Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F10DCAB29E9311F0A3779B7CDAE4EC9C.roa
File: F10DCAB29E9311F0A3779B7CDAE4EC9C.roa (raw, json)
Hash identifier: TOwDkq3RFpbLtWJg6p5ArFtmUK1JaTO3SN4IONSMLtk=
Subject key identifier: C8:61:AF:9B:57:7D:91:A9:17:C2:DF:B8:57:B8:C4:C4:6A:80:03:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F10DCAB29E9311F0A3779B7CDAE4EC9C.roa
Signing time: Wed 01 Oct 2025 06:57:49 +0000
ROA not before: Wed 01 Oct 2025 06:57:44 +0000
ROA not after: Wed 06 May 2026 06:57:44 +0000
asID: 140227
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106973 (0x1a1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 1 06:57:44 2025 GMT
Not After : May 6 06:57:44 2026 GMT
Subject: CN=68dcd0ed-0181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:ce:69:6e:81:24:80:17:6e:f1:0b:5a:04:
66:80:5d:8f:fe:b8:61:e3:e9:da:c0:e5:75:ff:3b:
86:ce:2e:f5:e4:ab:3a:9f:cf:ba:dd:58:24:9d:ea:
5d:89:19:35:3d:6d:0c:9f:01:e6:20:ee:27:ef:08:
4f:96:eb:2e:c1:8d:f5:8e:11:9b:f0:66:8b:81:f2:
d2:f0:2c:51:e8:be:f8:4a:84:fb:0f:51:66:72:c0:
01:d2:e0:c4:ef:0b:30:b6:d9:02:37:5f:07:a7:83:
1d:92:5d:af:f5:cb:21:22:93:f4:63:c9:10:0e:d0:
76:e8:9a:52:16:e8:48:01:10:dc:34:52:7d:e4:0b:
e9:80:33:dc:21:50:c2:e6:88:2e:ca:ca:ad:31:22:
d9:73:17:0b:f7:09:7a:71:9e:b3:ec:4e:50:1b:b9:
f4:85:4c:3c:61:70:0b:b5:85:0f:98:6a:7e:4a:37:
d1:04:c6:c1:6c:09:f8:a6:5e:c1:c2:f7:dc:43:2e:
c1:70:8a:70:cb:1f:47:6f:f3:c7:d4:de:a6:b0:06:
cd:76:b2:21:69:b9:6d:c7:3b:db:57:d8:9b:78:5e:
1b:64:47:77:14:a7:57:4d:d0:3f:4e:1f:7e:13:a7:
38:84:c7:1e:cf:c8:42:f3:f8:fd:6b:a5:88:18:f9:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:61:AF:9B:57:7D:91:A9:17:C2:DF:B8:57:B8:C4:C4:6A:80:03:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F10DCAB29E9311F0A3779B7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:2f:a9:8b:27:06:2a:b1:3c:56:e8:f1:0d:e2:24:06:5b:eb:
fc:b8:20:1a:bf:dd:a3:78:6e:f1:99:c9:dd:b8:c9:8e:37:3e:
63:cb:be:ac:bd:e1:0d:6c:de:62:73:2b:c2:37:f7:07:5f:5a:
26:cf:73:d8:00:49:ac:0e:17:e6:47:08:cd:dc:4a:f5:4b:04:
91:c5:e3:bb:12:ec:b5:20:a2:36:f4:70:e5:06:47:93:09:00:
d3:bf:06:6f:da:e1:10:aa:8c:8d:1f:05:fd:1d:5b:36:4f:fe:
60:5b:f4:f8:59:ad:1a:0c:63:f4:fc:42:21:01:88:38:82:ce:
72:f0:00:4c:43:90:81:59:b4:34:17:72:fd:00:03:ae:2e:4f:
35:11:08:9f:23:31:70:7f:ca:50:80:d1:99:9a:5c:ac:d2:46:
0b:d6:e8:33:01:e8:3f:74:fc:50:37:19:20:17:d4:75:e9:a7:
3d:43:1d:ae:58:98:a9:51:ef:35:50:ac:66:f3:7f:dc:f7:c3:
25:f7:af:ae:75:e0:cb:e1:19:3c:7e:17:bf:ea:a8:23:f4:9c:
04:cc:2d:45:74:90:f2:e5:5c:5c:3c:15:d4:d8:cd:7f:ff:7c:
c8:4f:56:6b:42:38:f6:a4:ce:43:b7:32:9d:82:da:47:57:af:
0e:0e:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:51 2025 by rpki-client