Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9911B31CB38A11F0BFA9CDC4DAE4EC9C.roa
File: 9911B31CB38A11F0BFA9CDC4DAE4EC9C.roa (raw, json)
Hash identifier: uI1YzCom0l7qD99txRGHHL0UEt4YJHG6qf7Ol2rqdhk=
Subject key identifier: 21:36:85:77:08:26:9D:C9:33:AF:CF:2B:37:14:5D:B1:00:04:CD:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9911B31CB38A11F0BFA9CDC4DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 23:13:51 +0000
ROA not before: Mon 27 Oct 2025 23:13:45 +0000
ROA not after: Wed 10 Dec 2025 23:13:45 +0000
asID: 138915
IP address blocks: 154.90.44.0/23 maxlen: 24
154.90.46.0/23 maxlen: 24
154.90.48.0/23 maxlen: 24
154.90.50.0/23 maxlen: 24
154.90.52.0/23 maxlen: 24
154.90.54.0/23 maxlen: 24
154.90.56.0/23 maxlen: 24
154.90.58.0/23 maxlen: 24
154.90.60.0/23 maxlen: 24
154.90.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107952 (0x1a5b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 23:13:45 2025 GMT
Not After : Dec 10 23:13:45 2025 GMT
Subject: CN=68fffcaf-e7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:9f:01:98:57:9e:c3:8e:eb:02:1a:5e:3e:
69:65:26:95:dd:9f:42:a3:58:1f:2c:fa:83:0f:3e:
ed:fe:67:8a:37:6d:2b:04:e9:76:ff:14:8a:63:a1:
8d:95:cc:b9:7d:78:6e:5f:dd:43:aa:ce:29:32:cc:
17:6a:8e:04:17:30:ec:72:a3:59:86:e6:f9:18:65:
16:7b:76:5c:35:92:36:36:19:8e:6d:87:85:79:34:
c9:e8:28:3d:b4:48:e0:ba:5d:95:78:f0:a0:94:d1:
3c:05:56:90:ef:62:55:8a:5e:4a:65:76:61:e9:ba:
1d:30:3e:46:fb:9f:50:18:b6:f1:f8:f7:6b:ba:91:
9c:f1:e0:c2:61:20:47:b7:b9:c0:8e:50:7b:6b:b5:
07:b3:6b:17:05:c8:45:a8:d9:89:5c:81:da:33:59:
59:ce:a1:08:76:13:87:80:63:66:5c:3a:80:ba:ec:
77:d0:85:46:53:35:79:1a:10:0e:5c:0a:34:9b:40:
36:b4:b5:fd:70:a7:8b:49:b1:20:95:fb:f3:cc:2c:
6e:dd:d5:e0:d5:de:fe:99:e0:6d:11:05:69:31:a8:
45:5c:78:d5:6a:2b:b0:70:8b:e9:96:24:01:79:40:
96:ed:03:b2:24:c1:4b:77:52:5c:c3:e2:2c:4d:b1:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:36:85:77:08:26:9D:C9:33:AF:CF:2B:37:14:5D:B1:00:04:CD:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9911B31CB38A11F0BFA9CDC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.44.0-154.90.63.255
Signature Algorithm: sha256WithRSAEncryption
97:8b:a0:33:19:52:47:55:3e:01:93:e7:5a:ef:83:c3:67:b3:
6b:b1:ed:b0:0d:bf:c0:04:4c:52:b1:3f:87:06:29:95:98:91:
54:2f:c4:c3:1d:0e:35:b8:99:14:55:55:00:e4:a4:a2:41:5e:
e5:ec:4f:a0:3c:a3:fe:ad:c4:01:02:90:6c:4e:1d:38:3b:33:
58:d3:5f:cd:a5:a4:c4:da:18:aa:15:19:a5:32:c6:8b:8e:d1:
91:4b:03:52:92:8b:ea:38:81:20:be:cb:f9:7b:bc:91:0b:81:
fe:a5:62:35:2c:ed:a8:3e:be:86:f1:ad:4a:5f:0f:1f:38:72:
27:5c:b6:95:70:ea:c0:72:a9:2a:ab:e2:a1:9c:c7:dd:d7:bc:
82:f4:e2:0a:83:bd:db:3f:bb:87:24:12:03:08:e9:a9:ec:65:
30:7b:34:c8:0f:88:9c:ee:a4:f9:ff:2d:19:44:7b:f2:99:91:
82:e5:04:22:bb:84:c9:e2:0f:0c:95:12:d2:4d:9e:3b:cb:63:
c8:85:ff:da:d1:b1:94:f4:50:e6:2d:95:ba:81:fd:86:23:be:
fd:87:86:68:4f:37:5e:64:1a:4f:d1:9e:9b:ce:33:d2:6d:a7:
4f:c9:55:ae:53:14:7f:5c:50:f7:57:4a:30:54:58:8b:75:bd:
90:b4:9a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:08 2025 by rpki-client