Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF943992AA6E11F09CF7EC94DAE4EC9C.roa
File: DF943992AA6E11F09CF7EC94DAE4EC9C.roa (raw, json)
Hash identifier: vV5b5VvrsU3PdYv/OvtojBEP9QN7SXJqVEc4r3JmaMk=
Subject key identifier: D0:84:20:4B:8A:CE:D1:DA:7F:9D:7F:CF:B1:4A:8D:DE:74:2E:59:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF943992AA6E11F09CF7EC94DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 09:02:43 +0000
ROA not before: Thu 16 Oct 2025 09:02:38 +0000
ROA not after: Fri 23 Jan 2026 09:02:38 +0000
asID: 20473
IP address blocks: 154.81.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107481 (0x1a3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 09:02:38 2025 GMT
Not After : Jan 23 09:02:38 2026 GMT
Subject: CN=68f0b4b2-c133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:e6:e4:2f:8c:88:49:3e:7a:e4:ec:98:ee:
92:0c:2b:b4:0d:3f:87:5f:a2:40:83:50:cb:3c:4f:
92:18:b5:18:08:cc:c7:ce:04:3a:01:69:d2:33:b7:
25:fb:2f:ab:5e:ff:05:76:b5:42:72:11:78:16:20:
b3:4b:ac:62:dc:4d:72:fb:58:2a:ed:1b:ab:18:5e:
3c:00:f4:d7:9b:c4:56:ac:d9:c7:e3:06:a1:cb:f0:
5e:9d:05:9a:57:8a:85:22:5a:be:be:c7:30:9b:70:
55:63:72:fa:e5:da:31:3c:b1:6b:f9:0a:8e:75:fa:
7a:bd:23:79:f0:2d:0e:91:97:e2:70:26:e4:fa:08:
51:90:90:67:29:77:0f:8b:d0:36:31:ed:82:9e:05:
5b:08:b6:54:31:45:1f:f7:48:38:8e:13:78:b9:8a:
90:21:46:29:87:ff:22:2a:d9:30:e5:67:00:af:f5:
0a:da:e0:b9:c7:e8:46:23:10:c6:9d:e2:4d:0a:fc:
ed:09:52:0d:1a:f5:6b:5d:a1:6a:34:8f:7b:c1:77:
4e:b8:1d:b5:e6:49:83:86:1f:56:e3:47:fa:d6:c2:
da:dc:24:a1:31:4b:b3:07:8c:73:bb:d0:c4:71:5f:
5b:9a:82:cb:e8:40:7b:f3:c6:94:80:59:46:51:b9:
66:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:84:20:4B:8A:CE:D1:DA:7F:9D:7F:CF:B1:4A:8D:DE:74:2E:59:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF943992AA6E11F09CF7EC94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.156.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a7:ff:25:4f:11:d7:25:91:0c:9c:ee:59:e5:f4:a2:db:90:
bf:46:d3:b5:0d:93:45:69:b2:4e:24:b6:db:9e:38:c0:aa:86:
21:62:c2:c7:f2:8a:dd:85:22:ee:01:c1:f7:a1:ce:bc:6d:58:
6e:b9:11:32:f9:ad:55:b4:aa:78:ad:b7:3c:b7:66:ee:26:19:
4f:2c:53:a7:ab:c8:a6:62:60:19:05:12:6c:57:69:0e:6e:eb:
5c:71:a1:4b:4f:a3:19:41:5f:08:32:8e:4b:41:f3:ed:95:42:
ac:ed:ac:aa:79:89:ec:83:14:7f:24:90:9c:36:cd:31:a6:20:
37:cf:67:d2:64:8b:71:0f:ca:a1:3c:41:da:a5:2f:7b:49:98:
bb:f2:4d:6b:5f:86:cc:4a:b4:36:13:d9:7f:c5:d6:16:21:ae:
c9:7a:aa:a2:f6:2b:59:cc:45:a9:1d:d6:1a:d2:9d:05:f7:56:
c5:56:59:8f:ed:9a:cb:f4:75:48:a4:55:64:0c:e9:4c:5e:1f:
b1:3b:b0:b4:77:d2:20:f2:ba:66:8f:94:4a:8f:ff:43:3f:b6:
13:67:7c:6c:ef:18:4b:31:3d:52:55:29:b1:1b:ca:e3:e0:a0:
47:57:e5:dd:bf:34:67:55:46:9f:ae:58:41:12:af:8d:e6:b6:
03:0a:f2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:01 2025 by rpki-client