Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C02231A2B88F11F0A060E3E4DAE4EC9C.roa
File: C02231A2B88F11F0A060E3E4DAE4EC9C.roa (raw, json)
Hash identifier: 5lW+wHCf7RRiLaKaxl7sFLNRMSHxgC4rP2fYPe+bRHw=
Subject key identifier: 49:FB:07:E2:5B:48:5A:B8:03:58:9C:17:FD:F1:67:DD:1F:61:78:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A70A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C02231A2B88F11F0A060E3E4DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 08:33:20 +0000
ROA not before: Mon 03 Nov 2025 08:33:15 +0000
ROA not after: Mon 09 Nov 2026 08:33:15 +0000
asID: 18186
IP address blocks: 154.200.97.0/24 maxlen: 24
154.200.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108298 (0x1a70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 08:33:15 2025 GMT
Not After : Nov 9 08:33:15 2026 GMT
Subject: CN=690868cf-d488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:0d:86:08:48:33:3a:8c:84:5d:7f:40:d9:
a7:85:85:b7:18:06:09:31:56:8a:59:18:65:3a:e7:
45:65:65:9b:ed:eb:ca:0d:ca:ef:0a:f1:ad:3a:12:
37:45:e9:8b:ff:ac:d5:1f:06:14:25:f5:85:8f:30:
3f:18:96:c5:55:9d:37:d1:c5:43:ae:72:c1:06:7a:
d2:04:98:df:b6:21:4e:bb:e3:53:24:3d:28:89:6b:
03:fb:44:f5:7a:88:ad:48:6a:c3:70:d1:f1:5e:d9:
86:34:88:cc:de:5a:ad:28:d0:ca:4d:18:14:ee:00:
94:d7:db:45:20:19:91:f4:26:93:bd:48:32:90:4e:
16:8d:4e:e2:ff:e8:40:12:e2:5b:40:51:ea:41:61:
2d:9d:38:d2:06:24:8f:f5:55:d3:ad:20:2b:26:da:
3e:c5:e4:ba:b4:85:8f:7d:75:85:9e:da:d0:8d:ca:
5a:81:eb:31:16:b9:f2:31:67:f5:47:f6:5f:ed:af:
33:0b:41:52:45:16:40:47:7e:12:2a:77:0b:99:44:
a2:ed:1d:5c:39:73:62:74:df:f2:a8:31:ca:14:c8:
a0:1b:d9:5a:42:ed:7c:f7:dd:3b:15:d5:9c:5e:86:
86:b8:30:c6:6e:c6:d5:e0:64:ce:21:09:8d:f2:78:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FB:07:E2:5B:48:5A:B8:03:58:9C:17:FD:F1:67:DD:1F:61:78:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C02231A2B88F11F0A060E3E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.97.0-154.200.98.255
Signature Algorithm: sha256WithRSAEncryption
ca:f9:5b:98:c1:47:44:b9:06:57:ce:f4:44:55:81:a1:a1:bd:
29:ea:49:cc:ca:fc:b4:26:48:fd:6a:61:8b:8c:29:f5:50:d3:
b6:23:31:64:61:f4:51:7f:e0:22:92:cb:8c:d1:78:ba:72:8e:
ad:c9:1c:11:b8:e8:ae:61:6d:b2:57:a5:8d:b3:0e:8d:ba:b1:
d2:50:78:a9:48:aa:4f:fd:62:50:df:1f:c9:78:7b:8f:4b:71:
eb:36:f0:81:63:4b:12:f2:06:0a:fc:cb:29:3b:6c:bf:83:08:
a6:6c:68:8e:12:9a:95:97:7a:1e:7d:74:b2:3c:8f:b6:87:28:
72:59:ae:d8:88:c1:52:c8:01:45:b6:ee:05:a5:2c:31:47:e3:
6a:b1:a3:fa:00:78:3c:ea:2c:58:ff:9d:08:f2:8c:1b:42:30:
60:57:4e:d5:e5:07:a5:db:2b:89:b7:3f:f6:4f:5f:9a:be:1e:
a7:ee:f8:39:57:11:49:d3:2f:54:76:bb:6d:35:98:9d:d5:36:
01:f2:e1:74:10:5a:81:12:04:b3:03:42:50:c9:10:86:de:c2:
68:25:9d:5a:8c:38:be:e7:7a:74:ab:c4:94:a7:89:a5:85:6a:
78:c2:81:d4:af:3e:66:1d:cc:97:f0:15:95:77:a1:10:77:03:
bc:dc:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:18:51 2025 by rpki-client