Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/913A3D9A8A3A11F08A6EAE7ADAE4EC9C.roa
File: 913A3D9A8A3A11F08A6EAE7ADAE4EC9C.roa (raw, json)
Hash identifier: 05BCvEr0bOD0vuebdQAm/PwvU1MxF6gW7UB/4/gAW8E=
Subject key identifier: FF:90:E7:22:44:32:D6:FE:4C:17:6B:57:08:C8:92:EC:36:BF:0C:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/913A3D9A8A3A11F08A6EAE7ADAE4EC9C.roa
Signing time: Fri 05 Sep 2025 09:27:40 +0000
ROA not before: Fri 05 Sep 2025 09:27:35 +0000
ROA not after: Mon 14 Sep 2026 09:27:35 +0000
asID: 135600
IP address blocks: 154.91.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105990 (0x19e06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 09:27:35 2025 GMT
Not After : Sep 14 09:27:35 2026 GMT
Subject: CN=68baad0c-5377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:41:1c:67:d2:8a:6b:33:3a:a9:ae:12:6a:
47:9d:0e:3a:21:b3:79:27:a0:96:85:de:e8:0d:23:
55:29:c7:6c:10:a4:4b:f7:3e:8a:c2:3e:6e:de:c8:
0e:cf:df:4f:ce:74:ce:b5:69:af:8f:54:c9:a6:aa:
14:20:d6:05:1b:84:14:b0:2e:9f:d4:ec:35:bc:e2:
57:ba:2c:74:b5:e7:24:8b:99:ec:67:cb:8b:e9:a1:
61:80:7f:69:64:fe:5d:54:31:5e:2d:ef:dd:fd:d3:
89:4d:a0:c2:6c:e8:21:88:01:fb:a9:c1:86:41:49:
35:43:df:64:32:cb:ea:92:d5:df:49:d7:1d:15:63:
9c:8b:4c:71:fc:36:a0:5a:fb:39:87:d8:57:fc:a3:
b8:3d:28:ee:ef:90:ce:47:f0:84:b1:e7:8f:98:d0:
5f:61:de:fe:4b:50:f9:d5:1f:2f:2e:73:d9:ed:6b:
fa:d3:12:b8:20:a8:68:96:35:ab:1f:81:d1:11:c9:
bb:55:d2:68:69:a1:a9:2b:46:7e:7b:cf:7d:b8:dd:
d8:8a:ee:78:7c:2e:32:c7:2b:5b:40:1f:3c:48:b4:
50:29:f0:5a:8b:e9:4f:84:e6:16:d7:13:62:29:be:
63:e6:c0:1b:09:b3:81:a3:b2:30:53:bc:ab:74:8a:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:90:E7:22:44:32:D6:FE:4C:17:6B:57:08:C8:92:EC:36:BF:0C:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/913A3D9A8A3A11F08A6EAE7ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.40.0/21
Signature Algorithm: sha256WithRSAEncryption
af:b1:a0:81:83:85:26:d7:45:2b:52:ef:c9:b7:84:bf:f6:cd:
13:57:17:35:6c:25:44:96:d4:18:6c:a8:8d:2f:b9:35:a5:d5:
43:0f:61:55:3e:6a:12:1a:80:f2:aa:fa:89:1a:18:32:37:98:
9c:c0:7d:39:f8:dc:26:cd:34:d7:f0:2b:e4:b9:4f:ec:93:05:
64:68:0d:b9:78:0c:61:f4:ff:29:dc:da:17:18:d9:ad:97:88:
40:87:04:ac:64:d5:ee:23:f3:4a:38:bb:ac:c4:ed:a4:0f:1b:
94:da:30:c0:44:f2:62:df:4e:26:d7:91:35:11:14:8c:99:d9:
e0:cf:ff:54:01:a8:39:18:8c:8f:61:71:9a:dc:eb:46:30:f3:
1d:42:0e:a3:0c:4a:e9:38:78:6b:41:53:2e:17:0c:2d:84:a6:
8c:bd:33:1c:63:77:67:08:4e:ef:2a:69:9a:76:1a:4d:ea:e1:
b9:58:e6:ef:c1:29:f0:e8:b4:f7:a5:3d:86:28:2d:3e:07:05:
a0:88:ea:6c:46:3b:97:2b:16:73:58:a8:6e:90:ff:f4:2b:8c:
aa:a9:10:c3:4d:d1:81:15:8c:b6:7d:cc:72:7c:a1:84:00:ff:
41:f9:8a:53:fb:dd:24:00:b7:51:dd:86:46:bb:99:ed:cc:f8:
a1:1f:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:41 2025 by rpki-client