Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDEB392899FB11F0B25D6EB4DAE4EC9C.roa
File: FDEB392899FB11F0B25D6EB4DAE4EC9C.roa (raw, json)
Hash identifier: WFXKG87X/0omMGn7aB7y4BrMhyewE15SPPJmRmKqWHo=
Subject key identifier: 04:E6:53:21:EC:44:F7:F2:79:73:3C:C6:2C:70:EF:69:14:63:61:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A101
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDEB392899FB11F0B25D6EB4DAE4EC9C.roa
Signing time: Thu 25 Sep 2025 10:40:03 +0000
ROA not before: Thu 25 Sep 2025 10:39:58 +0000
ROA not after: Thu 04 Dec 2025 10:39:58 +0000
asID: 55320
IP address blocks: 154.93.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106753 (0x1a101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 10:39:58 2025 GMT
Not After : Dec 4 10:39:58 2025 GMT
Subject: CN=68d51c03-8302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:05:4e:03:fa:0c:cf:fe:07:89:13:62:91:
c7:a5:95:c9:38:6b:74:22:16:97:75:c8:30:84:fc:
bc:00:40:fe:74:00:97:0b:03:ec:8b:8b:e7:2c:71:
c0:78:01:ab:d8:9a:ef:78:49:31:d8:75:66:76:e6:
9c:6e:f7:12:d7:62:7a:20:33:68:1f:3f:6e:ca:1f:
39:42:69:50:7d:93:82:43:3b:bd:0a:46:d9:3d:44:
be:90:37:6e:58:47:fe:e0:e3:54:e9:e1:79:87:89:
91:4d:30:2a:6e:ab:9e:e9:10:0e:3d:6a:26:5e:e2:
90:e8:be:15:c3:76:13:f9:48:ec:d2:a9:ad:9e:82:
3c:18:97:65:25:04:2f:4f:e1:18:9b:29:42:0f:ae:
2c:62:fb:e8:59:e7:bd:41:06:2d:79:80:54:81:2a:
30:0e:b5:f8:6e:ca:f8:40:13:9d:29:1a:dd:13:73:
95:9d:49:c7:19:50:ac:db:9f:9e:43:dc:5c:e5:e0:
39:3b:f5:63:64:5a:87:95:c0:80:24:3b:7c:c5:e5:
a7:21:fa:da:7f:2b:a0:b2:18:7d:77:40:3c:50:39:
e3:d2:6b:16:39:41:64:f9:d6:16:a2:59:9d:23:69:
e4:e3:ad:29:04:8a:6d:44:7c:de:72:62:b3:d1:7d:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E6:53:21:EC:44:F7:F2:79:73:3C:C6:2C:70:EF:69:14:63:61:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDEB392899FB11F0B25D6EB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6d:7e:23:92:d1:45:44:f1:8e:14:6a:05:76:6b:e5:e6:37:
22:6d:ef:b7:81:50:7d:55:cf:c1:40:77:50:f8:4f:59:ec:80:
b0:af:e8:88:16:a1:f9:43:20:9b:b1:b3:90:2c:b9:47:6f:7f:
4a:75:5e:3e:b9:86:5e:e9:f0:4e:e5:bb:a5:68:bd:1b:02:3a:
7b:e1:25:4b:ba:12:97:2b:6f:c4:64:80:54:fe:f9:d2:2d:d7:
02:b7:a5:54:6c:c4:0e:fe:7a:04:00:f6:ae:46:4e:2c:9f:56:
67:c6:1e:53:7d:71:5e:23:ce:52:56:a0:61:17:3f:a2:b1:bf:
29:4b:a8:aa:1b:2c:56:69:b7:99:2a:d2:92:b3:6d:74:ba:42:
c3:82:f2:3c:21:11:99:7c:38:f7:c7:b8:41:70:e4:4a:53:ad:
cf:f9:0f:9d:b3:b5:ee:29:11:79:0b:8b:37:ff:39:df:dc:43:
4f:57:f0:f8:c7:4d:b6:b7:c2:ac:ff:08:f1:79:29:b9:9d:06:
eb:f6:4a:45:29:fe:f1:56:dc:e7:8d:75:c3:22:9d:c1:5c:1f:
e9:3e:7d:92:8e:4a:20:fe:ec:35:df:cd:0d:9f:da:e8:2e:29:
db:a0:a3:b0:92:2c:b1:8f:b9:42:08:57:14:e9:22:7c:2e:39:
2e:69:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:21 2025 by rpki-client