Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A53EC850B86711F098B4CADEDAE4EC9C.roa
File: A53EC850B86711F098B4CADEDAE4EC9C.roa (raw, json)
Hash identifier: oad0/O0lPBshxj4HbdqzxlJDPtS2BjXUGFwUyTHoz4s=
Subject key identifier: E2:8A:3B:6D:86:1C:FD:E0:0F:D7:F3:59:A4:FD:45:42:1B:69:7C:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A53EC850B86711F098B4CADEDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 03:46:15 +0000
ROA not before: Mon 03 Nov 2025 03:46:06 +0000
ROA not after: Thu 05 Feb 2026 03:46:06 +0000
asID: 9294
IP address blocks: 154.88.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108264 (0x1a6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 03:46:06 2025 GMT
Not After : Feb 5 03:46:06 2026 GMT
Subject: CN=69082586-4680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:8f:01:9e:bb:30:86:5d:b3:05:16:14:29:
15:ea:f3:bc:d4:75:3c:b6:36:e1:77:0a:87:b5:21:
43:9b:18:ab:b5:19:f9:88:df:e8:db:bb:0d:7c:bd:
cd:ba:ce:b8:23:c2:fa:10:be:26:75:af:1d:d8:1e:
39:27:8c:e9:15:eb:e8:ff:2e:2b:92:b5:90:c3:5f:
d0:20:1d:43:2b:c8:b9:bd:b8:1a:ab:ea:b7:75:80:
44:d0:46:b5:28:54:e3:e5:55:04:88:d1:22:dd:59:
59:a0:bb:3a:2b:2d:6a:ca:81:38:2d:5d:6a:e2:b3:
18:ac:47:9d:d8:26:08:89:db:0e:29:4f:6f:88:31:
40:c3:08:42:ad:47:8d:77:3f:84:27:12:bf:5f:c7:
40:75:34:d9:0f:40:26:1d:ce:fd:2d:23:a0:c6:60:
ac:51:e3:b7:00:82:db:09:97:c7:3f:7e:05:b5:37:
10:a1:e0:ae:8c:30:06:a5:37:00:3f:5d:4e:21:0f:
c6:73:bb:06:77:f5:22:a8:eb:11:40:9a:ac:b2:f3:
75:d1:2f:71:e4:03:da:7a:5c:c9:b5:9a:aa:c9:34:
2e:75:58:45:c8:3c:50:ca:8a:32:a9:68:76:be:57:
43:7b:a1:80:39:b1:e7:50:96:c3:7b:93:ab:86:d1:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8A:3B:6D:86:1C:FD:E0:0F:D7:F3:59:A4:FD:45:42:1B:69:7C:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A53EC850B86711F098B4CADEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.96.0/19
Signature Algorithm: sha256WithRSAEncryption
63:ba:95:d4:aa:55:fb:21:0a:6d:d5:d6:27:da:a0:e7:17:bb:
ab:57:67:8a:af:de:cd:ae:76:8f:36:13:c1:5c:11:91:db:0d:
59:2f:96:8b:23:37:f1:c4:38:44:a3:8d:93:57:22:d8:d0:f4:
8d:96:98:1a:ea:95:9b:b4:cf:cd:d9:fc:10:a8:07:57:23:bc:
52:86:1d:bb:70:51:aa:32:ad:78:39:c5:66:1c:d4:17:0c:d2:
b6:28:b7:37:3d:2a:48:aa:23:f9:a0:a2:55:09:7c:3b:4d:eb:
aa:2b:91:ef:5c:e8:93:2a:ac:7b:54:c7:bd:82:25:92:06:43:
5b:1d:b5:04:94:ad:0f:51:de:d5:f5:cb:02:fb:22:67:6b:b0:
8f:af:ae:b9:a0:67:25:14:2a:f4:d8:62:3f:af:f6:34:b2:42:
05:f8:b8:5c:8d:fa:0e:63:0e:99:8f:40:be:b2:b4:66:c1:f5:
5c:c1:be:38:e7:f6:d8:35:d0:e6:6c:a0:ee:4b:15:0e:44:40:
0b:59:d6:4b:ae:48:99:41:e3:91:c7:18:f5:99:0d:9a:3c:40:
65:98:d7:92:13:85:60:e9:34:97:4f:d1:d4:b6:07:a8:3d:cb:
fa:f6:55:e7:91:fb:60:75:d5:9f:d6:df:c3:a1:79:90:6e:ce:
e6:c3:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:57:59 2025 by rpki-client