Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97169EF6998B11F08FCB30D0DAE4EC9C.roa
File: 97169EF6998B11F08FCB30D0DAE4EC9C.roa (raw, json)
Hash identifier: FXo6rfLkdKT9qCrkGG5BUbkMJN4CTiW1M61fD7Ybq7U=
Subject key identifier: 7F:43:29:B2:35:85:F9:92:56:08:78:99:67:B3:86:D3:E1:F0:64:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97169EF6998B11F08FCB30D0DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 21:15:27 +0000
ROA not before: Wed 24 Sep 2025 21:15:21 +0000
ROA not after: Tue 21 Oct 2025 21:15:21 +0000
asID: 54801
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106698 (0x1a0ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 21:15:21 2025 GMT
Not After : Oct 21 21:15:21 2025 GMT
Subject: CN=68d45f6e-dbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:84:06:e4:85:cb:23:8c:9a:c4:f8:71:81:
5f:37:5a:61:a6:27:ec:11:7c:ee:30:66:01:e2:bf:
a3:34:82:98:87:44:6a:ef:4a:20:c6:eb:53:e0:05:
27:18:4d:07:ec:bf:0b:ec:2e:b6:ea:2d:24:08:c3:
0f:a7:a6:92:7e:8b:25:d5:d8:5b:17:61:cd:f2:ff:
37:75:07:c6:29:8a:a1:c2:10:33:c5:f9:bf:db:a9:
13:5e:31:0f:e9:d1:0d:0c:91:74:7e:05:1b:27:1d:
59:4f:c6:63:6a:8a:69:c0:3e:d2:25:e2:39:09:08:
98:82:7f:0a:55:13:f9:db:7e:55:9e:dc:8e:b6:dc:
08:07:d3:f6:e2:ad:f8:75:a9:48:c7:34:39:34:e3:
a4:04:de:79:c7:92:2c:82:dc:b8:5e:5e:2a:46:18:
a7:76:d5:6b:ac:24:80:83:e3:ee:61:0c:63:85:7b:
1f:f6:ed:93:bc:70:00:4f:fb:8d:13:47:cf:5c:13:
6a:c6:e6:f0:2d:bc:ba:2a:40:01:6a:89:22:10:37:
e3:5d:3a:fe:9e:b6:fd:75:49:f8:a9:ed:e7:cb:d6:
de:6c:f9:97:92:d2:b0:96:f6:e2:95:f4:5a:2e:a8:
ba:be:96:9d:74:1a:89:6d:3e:9a:08:a2:f2:e9:23:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:43:29:B2:35:85:F9:92:56:08:78:99:67:B3:86:D3:E1:F0:64:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97169EF6998B11F08FCB30D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
84:e0:6b:97:51:ad:04:38:b1:c3:09:49:97:c4:c7:54:fc:9b:
44:5e:d9:1b:0f:f1:d2:4f:d1:85:7c:07:32:7b:ed:0f:9f:cc:
da:d6:ba:55:dd:ab:d2:f8:38:c5:ca:ba:64:7e:fe:4b:df:0b:
a2:89:13:98:e2:7a:7d:56:ca:37:00:10:65:ef:0a:99:f2:60:
30:02:80:49:20:cc:e9:af:bd:81:7c:0b:03:f2:8b:7a:a5:0b:
d4:79:ab:1b:07:c3:ce:50:12:71:ed:9f:17:05:6f:e0:04:93:
33:95:24:93:ae:f6:3b:d8:74:14:b2:c6:f0:4e:61:1d:2f:f0:
ee:19:1f:a7:cd:85:10:51:d3:e8:c4:f9:d6:94:1e:eb:39:d5:
be:87:19:3c:c4:cb:70:33:7c:30:ae:9e:c0:36:b0:37:4b:53:
21:ab:96:09:42:5a:af:16:17:94:21:08:4b:f7:c4:2b:7a:29:
64:13:04:4d:f3:47:88:84:5f:7d:14:c5:62:ee:40:52:b1:33:
c3:c0:f7:59:96:e5:1f:a8:36:f1:9a:ef:f2:6d:7f:ee:77:64:
e3:56:a7:a3:48:77:08:c8:38:b0:4a:8a:35:a4:c4:f3:00:26:
3c:16:d7:c2:09:ed:f5:80:53:b8:27:88:f9:d2:dd:ad:19:98:
67:72:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:26 2025 by rpki-client