Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF395CEAAA6A11F0B663F979DAE4EC9C.roa
File: AF395CEAAA6A11F0B663F979DAE4EC9C.roa (raw, json)
Hash identifier: hl5jlvACGFg2q+jZZqsAxPco84B2TE1bspwiCq5+dMc=
Subject key identifier: 4A:F5:3C:B8:5A:C0:0C:F4:49:9F:AE:84:C0:7A:20:0B:CF:79:55:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF395CEAAA6A11F0B663F979DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 08:32:43 +0000
ROA not before: Thu 16 Oct 2025 08:32:33 +0000
ROA not after: Fri 25 Sep 2026 08:32:33 +0000
asID: 142286
IP address blocks: 154.89.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107470 (0x1a3ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 08:32:33 2025 GMT
Not After : Sep 25 08:32:33 2026 GMT
Subject: CN=68f0adab-09a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:a7:34:86:ff:3b:a5:af:bd:37:8d:00:aa:
4e:56:9a:70:17:43:e1:55:89:c2:1b:15:79:3e:12:
bc:6b:5a:13:3b:79:1c:ac:0a:09:e7:67:58:fe:a5:
49:02:3d:ae:1f:5a:fd:95:7b:c6:32:1d:b5:82:7b:
6f:a3:4b:90:37:51:9c:31:ff:11:87:1e:90:75:01:
64:23:3d:1a:ea:49:4e:73:5f:f4:34:e2:1d:3c:aa:
b9:6f:2f:f3:a1:b0:e0:25:a0:d9:68:40:db:46:81:
dc:6f:c4:1c:60:b8:eb:70:c1:60:f8:68:99:bc:54:
31:aa:2a:25:96:0a:51:05:01:ed:3c:07:44:6f:8a:
b5:49:9e:f6:db:d5:5b:3a:88:41:d2:c1:1c:7e:9d:
d7:3e:b1:75:79:bd:07:82:da:d1:02:dd:a9:c4:ac:
42:49:55:06:b9:ca:75:63:6c:5a:9b:c4:3b:aa:4b:
2e:42:1c:6f:da:46:3f:5f:7e:9b:9b:f0:56:9a:8b:
ac:eb:26:fc:40:b6:ae:6f:54:bb:9b:d9:2b:65:38:
d8:fc:4f:71:07:89:58:1c:e2:03:75:26:22:a6:b2:
75:d4:10:1d:44:d6:b1:c3:07:2c:e7:86:f3:e0:d9:
ad:1e:89:c5:56:42:2c:04:73:66:d8:95:7c:1c:21:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F5:3C:B8:5A:C0:0C:F4:49:9F:AE:84:C0:7A:20:0B:CF:79:55:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF395CEAAA6A11F0B663F979DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:60:e6:4e:ef:cd:89:1c:1d:49:eb:c7:33:31:2a:ea:87:bc:
64:cf:cd:e6:92:e4:29:91:6b:c3:66:87:9c:92:e6:51:13:f4:
51:29:63:f8:a3:d9:53:6b:db:e1:a1:32:44:74:af:d4:49:31:
55:5c:ba:97:a9:e4:97:98:5e:54:ed:57:db:d1:f8:ef:0a:ab:
40:6d:ef:80:f0:4c:1f:e9:1c:2c:a7:2b:c5:43:32:c6:96:1d:
94:5b:f4:b6:c0:2f:8e:15:22:81:7d:01:fe:84:d5:6e:14:b4:
cf:c9:e3:64:f6:05:b7:b7:24:fa:f5:62:e4:3c:d2:bd:13:40:
a1:d7:65:c1:28:a1:53:2e:28:58:77:df:69:94:9c:0b:c7:9a:
02:52:57:96:f6:eb:89:75:71:98:32:0f:a3:48:19:29:bd:27:
8b:7b:ae:13:94:42:32:a8:15:37:39:be:58:63:8d:79:2e:8b:
6c:72:1e:80:4f:9f:4e:59:30:4a:58:30:8a:5c:3a:67:ad:a8:
a8:6a:b6:7f:6e:6e:d7:90:86:6f:8d:e2:9e:f5:67:21:ad:e5:
6b:36:32:11:e2:d8:e8:8f:d6:33:84:7c:d5:e2:b3:82:af:ed:
6a:6c:17:71:9c:42:9e:97:ce:99:62:be:6b:c4:07:62:a1:d2:
5a:4a:57:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:27 2025 by rpki-client