Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1014293CB4CA11F08A83E9A6DAE4EC9C.roa
File: 1014293CB4CA11F08A83E9A6DAE4EC9C.roa (raw, json)
Hash identifier: gUGWvnynG4n2APDplXsTwfnYBmcZxCwQpyO+UGYnVW4=
Subject key identifier: 3A:60:50:86:3B:1A:FC:78:35:05:08:22:BB:97:F4:25:65:78:A3:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A638
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1014293CB4CA11F08A83E9A6DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 13:20:40 +0000
ROA not before: Wed 29 Oct 2025 13:20:34 +0000
ROA not after: Fri 05 Dec 2025 13:20:34 +0000
asID: 398823
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108088 (0x1a638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 13:20:34 2025 GMT
Not After : Dec 5 13:20:34 2025 GMT
Subject: CN=690214a8-38a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:1e:0d:dc:bd:dd:f5:b9:a9:f9:93:e3:90:
41:36:ba:9d:66:b4:6d:5a:c8:f7:80:e1:d6:82:fd:
e8:0c:07:38:31:a9:f7:62:ae:6b:87:db:f7:f0:ef:
66:64:92:45:46:48:66:cc:30:83:95:74:7f:ab:89:
32:c1:40:13:99:06:d9:8c:99:7d:a8:7c:73:d1:fd:
ee:47:cc:34:71:9d:15:66:3c:bd:58:eb:03:7a:7e:
38:fa:6f:ae:16:5b:f8:4a:17:13:40:61:77:d1:dd:
33:af:d4:be:19:37:c1:b3:43:a6:c6:d0:84:d9:31:
f3:b8:e0:16:68:2e:6b:91:92:db:07:bb:12:f2:a0:
5a:d6:ad:79:48:44:13:49:7e:19:14:4f:4b:ad:34:
1d:fa:75:00:91:e8:bc:3a:c0:f3:0b:98:f8:04:3f:
8d:84:58:62:b7:06:4b:03:9a:54:a8:c1:d4:57:f8:
64:e3:e2:84:1c:6e:2d:d5:46:d8:ac:3e:5d:b0:0b:
cb:4e:4e:4f:ce:98:a0:b8:53:9d:3f:23:e2:c0:00:
1b:9c:d4:2b:7f:5f:db:f2:c2:10:93:69:fc:81:9a:
07:ce:ff:21:30:f8:f2:2a:18:bd:c6:4e:f1:b6:ac:
94:77:fd:f9:4c:92:3c:0c:8d:74:cf:1c:4f:35:60:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:60:50:86:3B:1A:FC:78:35:05:08:22:BB:97:F4:25:65:78:A3:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1014293CB4CA11F08A83E9A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
c8:ff:7f:15:ff:6c:65:ab:9b:ac:6b:07:c0:9d:9d:30:23:48:
15:39:a4:78:73:4e:36:a9:01:83:09:70:f0:54:0a:c5:42:07:
fe:73:53:96:8c:03:8b:ce:f7:2e:37:d7:ad:84:0a:f8:86:99:
e2:64:73:c4:d4:11:3a:e0:7b:92:d7:73:87:81:1c:10:32:bc:
9c:fb:b4:e6:97:68:b9:38:5b:97:ce:1c:95:fc:4a:35:03:47:
97:a5:23:62:56:1d:d0:99:bd:cb:88:cd:8d:a8:32:60:0c:0e:
f2:98:51:39:cc:9c:87:66:67:d8:74:57:26:99:ad:46:b4:1b:
57:60:fb:27:56:25:10:2f:31:4e:54:3d:53:71:c4:b5:8d:fc:
1a:73:60:33:bd:fe:40:cc:39:93:f8:34:73:a8:0e:d3:73:d2:
c5:4c:c1:e4:2e:42:51:ca:61:6d:0d:18:33:9f:23:e6:66:a2:
de:9c:c6:69:93:4d:40:0d:f9:03:7a:79:2e:25:83:c9:ee:88:
5b:e7:d7:71:a7:46:43:ec:59:f9:b3:b3:f3:bf:4c:f9:57:53:
c6:97:81:05:84:11:a6:30:87:2c:77:a1:fc:88:bc:30:55:1a:
0d:34:e6:5d:10:ab:ad:ed:a2:d1:4d:ca:b3:d8:4b:35:dd:87:
33:b6:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:41:02 2025 by rpki-client