Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0E2016E90F011F0BE6BD49EDAE4EC9C.roa
File: D0E2016E90F011F0BE6BD49EDAE4EC9C.roa (raw, json)
Hash identifier: 9244Ol/BTr8iy8NbtDdR5uXQ8viCjmL80Q2/UbOFTm8=
Subject key identifier: 0B:1B:1C:15:6E:9B:C7:CE:6E:5C:8B:A2:C6:0E:E0:3B:60:82:4A:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0E2016E90F011F0BE6BD49EDAE4EC9C.roa
Signing time: Sat 13 Sep 2025 22:27:22 +0000
ROA not before: Sat 13 Sep 2025 22:27:17 +0000
ROA not after: Sun 19 Oct 2025 22:27:17 +0000
asID: 6079
IP address blocks: 154.194.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Oct 2025 22:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106373 (0x19f85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 13 22:27:17 2025 GMT
Not After : Oct 19 22:27:17 2025 GMT
Subject: CN=68c5efca-3513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:16:8b:35:01:74:15:ca:e8:ec:a0:5a:8a:
30:90:08:2a:d5:d0:58:d8:85:8f:9c:a9:a3:fc:7f:
bf:0e:6d:ba:8b:eb:c7:c4:e4:c7:91:b5:7f:8d:59:
38:61:b1:8a:30:38:7f:86:01:2d:d2:0b:d4:95:97:
a4:35:67:61:ac:6d:c2:21:09:18:2b:79:74:13:9a:
b5:59:e0:d3:8c:96:a9:c5:28:f3:ea:68:8d:0b:e9:
ec:64:89:79:58:86:cf:5a:f1:f1:7a:6f:f5:75:c2:
8d:c5:c4:3d:18:48:34:2f:e5:45:65:24:a2:f0:6f:
b6:00:de:b6:99:b8:44:a8:15:26:1e:6f:87:95:2b:
ba:34:4c:a1:91:75:35:ac:69:9a:d4:8d:94:63:52:
32:cb:a7:0c:0e:3e:a8:7f:9f:b0:b4:c7:52:79:ea:
c1:4a:bf:06:7f:59:b3:74:1c:16:c6:37:af:8b:46:
26:74:0b:76:59:3e:d6:3e:5b:ef:df:93:31:64:5e:
92:7f:c7:7b:c8:ec:2c:55:e6:a3:32:fd:db:c1:88:
d4:e9:9d:35:1a:87:08:f7:67:51:ea:00:e7:ae:64:
c5:58:63:39:0b:b9:d6:05:42:b8:90:ab:6a:1d:88:
9d:69:ce:e2:49:12:29:7e:7f:02:a5:8e:bf:7a:cf:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:1C:15:6E:9B:C7:CE:6E:5C:8B:A2:C6:0E:E0:3B:60:82:4A:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0E2016E90F011F0BE6BD49EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.236.0/22
Signature Algorithm: sha256WithRSAEncryption
af:89:49:27:90:ce:dd:c0:2a:eb:0e:ae:fc:24:00:cf:56:6a:
67:e4:8e:1f:f5:ba:a8:e8:f0:08:12:fa:74:5a:01:8f:99:28:
ea:a4:a1:05:52:e5:ff:4d:04:3f:8f:61:b0:72:31:88:84:1f:
51:67:20:87:ca:e2:7e:0f:61:71:4e:ce:6f:ca:98:e0:bc:55:
74:95:05:5a:ff:5a:17:a6:a1:8b:7d:d3:a0:72:a9:93:fc:06:
58:22:70:eb:a6:b0:5e:a5:fe:ca:0f:40:f4:75:f3:7f:0b:f2:
2f:37:07:e3:07:c6:4b:43:ea:98:3f:88:4d:75:81:77:d5:53:
01:42:e2:71:87:b3:66:98:d1:78:2f:1e:24:60:4b:59:9c:6c:
45:e3:48:e3:7f:f5:fa:20:f9:3d:77:f5:9a:f3:92:b0:77:c0:
51:16:a7:96:30:49:aa:60:4a:c9:f5:c3:30:39:e9:78:6c:54:
31:6d:6b:a1:a9:ad:f7:2f:1a:3f:2e:5a:53:84:20:c4:b8:fa:
be:4c:f7:39:80:a8:1d:62:e4:ff:50:ee:a2:23:97:15:76:62:
e7:80:2c:7a:10:65:24:8b:db:df:5c:91:6a:e9:4f:b0:e6:8c:
85:6f:4d:8f:df:ae:18:9a:16:80:f8:1a:19:92:75:35:73:f8:
6f:ff:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:34 2025 by rpki-client