Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98275ABEB39011F0B4C990EADAE4EC9C.roa
File: 98275ABEB39011F0B4C990EADAE4EC9C.roa (raw, json)
Hash identifier: DlI50uMEAMvptMUvn2QmwaVcZ/mosRe9Hbm4BGq9lG8=
Subject key identifier: 5A:48:0D:D8:50:24:71:4E:3D:A4:B5:B1:47:02:9E:F8:13:AE:94:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98275ABEB39011F0B4C990EADAE4EC9C.roa
Signing time: Mon 27 Oct 2025 23:56:46 +0000
ROA not before: Mon 27 Oct 2025 23:56:42 +0000
ROA not after: Sat 03 Jan 2026 23:56:42 +0000
asID: 63139
IP address blocks: 154.81.1.0/24 maxlen: 24
154.93.83.0/24 maxlen: 24
154.93.95.0/24 maxlen: 24
154.93.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107966 (0x1a5be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 23:56:42 2025 GMT
Not After : Jan 3 23:56:42 2026 GMT
Subject: CN=690006be-641b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:1b:0c:17:dd:00:13:ef:d2:2f:c2:59:f2:
2d:57:30:9d:f3:fa:c6:0b:ff:8e:b0:e1:43:69:21:
94:d4:8e:11:24:3c:a8:21:53:50:4a:b1:f4:a9:47:
e2:83:d6:91:bc:8d:f5:68:cc:61:3e:18:5f:21:cb:
a1:9b:35:3f:0a:5f:e7:5b:58:32:54:67:72:ab:9d:
f3:6a:a4:3e:28:d8:c4:62:77:39:55:ee:8f:46:64:
4f:d3:ce:dd:18:ac:64:35:73:cf:bc:05:5d:f6:f1:
88:fd:6e:5e:0b:b0:3c:2b:4b:4d:cd:3e:eb:73:cd:
c9:44:1a:e5:08:21:1d:ce:8c:01:fe:7e:06:4e:39:
aa:b1:a1:66:99:97:1c:09:cf:72:a9:26:71:60:a5:
b2:92:fe:0c:62:24:1c:5a:52:66:1e:15:3c:49:e5:
25:68:46:a1:8e:47:e5:7b:4d:f6:45:62:ba:8e:0a:
2d:c1:03:99:e5:1d:09:38:20:93:b9:3f:aa:2b:ba:
f7:77:fd:d4:04:f5:2e:06:59:b5:f9:d8:c5:6d:f5:
3a:99:b5:5c:48:5d:c1:cf:4b:78:5a:a1:69:67:29:
ab:36:b4:83:f5:f8:30:77:01:27:87:64:11:24:be:
83:86:71:5d:24:e5:bb:b3:fb:f3:b6:79:cc:f0:ac:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:0D:D8:50:24:71:4E:3D:A4:B5:B1:47:02:9E:F8:13:AE:94:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98275ABEB39011F0B4C990EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.1.0/24
154.93.83.0/24
154.93.95.0/24
154.93.123.0/24
Signature Algorithm: sha256WithRSAEncryption
14:4e:28:fc:0c:c8:8c:ba:82:09:01:58:dc:4b:60:03:a3:6a:
4d:d9:68:6f:07:1d:8e:89:a6:51:a4:9b:6f:9d:9a:c7:65:fa:
9b:85:16:c0:c6:14:0a:ba:92:fb:cb:3e:e0:c1:2c:4b:d2:61:
a4:ce:1b:6b:fd:44:fd:62:69:a0:6f:40:d9:1c:3e:3f:75:e7:
48:3f:76:8f:36:e9:53:e9:f7:53:b5:5a:1d:06:38:ee:06:5d:
0d:a3:ad:0a:bb:5a:55:31:4e:ef:39:86:b3:12:84:32:7f:b7:
b7:09:74:61:84:1e:f4:90:9c:7d:a8:8c:65:79:67:03:dd:96:
7d:82:d3:73:7d:b7:ec:64:5b:bb:01:23:e4:6f:50:90:67:62:
b3:fb:39:f3:3c:22:20:4f:77:4e:7e:23:48:3f:4f:1d:5a:fa:
94:1f:67:85:26:fe:7f:2a:ab:57:e4:d4:46:ad:9b:18:b4:a1:
b6:60:5f:a3:63:ca:3a:b8:63:0c:4a:c6:e3:b1:41:58:ee:3a:
d4:e8:f7:e5:18:8d:73:ce:d1:a2:28:83:c9:e8:ee:45:d9:51:
c2:d1:af:fb:a0:ac:f7:5d:11:23:96:66:c0:85:e6:90:6f:98:
46:e2:57:ea:d3:85:d5:ff:09:9e:8c:62:ab:ed:c7:32:d2:5f:
24:2f:08:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:13:03 2025 by rpki-client