Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2AB336EA44711F0B8ACFDF3DAE4EC9C.roa
File: F2AB336EA44711F0B8ACFDF3DAE4EC9C.roa (raw, json)
Hash identifier: GuOVrhqs8UmARBBXib5dBZsaQRmNU3t9xCrhp7SS/eg=
Subject key identifier: 6E:4B:50:A2:B5:27:F0:5C:43:92:15:A8:82:30:59:12:C4:AF:4D:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2AB336EA44711F0B8ACFDF3DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 13:08:57 +0000
ROA not before: Wed 08 Oct 2025 13:08:53 +0000
ROA not after: Thu 27 Nov 2025 13:08:53 +0000
asID: 401696
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107223 (0x1a2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 13:08:53 2025 GMT
Not After : Nov 27 13:08:53 2025 GMT
Subject: CN=68e66269-00ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:06:73:06:c8:b1:95:92:0a:79:ec:07:6a:
1a:c0:db:4d:c7:2a:38:39:f6:e7:5e:cf:de:7e:0d:
1e:aa:97:9f:55:90:7e:b7:15:13:b7:f6:ac:b5:d8:
dc:fb:27:76:70:13:13:09:03:fd:2a:1f:e9:6e:52:
a7:75:c3:13:93:ea:81:99:4d:79:5e:d6:ea:58:5c:
40:49:1a:ba:76:d9:4a:08:11:8d:bd:cc:57:52:52:
94:f7:0f:aa:26:8e:1d:e2:9c:d5:17:09:69:a2:1c:
38:e2:72:e5:53:1b:74:ec:39:83:44:19:37:64:e0:
cd:53:a4:05:d5:c3:cd:75:79:08:50:d4:ca:c6:61:
a3:59:e8:0c:bb:2e:0b:a9:63:aa:90:ce:92:d7:b9:
02:f3:e5:be:bd:73:69:74:37:91:1d:2f:48:a7:a9:
40:13:62:77:00:a5:0e:95:48:aa:23:37:7e:b6:5f:
18:9b:43:d9:f2:4a:66:c7:80:8f:b7:ef:58:d5:f4:
e7:cd:e7:6b:44:ab:c1:7b:bb:c7:f9:38:9d:93:7c:
43:8a:52:f6:50:92:84:c9:2e:77:0c:36:a3:f1:7b:
14:37:f7:19:06:6d:d7:55:03:3d:5e:72:77:20:5c:
dd:10:05:7c:d3:b6:ee:a3:36:d2:dc:43:64:eb:14:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4B:50:A2:B5:27:F0:5C:43:92:15:A8:82:30:59:12:C4:AF:4D:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2AB336EA44711F0B8ACFDF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
61:c9:fc:1c:84:ea:29:a9:90:ee:65:80:60:a7:fe:18:24:50:
71:da:06:91:77:c8:18:1b:e4:b7:31:79:ae:c9:27:2e:d4:26:
73:4c:ed:05:16:df:4b:6c:ac:ae:91:5e:55:e5:0c:9a:a0:6d:
0c:b8:29:cd:48:98:a7:a3:84:8b:80:62:38:86:5c:52:2b:04:
47:a3:fb:56:b8:69:7e:c2:1b:0a:d7:0a:ae:47:cd:ad:ae:2e:
e3:98:94:b8:73:37:c7:6e:0d:d0:a1:15:b3:a3:d4:d6:f4:f4:
26:5a:3a:84:02:00:e6:17:e7:7e:a0:ac:97:3b:3d:f9:a8:78:
33:a9:08:24:95:31:0b:86:83:a3:24:55:07:ee:11:00:bc:00:
90:a0:9f:e5:30:73:f9:58:c2:79:93:5c:37:39:1d:a8:a1:f2:
05:b9:61:c0:b6:b4:fd:3f:fe:4c:a1:c6:92:2a:df:79:b4:5d:
8b:7c:a5:e7:a3:25:e5:ac:66:1f:5c:15:9b:d4:2f:6d:0a:d6:
61:f3:e1:45:92:2f:94:a7:44:21:ac:31:ba:d0:89:95:83:2b:
98:c7:61:d6:76:96:40:b5:6d:80:7e:31:4d:7d:06:e3:ed:0d:
7f:94:1e:0f:4e:fb:d5:b8:48:06:b3:f1:e0:4d:27:7c:c7:0a:
1c:a4:f2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:53 2025 by rpki-client