Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0D075CA99E11F0B44AA385DAE4EC9C.roa
File: FF0D075CA99E11F0B44AA385DAE4EC9C.roa (raw, json)
Hash identifier: tQ9yuaH5Bzy3rkfsyripjQBVY9yLF9iJ7crAzsGIKwY=
Subject key identifier: 18:3C:FB:46:27:C7:63:77:E4:3F:C4:95:66:57:88:C6:6E:C2:46:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A37E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0D075CA99E11F0B44AA385DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 08:14:40 +0000
ROA not before: Wed 15 Oct 2025 08:14:31 +0000
ROA not after: Mon 17 Nov 2025 08:14:31 +0000
asID: 6079
IP address blocks: 154.210.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107390 (0x1a37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 08:14:31 2025 GMT
Not After : Nov 17 08:14:31 2025 GMT
Subject: CN=68ef57f0-f705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:84:d5:1b:e3:86:ca:51:89:b1:01:b7:1d:
f9:91:b4:6e:26:1d:f4:8e:93:f6:4a:74:c9:ee:3b:
44:0f:75:04:8d:68:5d:fc:66:89:ac:62:9c:56:48:
d0:ed:4a:90:08:82:19:b7:b1:07:42:b8:b9:27:54:
30:e7:b2:b3:a4:99:58:a7:93:e6:56:6a:c3:d3:d5:
2c:b6:82:91:84:1b:f9:fb:02:fe:1f:a2:31:8b:ba:
87:1f:13:18:50:e5:a3:c6:fb:6c:cf:32:10:cd:39:
55:47:f2:83:7d:75:d4:be:03:b5:e1:31:02:22:76:
40:51:9c:54:92:b2:5e:16:e2:51:d9:e1:99:e9:df:
11:67:57:c3:3c:97:c4:c2:76:85:40:a1:37:c8:00:
20:6d:2c:7c:74:a6:f6:db:64:bb:0a:d2:3c:01:06:
2a:91:a3:97:10:69:f6:2b:7d:81:5c:eb:b1:b7:b0:
f9:3c:95:44:b1:b4:cd:83:37:28:a1:24:63:fe:fa:
d9:4d:53:eb:bc:9d:43:4e:bb:47:5d:ee:a2:5b:e2:
63:3e:ab:30:0d:5a:49:85:a2:ab:5e:a3:bf:c3:97:
73:27:81:6c:02:6b:13:a3:29:7e:e8:83:e3:f4:c9:
5d:11:90:f7:e6:a5:5d:83:61:21:50:f0:43:ff:33:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3C:FB:46:27:C7:63:77:E4:3F:C4:95:66:57:88:C6:6E:C2:46:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0D075CA99E11F0B44AA385DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.96.0/19
Signature Algorithm: sha256WithRSAEncryption
97:f4:f7:b3:ec:72:b3:c4:ce:ab:28:f9:49:c1:11:ec:b3:07:
90:69:43:b5:62:02:77:44:54:96:9c:b1:24:74:5d:22:dd:77:
b3:20:5c:7b:93:fb:98:23:34:d9:79:02:3f:d5:25:28:3e:4d:
90:bd:d9:80:32:bd:e1:7d:75:4b:e4:03:bb:69:82:ca:83:79:
c1:26:ad:df:fd:bc:cd:cf:ea:dd:20:ce:98:54:a0:12:08:61:
0d:b5:b2:2c:b7:64:f1:36:03:3b:5b:ac:53:17:38:41:b7:5c:
97:64:b3:72:ee:fb:94:6e:fd:98:6b:18:c1:cb:43:73:56:a8:
11:69:9a:58:30:f1:60:9d:44:88:4d:4f:89:4d:5c:7e:eb:71:
2e:2e:b3:04:14:4e:c9:99:b8:cc:cf:6a:69:7d:a2:af:f7:08:
d7:79:25:d5:c0:88:62:2d:3c:4e:2b:21:47:ff:f7:29:f5:2a:
f5:03:ef:3f:54:3d:13:7a:96:cc:9f:69:82:9a:d5:d4:9c:44:
28:14:4a:5e:0e:5c:a1:59:d7:23:b9:5d:22:00:5c:06:79:44:
a4:f3:ed:91:85:bf:03:f2:16:f4:a1:1b:89:13:85:2c:9a:18:
4e:8b:0b:33:69:22:5b:46:f0:5e:27:57:63:ee:7c:8e:91:53:
f5:5c:5a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:00 2025 by rpki-client