2f:5e:49:31:ec:0d:03:86:ac:
b5:b7:94:b3:4f:d3:ba:82:4c:5c:62:47:b7:bc:9a:66:ef:a3:
97:f9:c4:80:14:f6:7c:0d:0f:48:ee:d7:56:95:2b:be:36:a3:
68:ef:2a:b3:e5:89:7c:b7:38:31:8b:ef:40:93:a3:60:12:3f:
7d:ef:ec:63:aa:27:85:7f:ae:a3:1d:43:8b:c2:e2:02:8f:0c:
ca:64:bc:89:5e:d5:f5:7b:dc:d6:3a:79:af:d9:09:a0:a2:85:
52:08:e6:5a:6d:5a:eb:de:6e:4c:c7:5b:32:10:65:13:83:e7:
ca:57:b1:70:4a:d3:7a:62:fe:4a:31:ca:7f:30:96:c6:51:7c:
1c:5d:73:fe:e3:12:c1:78:63:07:11:5d:4b:c2:f2:37:3f:3c:
5f:eb:1d:83:63:ee:7c:3b:ce:2f:e0:28:a3:1b:7a:1f:e9:f4:
a5:9e:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:51 2025 by rpki-client