Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84C7E8ACA4E111F0991339DEDAE4EC9C.roa
File: 84C7E8ACA4E111F0991339DEDAE4EC9C.roa (raw, json)
Hash identifier: P6I6ZmnsrzbzKWmehACJQD5qdIYHM4svdmm+M250Ruw=
Subject key identifier: 81:C2:28:A1:21:3C:5C:77:EB:33:47:F7:F9:6E:8D:86:99:89:B6:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84C7E8ACA4E111F0991339DEDAE4EC9C.roa
Signing time: Thu 09 Oct 2025 07:28:15 +0000
ROA not before: Thu 09 Oct 2025 07:28:11 +0000
ROA not after: Wed 05 Nov 2025 07:28:11 +0000
asID: 272011
IP address blocks: 154.88.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107236 (0x1a2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 07:28:11 2025 GMT
Not After : Nov 5 07:28:11 2025 GMT
Subject: CN=68e7640f-386a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7a:26:b6:48:53:60:86:c0:7d:bf:53:bf:3d:
29:fd:b0:db:b5:b7:3e:91:7f:ff:34:e2:35:a8:2f:
0f:3c:e6:51:53:ab:7a:c8:f2:f4:0d:eb:c9:5a:2a:
b8:83:8b:d7:d7:19:62:82:31:bd:f1:d3:ee:a6:c7:
01:b8:8d:e4:33:ad:17:30:7a:a2:45:51:76:0d:2c:
8e:0f:54:ee:0a:e1:96:c9:d8:6e:6a:7e:80:50:a5:
61:53:b6:55:02:c7:e7:f9:c2:c5:da:5a:2e:f9:9e:
ce:03:da:16:35:d3:96:ff:55:fb:84:a8:eb:13:1a:
b0:cb:63:85:e5:23:52:dc:d0:bf:36:9a:e4:7b:6f:
f7:eb:57:84:6e:9a:1c:64:c9:8c:ad:68:f4:93:d2:
96:ba:cf:64:7f:6f:29:f0:3d:89:44:2e:65:61:fb:
57:32:90:7f:a0:fb:53:75:83:af:b0:85:4a:08:88:
cd:03:30:ae:41:82:1e:d5:4c:94:31:03:fc:11:fa:
f1:23:bf:e1:99:b3:38:e4:fc:0b:ee:e8:f1:e1:25:
1c:13:c6:ad:18:2c:5e:61:50:0a:38:5c:b7:24:f0:
da:6f:4c:ba:ee:f0:36:88:1b:3b:18:ef:6d:0f:d8:
bf:f6:4f:8c:9b:9f:39:6e:33:5f:16:02:bf:80:95:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:28:A1:21:3C:5C:77:EB:33:47:F7:F9:6E:8D:86:99:89:B6:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84C7E8ACA4E111F0991339DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.189.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ba:c3:6c:6e:05:73:15:37:46:a0:89:6b:ef:99:03:a1:c6:
8e:af:fd:33:7b:4a:91:6b:89:ab:22:e0:3e:f6:82:69:6f:55:
b7:cd:64:d5:36:22:e6:90:a0:84:a3:99:34:50:f9:fe:2b:dd:
1a:d1:93:39:9b:02:c3:5a:87:c1:6d:4f:70:93:7a:d2:84:78:
42:82:73:e6:dc:fe:55:93:0c:64:6c:6e:a8:95:d9:b1:1c:7f:
7a:d2:34:cc:5f:1d:dc:73:7d:00:42:41:e7:ae:b5:c7:b7:54:
7c:1e:f9:be:2f:09:85:30:c8:c1:e8:62:ba:3c:58:c9:bf:a7:
d1:96:3a:0a:5e:79:aa:48:92:44:ae:a0:b7:91:f2:3a:29:03:
d8:00:51:1f:a0:71:01:f9:75:a4:e9:14:d7:1e:f5:db:ae:c7:
e3:52:12:bc:86:63:b1:a3:19:e1:be:cc:f1:12:28:22:70:64:
9b:38:c9:c1:2a:bd:b2:0e:5e:1b:da:2c:42:48:6b:0c:ff:c6:
c4:d1:e4:c8:44:db:f0:e6:b7:c2:8e:45:b8:1d:16:1b:d4:b5:
14:1c:e2:be:18:d0:26:91:9e:bc:60:b6:3e:91:6d:2b:09:fa:
86:12:c8:a7:6e:38:0c:7b:9c:d5:80:ae:0f:da:8e:16:27:65:
e6:90:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:34 2025 by rpki-client