Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD8237769D7C11F0AC262ED9DAE4EC9C.roa
File: CD8237769D7C11F0AC262ED9DAE4EC9C.roa (raw, json)
Hash identifier: dX6G+kQiyxhfga9F8Q2ACSYXKgSkcGUMZUGAmBIdlQ4=
Subject key identifier: 19:E9:27:9A:24:03:ED:C7:7F:CA:FB:CF:1D:85:10:D4:26:50:CD:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A193
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD8237769D7C11F0AC262ED9DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 21:39:40 +0000
ROA not before: Mon 29 Sep 2025 21:39:35 +0000
ROA not after: Tue 04 Nov 2025 21:39:35 +0000
asID: 394432
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106899 (0x1a193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 21:39:35 2025 GMT
Not After : Nov 4 21:39:35 2025 GMT
Subject: CN=68dafc9c-a086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:3a:0d:a6:1e:db:8c:4b:7c:75:90:a9:a8:
d6:63:27:44:a1:fb:18:2b:56:f5:bb:a4:6d:b3:c5:
54:77:af:02:97:4f:d2:fc:8d:32:30:45:3d:71:2f:
10:34:91:04:fc:8b:97:60:4d:0f:d7:3e:7c:ff:2f:
a4:84:61:1f:f4:c7:99:76:e5:71:0a:4e:97:d4:fb:
8c:fc:43:4a:67:15:71:3f:da:54:e0:9a:c1:68:16:
5d:15:04:4b:37:bf:5a:c7:42:e7:60:57:d0:c4:35:
e8:62:84:e1:76:61:25:4b:04:a0:5b:d6:46:15:75:
0a:34:fb:fd:00:67:7c:9f:ef:29:ad:0d:de:31:02:
ef:c6:9f:10:51:1d:f9:b4:7d:f7:87:d1:72:58:87:
f4:78:8b:cf:19:a4:eb:eb:67:03:ab:c8:7e:c3:f9:
22:aa:58:4f:b6:2d:1b:1d:9b:31:21:21:c7:0e:4e:
e7:83:0c:dc:75:09:4d:f7:1d:46:1f:29:25:d9:06:
fa:56:1a:64:02:85:c5:b2:a6:ac:7f:d2:d6:99:80:
a8:6c:19:6f:db:45:d5:12:7b:ab:2f:14:2c:b5:79:
23:d3:53:85:29:74:83:b1:0d:a4:7c:63:89:1f:45:
41:41:57:f0:b7:0c:27:b6:84:d1:36:ba:5c:24:89:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E9:27:9A:24:03:ED:C7:7F:CA:FB:CF:1D:85:10:D4:26:50:CD:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD8237769D7C11F0AC262ED9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:bb:16:5a:c9:35:c0:22:35:f6:02:b3:26:0f:34:1e:f0:a0:
d2:f6:53:9c:57:8a:45:34:d5:ce:07:bf:1a:0e:85:28:dd:73:
28:c0:c8:31:00:bc:eb:ac:5b:b4:ff:72:33:52:4b:46:74:3f:
89:9f:39:e1:ab:50:69:96:cc:8c:28:01:4a:8b:c2:8a:09:24:
92:5d:a0:bf:3c:6c:f8:ee:69:92:5f:b8:69:f5:32:7f:89:d9:
79:90:b9:d2:75:3d:ba:f9:c1:24:2c:02:1f:3f:f6:e7:75:2d:
92:d2:12:85:b4:0c:bf:39:94:54:e9:32:44:f5:20:72:95:03:
99:8a:b3:3a:ed:a1:22:28:52:fb:e6:5b:e4:e4:99:6f:59:fa:
c5:59:ce:56:72:6e:11:a6:72:64:d1:12:64:1d:34:d5:cb:cb:
38:f6:cc:29:0b:98:94:b8:5c:38:d7:0e:be:06:db:ba:b7:11:
3c:86:a3:c8:de:ec:29:3a:8c:0e:ec:6c:a2:29:d7:e0:7b:1a:
f3:10:c1:8d:1a:3e:c9:4b:dc:6b:65:e5:ea:60:88:43:e1:b2:
f5:fb:3c:88:3c:31:9d:fd:8e:d8:27:d8:a4:b5:77:c7:51:0a:
80:5f:95:a3:ef:82:bb:30:40:88:67:42:b7:c6:15:1c:31:9b:
64:f5:22:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:27 2025 by rpki-client