Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B17DFBECA81611F08F0FBBA3DAE4EC9C.roa
File: B17DFBECA81611F08F0FBBA3DAE4EC9C.roa (raw, json)
Hash identifier: pZo92Z9+ZKL8kq4DWvXmDbfuae5iiD6gPAaZUQ09/sU=
Subject key identifier: 2F:B1:4C:E8:BF:AA:D2:9D:27:65:BE:B2:4F:53:18:70:5A:35:72:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A360
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B17DFBECA81611F08F0FBBA3DAE4EC9C.roa
Signing time: Mon 13 Oct 2025 09:26:27 +0000
ROA not before: Mon 13 Oct 2025 09:26:22 +0000
ROA not after: Thu 20 Nov 2025 09:26:22 +0000
asID: 57043
IP address blocks: 154.83.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107360 (0x1a360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 13 09:26:22 2025 GMT
Not After : Nov 20 09:26:22 2025 GMT
Subject: CN=68ecc5c3-872e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:c9:5f:fc:3a:76:93:6e:b6:40:f2:0a:ea:
7e:fc:d5:56:5c:59:cc:68:45:70:72:f8:84:24:b3:
0d:b8:1f:8d:66:c6:a5:b6:38:a7:91:dc:27:87:e5:
03:06:70:15:44:63:3a:fe:4d:3d:ac:c0:c5:af:7e:
1b:90:48:17:37:6b:de:d8:eb:0d:e7:96:1c:54:22:
e0:51:da:ce:b3:db:e7:89:5a:78:5e:89:4c:2b:e1:
4b:ff:db:09:98:4f:ea:49:93:d7:43:40:1b:a8:4b:
0b:89:61:b5:5d:e1:03:34:86:e0:9e:bc:1c:c2:6e:
72:e9:a3:18:e2:e7:94:f9:08:31:66:ee:8c:8a:8b:
fd:9a:9c:8b:76:79:eb:aa:d9:13:24:66:c8:0d:83:
ab:fd:c1:b5:cf:4c:98:f7:1c:06:44:d2:a6:af:a5:
fe:f5:ac:d5:c2:13:30:98:70:1f:08:69:0d:26:66:
3d:9e:68:20:2c:fe:58:a3:17:0e:9d:2c:21:20:9e:
62:72:08:85:d2:ee:bc:7b:67:d9:b3:ee:21:c9:60:
d5:c0:07:7d:68:29:8f:79:6d:70:f5:65:54:89:65:
b0:19:0b:b5:f7:f2:f3:2d:8d:67:02:c0:10:cb:14:
d5:76:c1:44:21:c5:b8:d7:f3:03:2a:e8:90:9a:67:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:4C:E8:BF:AA:D2:9D:27:65:BE:B2:4F:53:18:70:5A:35:72:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B17DFBECA81611F08F0FBBA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.144.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ac:fe:2a:85:63:70:1f:db:a5:b3:3d:a7:a9:88:26:ba:a6:
50:49:27:54:9e:ed:8a:f8:36:de:6d:d7:bf:f8:f3:ec:70:84:
0e:27:c8:ae:6e:2a:f2:5a:8b:17:40:20:65:bc:59:0f:ac:c8:
7f:a3:4b:c9:ac:5c:4a:9a:f2:ed:5a:f4:56:04:02:6f:15:cc:
54:a1:c1:3e:5f:50:a7:ed:9f:24:93:81:fe:79:10:4d:8d:ca:
15:4e:66:0f:85:59:21:30:3d:31:0b:71:b5:30:ec:f6:9e:59:
26:0c:26:28:bb:12:f0:e4:c6:1a:c9:69:ef:98:c0:a3:74:93:
0b:7b:3c:06:47:aa:53:86:1f:aa:13:6c:80:80:5b:df:4f:03:
20:67:bf:20:d9:7c:73:3f:e8:71:ca:9f:32:ae:96:56:47:ff:
7a:7f:dc:7d:ed:fc:24:e1:c3:09:e9:66:f0:62:aa:9e:3e:04:
6d:e8:7d:26:82:09:9a:57:2f:28:ac:0b:bf:04:b2:38:9c:70:
17:cd:a6:46:0f:28:50:d7:c1:75:68:27:c8:e0:67:01:8a:bc:
ba:d5:44:d9:bd:0f:a7:3e:4f:ba:26:53:e4:37:c5:1b:6f:b1:
68:ab:e9:4d:d3:f5:c9:70:fb:38:bf:f3:3b:fd:14:5b:aa:90:
ee:da:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:04 2025 by rpki-client