Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1EA2C4A9ABB11F0B2EAA093DAE4EC9C.roa
File: F1EA2C4A9ABB11F0B2EAA093DAE4EC9C.roa (raw, json)
Hash identifier: ARz6ktKqFFFXPYw9d6EoTmfQAmp97g4SEK8ejUgmyiU=
Subject key identifier: B9:50:D4:64:02:28:15:14:45:48:0C:F3:78:E7:61:D1:F4:D4:C8:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A11F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1EA2C4A9ABB11F0B2EAA093DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 09:34:06 +0000
ROA not before: Fri 26 Sep 2025 09:34:01 +0000
ROA not after: Mon 03 Nov 2025 09:34:01 +0000
asID: 18779
IP address blocks: 154.203.51.0/24 maxlen: 24
154.203.52.0/22 maxlen: 24
154.203.56.0/22 maxlen: 24
154.203.60.0/23 maxlen: 24
154.203.62.0/24 maxlen: 24
154.206.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106783 (0x1a11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 09:34:01 2025 GMT
Not After : Nov 3 09:34:01 2025 GMT
Subject: CN=68d65e0e-6650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:af:9e:c3:1d:c4:ad:eb:2f:27:06:44:37:
b2:b7:fd:2e:ab:9f:0c:17:e4:fb:5b:1a:71:35:d7:
2d:7d:38:1a:e8:2f:23:05:f0:e3:46:b8:da:5d:da:
a5:e1:aa:90:f5:8b:f3:e5:ca:a3:d4:1c:86:39:78:
a2:57:a8:02:10:d3:9c:19:91:b5:21:93:13:d0:92:
7e:a9:09:f9:b9:d5:d1:71:a0:d7:2c:23:d3:d8:a1:
68:d4:c3:ba:11:27:ce:e0:7c:51:12:98:87:d0:87:
cc:2a:71:df:02:4e:ef:9e:9f:0d:bb:73:df:13:11:
64:84:49:cc:07:05:98:c1:52:ed:7a:7c:3d:b2:1f:
81:ca:cb:6d:75:f0:13:f6:59:10:3e:3a:66:86:41:
ea:bf:f3:97:1d:f7:0b:38:e8:0f:0a:cc:71:5a:1b:
9a:0c:6a:79:3e:0d:4d:7f:f6:51:23:f2:5d:0d:c5:
90:52:35:4e:e6:c7:b0:b6:3d:04:f4:71:28:77:b6:
ea:15:e5:1e:c3:af:86:29:ff:0f:14:76:f9:6a:9b:
cc:aa:d9:06:d5:2e:83:b9:c2:a5:f3:18:e4:3d:ef:
9d:be:91:11:18:1c:f5:50:5c:0f:e9:d2:b6:30:44:
88:4b:6d:e3:eb:af:d1:6a:35:27:37:c9:d6:39:c9:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:50:D4:64:02:28:15:14:45:48:0C:F3:78:E7:61:D1:F4:D4:C8:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1EA2C4A9ABB11F0B2EAA093DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.51.0-154.203.62.255
154.206.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:cf:c0:d9:05:cd:5f:d7:79:a4:17:81:2b:b8:41:c6:51:5d:
e9:28:2c:67:85:54:92:30:78:8d:da:0c:bc:27:c9:4a:d0:b2:
09:5d:aa:13:91:cd:95:a2:ba:86:e9:f5:5c:45:b1:e0:dd:37:
fe:5d:5e:d2:02:71:a7:8b:7c:f7:1a:80:a8:2c:c0:a6:86:6f:
58:67:3c:45:87:62:8b:8b:47:e3:ea:25:c8:f3:7f:0f:4b:46:
36:f7:7a:5f:bc:35:0c:03:77:19:8e:2d:54:41:be:fb:f6:54:
97:ac:1f:28:93:83:a4:f3:f8:e1:10:87:cb:00:b5:10:40:95:
63:92:ae:9e:c3:72:b5:d2:71:b4:dc:5f:e9:6d:b7:36:aa:d0:
83:b4:b1:7f:81:7b:5a:9a:50:56:06:c5:3b:54:eb:48:d3:d6:
28:62:b2:51:2c:b1:29:93:c0:a6:ea:00:77:e2:da:0c:71:7b:
dd:1c:95:04:ea:3d:79:1a:a8:37:1c:7f:59:ff:c3:6a:0e:2d:
48:8e:c4:b6:65:7a:2c:f2:a7:33:e2:88:8b:5f:ff:cc:1c:8c:
0b:35:82:21:d3:f5:9d:aa:08:f9:db:76:b6:83:a0:96:b6:ba:
35:f3:00:dd:90:65:51:f2:6f:c0:94:c2:22:f3:66:19:34:90:
c6:49:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:49 2025 by rpki-client