Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98CEA316B91F11F0AF0EFDDFDAE4EC9C.roa
File: 98CEA316B91F11F0AF0EFDDFDAE4EC9C.roa (raw, json)
Hash identifier: K8Iwbd5bUBFidV6C9ZstjA+5fCyYfu+ip64osmyAeQc=
Subject key identifier: B5:2B:7B:24:73:BA:62:73:C6:0A:4E:C0:F8:38:7E:D7:D6:75:2C:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A74B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98CEA316B91F11F0AF0EFDDFDAE4EC9C.roa
Signing time: Tue 04 Nov 2025 01:43:01 +0000
ROA not before: Tue 04 Nov 2025 01:42:56 +0000
ROA not after: Mon 10 Nov 2025 01:42:56 +0000
asID: 213736
IP address blocks: 154.92.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108363 (0x1a74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 01:42:56 2025 GMT
Not After : Nov 10 01:42:56 2025 GMT
Subject: CN=69095a25-fd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:f5:85:ea:fe:9e:99:79:44:b1:bf:4b:75:
96:f6:03:e1:5b:7c:fc:b3:37:88:be:5c:5e:f6:9d:
c0:2b:7f:9a:91:66:85:1a:2c:d1:8c:b3:69:d0:7e:
7f:84:32:11:0a:43:56:52:ea:6b:86:eb:28:f5:a5:
12:96:4c:60:04:6f:63:72:12:cf:b9:4e:52:f0:10:
4c:15:54:9b:79:fa:ac:c0:83:e8:8b:de:6a:5f:0d:
f4:73:f6:b4:c2:96:b8:20:a7:1f:4a:7f:ba:aa:d3:
3a:58:ff:64:45:cb:44:32:12:8c:72:49:9a:6b:7f:
bd:61:91:8c:52:d2:cb:0a:18:a9:cd:57:0f:a1:83:
d0:69:02:41:61:37:15:ff:c8:4f:75:61:2d:ba:67:
ce:b0:b3:07:af:15:ef:a6:c0:b8:1d:56:25:5d:27:
90:b5:9d:1b:d0:f4:98:1d:43:b6:bd:38:2d:03:7c:
93:89:03:04:34:d7:43:32:cd:04:72:bc:bd:c4:0e:
89:01:15:65:12:fd:08:a6:08:48:c5:bb:de:31:9c:
da:c3:92:31:5a:e4:9e:27:39:29:68:58:4a:62:c5:
ef:87:32:50:10:78:60:50:2e:7b:d1:24:e7:fd:d3:
3a:02:59:9c:a7:5a:7c:c8:77:8a:5a:fd:15:1e:c9:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2B:7B:24:73:BA:62:73:C6:0A:4E:C0:F8:38:7E:D7:D6:75:2C:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98CEA316B91F11F0AF0EFDDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:89:45:3f:a7:38:68:35:41:5e:b5:30:76:b5:16:81:47:29:
9c:ba:f0:85:0b:1b:5c:39:5f:18:f3:e5:8f:ed:cc:65:d6:ce:
9b:50:95:f7:25:a8:5f:3c:62:bc:38:c2:93:f5:10:23:15:24:
6b:c2:e0:74:a6:51:a1:02:87:24:0d:76:3d:68:d0:8b:72:5d:
b6:a9:4c:84:e9:90:5c:a1:f1:c2:b7:38:d6:a5:db:d5:37:51:
2b:18:42:5f:d6:a8:50:6e:53:94:c9:84:b1:c8:80:04:29:08:
06:d4:73:f3:ea:93:30:23:54:92:b3:f4:2e:5b:c9:b0:88:8f:
cc:7d:21:9f:82:25:44:af:0c:5b:46:f3:85:a7:3d:23:72:29:
ba:f4:bd:df:d1:89:f4:54:59:01:8f:fe:55:98:a2:48:bf:68:
05:ab:7c:9c:95:f0:4d:f1:b2:59:95:2c:c2:c4:5d:c8:dc:9c:
a1:e5:87:3e:fe:df:f6:a2:ab:8d:2f:43:b0:b3:a0:fe:fe:e1:
fc:94:25:3b:9b:c8:25:89:18:40:e6:a6:00:85:0a:eb:8c:1e:
16:75:1d:70:ed:8d:b1:18:04:7e:5f:39:fa:f4:ed:63:b8:c8:
77:b9:2b:f5:02:2e:54:a7:3f:2c:56:bf:fd:4f:7a:9a:c5:d4:
24:e5:30:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:35:46 2025 by rpki-client