Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5C1C9CC88AA11F09BA2C9CBDAE4EC9C.roa
File: F5C1C9CC88AA11F09BA2C9CBDAE4EC9C.roa (raw, json)
Hash identifier: s8Pxve9gsEMbS+IplggXV6Ips41KgYr3f/uENefZc24=
Subject key identifier: 66:CB:19:AB:DE:77:D3:62:AA:9E:73:6C:9B:EA:8F:E8:21:BA:62:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5C1C9CC88AA11F09BA2C9CBDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 09:47:10 +0000
ROA not before: Wed 03 Sep 2025 09:47:04 +0000
ROA not after: Wed 08 Oct 2025 09:47:04 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105678 (0x19cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 09:47:04 2025 GMT
Not After : Oct 8 09:47:04 2025 GMT
Subject: CN=68b80e9e-cadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:45:17:06:3b:96:59:85:d7:17:41:60:35:
5d:6e:5c:b9:79:36:4c:ec:b8:88:4c:b5:8f:98:f1:
fe:0b:12:bf:af:62:01:b6:c0:4a:ca:d7:ff:fd:f0:
b6:ce:30:54:c6:5b:4c:63:b8:72:68:b5:09:bf:2b:
54:0d:e7:09:73:f3:37:1a:3b:b7:62:bd:23:4e:e8:
4e:82:7f:e6:5b:17:00:d9:06:1f:32:18:72:f3:4c:
db:e0:9f:93:9f:d8:c2:0a:8f:58:04:e8:cc:0c:e2:
4a:0d:06:81:7d:ba:18:ff:e9:fa:dc:7e:3b:de:be:
c4:11:87:dc:8e:6f:02:92:b9:e0:4f:ad:6a:67:65:
4f:02:83:5e:0c:96:78:5f:82:4a:73:f6:75:4b:84:
45:25:f4:0c:70:82:4e:b8:0a:ae:14:da:b2:f0:d6:
f1:3f:a1:b1:02:6b:31:31:c9:1f:f3:98:05:98:c5:
04:be:fa:b3:9e:14:1b:ac:85:e1:61:b7:82:ef:bc:
86:4f:74:98:26:2c:af:b2:14:3c:c0:9e:ae:84:da:
3d:0e:df:e0:da:57:3a:f1:84:1d:f3:52:c0:2e:f7:
03:79:c4:ba:24:fb:d6:ea:07:42:af:0b:f4:df:9d:
4e:01:6f:65:03:6b:46:f9:2a:25:d6:48:1c:1b:24:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CB:19:AB:DE:77:D3:62:AA:9E:73:6C:9B:EA:8F:E8:21:BA:62:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5C1C9CC88AA11F09BA2C9CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b4:c4:85:7e:24:0f:a3:98:99:b1:e4:c5:67:83:10:58:28:
12:09:dc:45:da:8d:ca:a5:88:cd:df:16:96:3e:d2:9b:47:5b:
99:a4:7e:7b:c2:99:14:0c:86:83:ab:5f:1e:61:3c:d6:d1:fa:
f9:d9:ef:dc:19:3c:b0:7d:d8:53:d9:13:4c:22:bc:04:3c:c5:
fc:8b:fa:be:42:36:ba:50:fc:1d:f5:77:fa:d2:b9:e7:62:50:
f3:5e:e6:68:08:9f:2e:0d:eb:df:5e:bb:22:98:a1:a0:af:60:
30:51:91:62:70:0c:ef:53:d8:ef:42:93:d0:52:ea:71:3d:70:
b2:be:bd:96:92:55:37:44:8c:9f:1c:67:f9:67:60:46:cd:1e:
f4:c4:87:f3:c1:3a:f2:04:59:a1:cf:fc:9d:f2:20:a4:c5:a8:
ec:d5:38:e0:4c:6a:03:82:4d:00:a8:a5:39:0f:fe:50:94:cd:
05:25:48:83:61:41:df:90:0f:dd:27:92:97:48:a0:bc:68:4c:
8e:23:55:72:2c:d3:e4:bb:13:9d:62:b7:28:33:a6:3b:bf:52:
24:2b:4e:26:3f:9a:3c:33:36:6e:58:e3:d8:e8:ff:4b:f8:8d:
83:27:53:a5:a2:27:cc:8a:d4:6c:02:3d:a2:08:f3:49:0d:48:
21:b1:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:29 2025 by rpki-client