Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFEC2F70AF3111F084C70BDFDAE4EC9C.roa
File: AFEC2F70AF3111F084C70BDFDAE4EC9C.roa (raw, json)
Hash identifier: l6BItp/O2IpzLaTWZ5pSCozEvVIA/9cNhEvaQptZvRc=
Subject key identifier: 52:9D:4B:C7:F5:11:F4:2B:AD:7F:29:51:47:95:FE:B2:A1:14:D4:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFEC2F70AF3111F084C70BDFDAE4EC9C.roa
Signing time: Wed 22 Oct 2025 10:27:19 +0000
ROA not before: Wed 22 Oct 2025 10:27:14 +0000
ROA not after: Sun 30 Nov 2025 10:27:14 +0000
asID: 63023
IP address blocks: 154.90.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107685 (0x1a4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 10:27:14 2025 GMT
Not After : Nov 30 10:27:14 2025 GMT
Subject: CN=68f8b187-a240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:4b:a5:e2:16:94:52:e3:6f:af:15:35:f8:
86:69:31:56:27:ff:9a:62:a1:12:c1:58:80:6d:fe:
30:39:ec:5b:99:27:eb:16:c5:8f:58:e7:6f:1c:e2:
08:04:dc:2e:4b:c2:aa:95:6e:66:04:ee:93:79:57:
f5:85:7f:ae:fe:45:0c:60:16:c3:b2:11:d8:3f:27:
f1:84:37:48:4f:83:9b:19:70:79:15:71:09:71:0c:
41:fe:54:07:7e:ac:d6:73:c0:bc:5b:3b:69:9c:62:
7a:2a:cd:ea:18:6c:d0:9e:48:e8:13:75:58:d8:28:
92:c7:57:16:44:3a:82:3e:54:4c:f5:b1:2c:b5:07:
28:02:ab:e2:f4:bd:f0:fe:5c:1f:79:71:ce:2a:36:
88:c3:c3:33:8d:77:42:c9:bc:02:c3:20:05:0a:86:
9e:c0:d0:04:17:e0:8d:bf:97:b4:92:ac:39:c1:80:
3d:04:67:ee:2b:28:04:f6:2a:36:6d:12:64:75:3c:
73:f3:e3:03:af:0b:81:7e:9b:3c:9a:e9:9b:fc:9e:
d7:63:04:28:37:52:b4:18:17:df:89:7a:ec:c1:b7:
81:c1:93:1f:ad:8d:15:c4:dd:d2:2c:62:4c:51:08:
1f:61:be:40:0c:4e:eb:15:60:f5:6b:84:65:62:5c:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9D:4B:C7:F5:11:F4:2B:AD:7F:29:51:47:95:FE:B2:A1:14:D4:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFEC2F70AF3111F084C70BDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.135.0/24
Signature Algorithm: sha256WithRSAEncryption
97:46:95:f4:0f:13:ea:95:97:18:4b:2c:1a:3b:42:7d:28:8c:
9f:96:de:4c:03:c9:fd:9a:1a:33:ea:f3:e3:0b:db:7d:99:91:
72:42:95:36:fc:d3:2d:e1:5e:bc:ce:b6:62:da:a7:a9:47:04:
b5:30:1f:14:34:30:ab:d9:93:11:2c:e0:dd:a7:f8:b6:1c:23:
87:b4:65:e3:23:6e:36:d7:ab:02:9e:a6:14:2e:f7:bb:13:d8:
18:5b:4e:09:69:c0:5f:31:4c:f8:6c:77:01:34:3e:82:77:0d:
3d:e9:a7:ba:f9:e9:82:13:dd:cc:37:98:a2:52:03:0e:87:e0:
36:9b:64:49:7d:19:94:2b:93:d6:4d:6f:b8:71:7b:1b:6f:d6:
d9:70:bb:ea:8d:9e:ab:51:05:c5:17:e9:ef:34:b1:32:c1:b7:
29:56:1a:74:3c:a2:8a:17:5e:5e:47:29:f7:8f:8c:74:89:28:
2c:34:df:9d:1c:4f:9a:b1:9a:d3:39:90:8a:1a:ff:da:53:b3:
f3:7b:c9:49:fe:a8:4e:5f:d2:3e:53:b0:ac:fd:f6:e5:7d:f6:
d0:a7:81:ff:03:49:38:1c:e2:43:10:43:8b:05:7a:fc:32:65:
d4:6c:fb:5a:3f:ff:b7:2d:28:ce:ec:1d:0c:61:12:73:b2:41:
7d:ae:07:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:23 2025 by rpki-client