Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D9763409EA511F0A8F9BCEADAE4EC9C.roa
File: 9D9763409EA511F0A8F9BCEADAE4EC9C.roa (raw, json)
Hash identifier: Ht/oUYegRdg2B+WzUzhcJGL8gTJOIp6oqNtyxDx4sC4=
Subject key identifier: F3:C7:17:E5:BE:2C:F5:62:2B:32:6B:FD:09:47:20:B6:7A:19:68:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D9763409EA511F0A8F9BCEADAE4EC9C.roa
Signing time: Wed 01 Oct 2025 09:04:20 +0000
ROA not before: Wed 01 Oct 2025 09:04:15 +0000
ROA not after: Mon 10 Nov 2025 09:04:15 +0000
asID: 142032
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106977 (0x1a1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 1 09:04:15 2025 GMT
Not After : Nov 10 09:04:15 2025 GMT
Subject: CN=68dcee94-0bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:ea:00:46:4a:0b:c9:30:1f:cb:5f:0e:ae:
11:75:74:35:10:ec:d7:b1:4e:80:08:3a:d2:89:1a:
08:9c:96:26:4b:23:1e:f7:af:bb:0b:1a:f5:3c:3b:
8c:0c:d5:dc:7b:a5:ff:b4:da:e3:93:e2:49:fc:f8:
bb:b5:2f:b5:3e:89:02:55:16:9a:b2:13:64:87:f2:
90:f3:39:9d:95:c6:87:59:7b:2b:31:ae:f1:8b:38:
9d:fe:17:66:4c:be:4c:e1:df:6a:ec:93:c6:58:3e:
f4:b7:ea:ed:d0:fa:e1:91:87:77:d7:11:9a:1d:5b:
c6:63:0f:e3:2c:5e:3f:f6:39:f7:50:f3:7e:ac:b6:
a8:5a:25:3a:78:19:26:b8:6b:7b:58:98:33:53:4c:
a0:2f:5e:b9:38:2f:2a:3b:57:eb:78:40:58:6b:3d:
e1:ef:79:d6:91:23:40:a2:eb:9e:ea:4e:4f:5b:d1:
a3:8b:81:28:71:66:6b:bf:d1:44:c6:56:af:63:a2:
d9:79:9b:7e:ec:15:b6:13:3e:9c:66:04:db:bf:3a:
78:dc:d8:ae:c7:85:0d:4e:04:48:f7:57:7e:7b:d3:
06:99:f3:50:6b:5d:8e:7f:6c:07:af:41:95:1d:68:
49:62:5b:5a:09:3b:69:f4:73:ad:f1:12:e6:10:7a:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C7:17:E5:BE:2C:F5:62:2B:32:6B:FD:09:47:20:B6:7A:19:68:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D9763409EA511F0A8F9BCEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:bd:a3:35:cb:5f:0b:dd:f1:0f:d0:0f:ae:df:6e:5d:be:f6:
26:2f:38:5b:ad:b7:67:2d:ad:9e:a7:79:51:c4:65:cd:01:92:
3d:25:9c:f4:a5:5f:18:b9:08:ad:8e:ea:a5:36:d8:51:a5:83:
5f:54:a3:9a:61:9a:ae:71:9c:44:06:2b:34:43:f3:a5:40:d4:
4a:ea:c2:d7:f9:47:ef:6f:62:95:05:33:b8:fa:56:b5:d4:09:
43:81:c0:57:f2:87:42:44:97:1a:de:c7:01:35:6b:94:5c:6c:
b9:17:7e:af:a9:1d:03:a2:1b:ee:42:91:6c:f6:0b:36:56:a4:
d4:e0:17:e8:49:84:ab:48:19:79:77:68:2f:b1:a7:bc:1f:34:
9f:6b:5c:87:1f:9d:49:91:0f:b2:53:03:96:fd:40:3a:d8:2d:
c8:59:8a:e0:86:90:a6:6f:0c:b6:1b:c7:6b:31:18:27:70:76:
fe:d7:2f:2f:d8:a2:8f:02:e3:f0:f1:a0:29:f6:f0:a7:98:66:
34:c4:82:40:41:43:45:68:0b:e0:d0:cd:f8:a1:3a:12:73:b0:
ed:a5:3d:25:e2:1c:b8:98:9c:07:b1:6a:1a:d2:db:f1:d7:6f:
2c:7f:8e:78:ee:6b:d3:01:b4:b8:1d:c1:66:82:97:ed:8c:8e:
57:e7:b8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:02 2025 by rpki-client