Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91E94C0A844411F0AC34199ADAE4EC9C.roa
File: 91E94C0A844411F0AC34199ADAE4EC9C.roa (raw, json)
Hash identifier: TDnThtR0QFdCEwbIOxkGXsH73CLlsqzURE2qjdoOxL8=
Subject key identifier: 0D:FC:B1:7B:BD:DB:9A:E3:21:92:12:A4:EF:C0:B8:6A:94:78:3B:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91E94C0A844411F0AC34199ADAE4EC9C.roa
Signing time: Thu 28 Aug 2025 19:24:09 +0000
ROA not before: Thu 28 Aug 2025 19:24:03 +0000
ROA not after: Wed 26 Nov 2025 19:24:03 +0000
asID: 9294
IP address blocks: 154.211.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104996 (0x19a24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 19:24:03 2025 GMT
Not After : Nov 26 19:24:03 2025 GMT
Subject: CN=68b0acd9-26a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:26:06:e6:41:b2:fc:2e:80:2e:57:4a:d7:
c2:bd:b2:09:52:49:e9:0b:ef:ea:d4:db:af:65:cf:
4d:25:2a:9c:8b:1d:f0:53:aa:79:97:da:fb:0d:b5:
cf:aa:a4:32:19:97:8e:f0:a8:88:8c:0e:91:0b:bf:
e5:1a:c5:65:2b:65:00:33:46:21:40:e3:4f:a1:97:
9e:55:40:49:57:36:96:2d:78:94:27:85:e8:78:24:
60:41:10:c5:ac:1b:d5:34:0d:72:c5:e6:19:d5:35:
ef:19:83:84:c0:3d:61:b6:e1:35:5b:38:2b:67:19:
1d:3a:f1:0c:9e:a3:44:9b:8f:0e:2e:ad:fd:c3:d3:
8c:56:68:58:ec:c7:ea:88:1a:1e:29:8e:ec:dc:6e:
4a:01:bc:17:3a:a7:30:f1:d9:7d:2f:5c:f9:05:6f:
54:ec:7d:98:e6:fb:60:e4:22:6f:ba:bb:36:33:28:
58:6d:1a:e7:f7:49:21:c8:65:b5:a0:04:b7:fd:94:
6a:33:60:51:31:38:52:66:17:e6:15:b6:60:6f:2b:
d3:66:c4:81:90:4b:c5:5c:5f:91:e8:31:e7:de:c4:
52:11:a8:be:17:32:3b:7a:78:d1:3d:d1:5f:98:a6:
1b:f5:01:06:6a:1f:b9:fc:f6:d9:d4:df:5b:e0:f8:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FC:B1:7B:BD:DB:9A:E3:21:92:12:A4:EF:C0:B8:6A:94:78:3B:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91E94C0A844411F0AC34199ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.32.0/19
Signature Algorithm: sha256WithRSAEncryption
be:0d:a9:80:66:a6:c7:01:f1:9b:16:15:fb:7c:a8:2d:9e:83:
3e:a6:92:3b:12:1a:cc:68:94:a6:d3:91:89:da:bc:79:ad:46:
97:d3:dc:0b:9a:27:e2:e0:fb:2e:53:76:57:8a:d6:58:8d:18:
52:68:45:7f:cc:f9:7f:cd:1b:d6:2f:62:8a:fa:11:70:91:d2:
ea:b3:59:46:98:6a:f1:3e:94:10:60:c0:42:e8:d9:95:2f:60:
54:4f:a2:f3:de:b8:90:84:f7:7f:9f:04:22:e3:b3:90:5c:91:
4d:71:0a:9f:e0:96:1b:70:66:05:2f:02:55:58:24:95:21:00:
62:74:bc:e5:5d:e5:a6:4c:c2:4d:15:46:8f:de:0d:36:5e:bf:
2d:d9:c3:81:2c:1c:cd:24:6e:71:3f:b3:ee:07:5d:74:07:76:
c3:03:80:4b:ae:0f:da:da:dd:3b:68:02:3d:02:cb:4c:4c:75:
6a:c2:f4:79:a1:7a:95:c1:a6:0a:62:cd:5f:f2:60:8b:9f:48:
c6:23:18:6e:7a:6e:4d:2f:ef:66:c8:3f:63:d6:a8:19:16:81:
58:b1:2e:71:0a:50:9c:3b:d9:2e:94:da:68:19:4c:ed:5a:6a:
16:bb:c6:05:ef:af:3d:5d:65:72:fa:2b:09:e6:18:8f:b5:91:
ee:d2:7e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:24 2025 by rpki-client