Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9A5BB1CAA7911F092A45ADADAE4EC9C.roa
File: E9A5BB1CAA7911F092A45ADADAE4EC9C.roa (raw, json)
Hash identifier: 6rwKThp81gOOnuaYEc2rlpJ6UflkBrX2fDRwzy+HEBo=
Subject key identifier: 4D:DF:02:19:95:96:20:4E:72:05:A5:0A:BD:FB:01:D6:F1:18:4D:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9A5BB1CAA7911F092A45ADADAE4EC9C.roa
Signing time: Thu 16 Oct 2025 10:21:44 +0000
ROA not before: Thu 16 Oct 2025 10:21:39 +0000
ROA not after: Tue 18 Nov 2025 10:21:39 +0000
asID: 135983
IP address blocks: 154.200.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107493 (0x1a3e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 10:21:39 2025 GMT
Not After : Nov 18 10:21:39 2025 GMT
Subject: CN=68f0c738-e237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:7b:fe:2d:68:20:ee:41:22:c0:9e:4c:ec:
86:0f:5a:16:4e:29:95:e8:d6:4b:e6:b4:63:e6:e6:
c4:93:20:15:a2:b0:4f:39:28:40:85:fa:30:b4:3d:
38:b6:f7:39:eb:a1:7e:37:b8:70:df:a4:c4:a1:a3:
56:66:b6:9a:2a:0a:6b:5a:29:d7:6d:37:6c:50:37:
44:53:c8:6d:5f:be:92:1f:47:cf:69:4f:fe:12:55:
43:52:d1:4b:d5:85:9b:ad:15:3a:6c:49:39:38:96:
78:de:9e:a9:05:4a:94:f2:fa:63:2a:5d:b6:0c:7a:
d8:5d:e0:8d:ba:4b:3b:e0:69:50:fa:49:1b:30:8c:
6a:54:9a:c0:41:e4:b9:81:91:c1:a2:f2:7d:c1:e5:
7c:d3:1b:11:c5:06:ba:94:b9:c6:54:0f:20:5f:ba:
24:90:6e:c8:7c:0e:5a:e4:cd:81:c8:84:63:75:8f:
6e:c9:f9:9c:f7:43:f5:f6:d0:f9:5b:66:94:34:58:
77:d5:0f:0c:bc:7a:4a:a4:43:e7:1a:2c:8e:0d:e5:
b4:ea:d8:ae:2d:81:4c:26:76:9a:5e:13:e1:e5:17:
35:e7:b0:e2:02:75:92:e4:9e:37:c6:0d:3c:2b:3d:
f0:15:4d:40:bc:ba:a9:f7:70:29:9f:36:7f:18:87:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DF:02:19:95:96:20:4E:72:05:A5:0A:BD:FB:01:D6:F1:18:4D:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9A5BB1CAA7911F092A45ADADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.30.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:1d:30:60:49:e5:e3:0c:4a:26:6b:9b:3e:9e:12:1e:e0:b9:
52:dc:91:76:fb:16:c9:30:b6:36:9a:64:d2:04:d0:d5:be:e1:
61:18:68:28:75:f0:4f:e7:82:8d:7e:a4:13:52:2c:46:b4:e0:
73:84:c5:d6:f3:38:f8:6f:fe:47:95:8d:52:e6:e2:7e:9c:ea:
7c:e1:a8:e6:ef:c4:b9:73:16:85:38:93:a0:65:40:6a:ef:a1:
a8:f0:24:3a:76:dc:09:3f:ac:05:35:59:1b:ab:64:a7:60:8f:
60:ea:f8:78:3e:68:c6:86:69:a9:3a:74:3f:1e:14:71:5e:20:
48:33:bb:d1:40:0e:8b:37:b6:3b:fa:ec:9e:b7:6e:f0:4d:f9:
ac:c9:a8:28:c5:5c:7e:64:cf:39:8e:99:05:f8:bf:b3:7b:96:
a2:48:c1:70:74:08:d6:db:fc:0f:84:63:d6:ea:93:78:2c:2c:
7d:ee:c6:6d:bd:81:99:73:03:0c:3b:d0:01:13:2a:57:53:a4:
59:81:21:b2:61:cb:57:bb:8a:77:7e:3f:f4:de:35:38:14:98:
87:96:0f:a3:c5:84:46:7e:99:63:6e:be:8a:fe:49:9d:a0:a4:
62:08:de:9e:e2:f4:b0:d5:f2:2d:39:c9:da:88:89:7d:b7:71:
9f:86:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:21 2025 by rpki-client