Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8377E1FCA5AC11F08BB11984DAE4EC9C.roa
File: 8377E1FCA5AC11F08BB11984DAE4EC9C.roa (raw, json)
Hash identifier: Nhe4mrpeoBYwJlCDiN/WkGxjfmasiDlxKilvESBY6mw=
Subject key identifier: 59:61:51:39:69:47:0E:31:B9:10:21:20:70:9D:DD:74:69:77:12:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A31F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8377E1FCA5AC11F08BB11984DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 07:41:21 +0000
ROA not before: Fri 10 Oct 2025 07:41:16 +0000
ROA not after: Wed 12 Nov 2025 07:41:16 +0000
asID: 147176
IP address blocks: 154.84.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107295 (0x1a31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 07:41:16 2025 GMT
Not After : Nov 12 07:41:16 2025 GMT
Subject: CN=68e8b8a1-8a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:f6:15:3f:57:21:c4:db:1a:80:46:90:83:
99:e9:4e:75:59:97:fd:74:bb:6a:58:ba:7f:5c:5a:
2c:5e:f7:0f:d4:67:39:0d:82:73:50:38:34:1d:fc:
5d:46:c6:5e:96:8e:b1:03:00:50:ed:6d:5b:27:d3:
23:ce:54:c1:d0:0a:3c:1d:8d:c8:18:52:59:85:b9:
70:3c:b5:b2:54:25:e8:df:b8:d9:d5:ee:02:67:9b:
98:8c:29:bb:68:a4:a7:3d:0b:2b:fc:f8:67:8b:ac:
2a:1b:93:a5:1b:32:38:6f:b3:8e:c9:e7:bb:26:53:
b1:d4:6a:14:86:67:14:d0:75:51:4d:65:03:f5:f0:
9a:bb:cb:38:a9:cc:1d:ed:2d:9a:89:1f:c8:cd:7e:
94:2d:68:f9:1b:96:aa:da:3a:07:ea:2a:78:30:a7:
2a:45:61:e3:d9:70:ad:e7:45:e2:bf:1b:db:7c:1b:
77:c4:82:ce:e5:24:f0:73:45:27:81:ef:8f:3c:67:
56:f7:e6:ad:65:b7:7d:10:44:19:5d:b9:57:28:02:
d7:81:72:55:26:7d:4c:83:98:4b:40:80:49:47:26:
d9:87:d4:16:d3:96:97:26:84:79:9e:60:c1:0a:3b:
24:5d:fb:d1:81:8d:d1:20:54:e1:fc:1a:f0:42:c1:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:51:39:69:47:0E:31:B9:10:21:20:70:9D:DD:74:69:77:12:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8377E1FCA5AC11F08BB11984DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.153.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b7:89:c0:8d:f2:f5:62:17:c6:ff:a5:05:ec:6d:9d:b3:95:
60:9d:a3:29:0f:ee:cb:54:c0:ae:f7:17:ac:c1:16:44:ea:10:
01:6c:34:fd:2b:df:09:bd:43:1a:5a:74:f4:ab:b2:c8:3f:65:
fb:f8:da:7c:93:27:24:8c:93:47:18:28:0d:e0:87:7d:d9:ad:
47:f0:d2:22:57:2f:ff:0e:6f:72:0f:1d:a2:20:af:0b:e3:be:
d5:00:71:c6:78:7c:ad:6a:e4:03:1f:d2:11:8a:ad:a9:4d:0a:
71:22:55:08:4f:b7:21:86:79:58:67:79:36:b7:bf:12:d1:0b:
90:45:71:a2:fb:9e:b7:11:02:aa:cf:2b:31:48:a2:03:fc:1e:
4d:a8:ab:3a:df:b8:17:b8:73:86:7a:0b:66:f6:ec:97:2e:b2:
b7:d5:5b:b2:33:9f:b5:dc:c8:34:79:17:15:cb:4a:17:00:3b:
45:ae:6e:e0:dc:2a:93:91:61:f6:bf:fa:4d:1d:4b:7a:ea:5d:
90:8e:16:04:78:cf:48:c2:73:43:2d:6e:2c:4f:6f:e3:fd:0f:
f7:3e:89:77:17:53:91:c4:5c:d6:b7:cb:2c:05:3e:61:ad:68:
1a:4c:84:12:39:0b:8c:ef:54:94:f8:e2:57:e8:68:96:b0:82:
b0:02:54:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:01 2025 by rpki-client