Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34D99A42B89711F0B7516995DAE4EC9C.roa
File: 34D99A42B89711F0B7516995DAE4EC9C.roa (raw, json)
Hash identifier: LDi7H+PjDRcq0Vs37KLK0MlrRFe/VtocqQTvhlkyUZY=
Subject key identifier: 9B:0E:19:DA:BE:74:3F:AD:29:D6:95:FB:C5:A5:80:00:60:24:39:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A716
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34D99A42B89711F0B7516995DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 09:26:42 +0000
ROA not before: Mon 03 Nov 2025 09:26:37 +0000
ROA not after: Thu 20 Nov 2025 09:26:37 +0000
asID: 397423
IP address blocks: 154.202.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108310 (0x1a716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 09:26:37 2025 GMT
Not After : Nov 20 09:26:37 2025 GMT
Subject: CN=69087552-0dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:a9:14:b1:22:8f:fd:19:93:3b:88:86:af:
d5:56:4e:0a:12:b2:00:cb:e8:af:2b:31:c8:c0:47:
9b:eb:cc:e9:fd:d2:ce:75:0f:2b:84:87:a8:47:be:
5a:26:56:4e:06:60:42:d8:74:ab:d2:40:ee:e8:43:
15:51:4b:7e:42:81:f7:89:58:ae:2d:2f:85:40:f3:
ee:9d:b1:fb:5f:8a:75:1a:d2:3e:7a:61:bb:fb:9f:
50:73:3f:d4:ee:a2:0b:3d:ea:23:ba:0b:48:61:28:
47:b5:6d:68:89:8d:58:82:e6:26:81:bd:40:e6:19:
a3:2a:88:9a:42:b9:a2:b3:ed:24:ef:07:2c:e2:d7:
11:e4:e0:6d:a5:2b:f4:10:c4:55:d2:3c:99:8d:ef:
5a:f6:aa:e5:f0:c6:6f:29:c0:99:6f:db:08:80:b9:
6d:b8:cc:3a:f4:2c:c8:3d:5f:5d:ec:db:2f:25:a8:
a3:30:b1:ee:0a:c7:2a:6b:76:7d:30:53:c1:2b:13:
69:af:b5:d7:d8:27:c2:75:ae:3b:3e:28:cd:c7:7a:
05:2e:d5:74:3d:3d:a2:42:25:d1:1d:86:58:22:37:
70:3e:04:1e:23:16:11:30:a8:a5:a9:99:65:fe:5f:
ba:e5:61:2a:5d:1b:7f:23:75:73:34:e5:37:54:3d:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0E:19:DA:BE:74:3F:AD:29:D6:95:FB:C5:A5:80:00:60:24:39:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34D99A42B89711F0B7516995DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f1:b4:39:da:ad:0b:28:d0:bc:b6:e5:ef:f6:c0:69:69:b1:
fe:d6:35:9d:15:70:33:27:f3:e4:a2:69:62:2e:a6:0b:c5:9e:
b7:8c:01:0a:8b:a1:b7:00:91:7f:e3:48:b0:88:87:2c:d4:8e:
1b:aa:01:1d:60:3a:9b:58:f1:6a:98:98:13:01:8c:d6:0a:e1:
4b:54:af:4a:08:ad:66:4e:a8:47:c3:0a:aa:b8:3f:ed:72:71:
0a:db:09:b0:b6:3a:49:21:85:ad:66:08:51:21:12:93:db:9b:
25:e7:da:6f:0b:1e:b1:3e:d6:ff:49:35:b9:55:36:16:48:6d:
12:11:df:76:d2:09:14:3f:3c:17:08:87:6f:ef:59:56:89:f7:
a0:4b:cc:d3:32:a0:af:34:51:8c:ca:6a:cd:fc:ea:f5:e9:8f:
fb:f0:d7:bd:41:a3:d9:5f:a4:2c:08:8a:0e:b8:3d:14:30:b9:
e4:70:58:0f:7b:34:65:31:dc:2a:80:fa:97:7b:f2:28:32:ed:
d7:6d:e2:fe:23:37:96:76:31:5b:86:85:e1:ba:b5:a2:d9:2d:
05:33:3e:ba:5d:a1:6a:90:00:20:da:fd:4f:f1:8c:e5:c6:82:
3d:7e:58:ef:0b:95:aa:91:15:12:04:8c:22:d6:29:db:76:31:
23:ac:fe:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:21 2025 by rpki-client