Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1909DE4AF1B11F0BDE8E2D1DAE4EC9C.roa
File: C1909DE4AF1B11F0BDE8E2D1DAE4EC9C.roa (raw, json)
Hash identifier: R0S6vZpliktLMx5qVWSWsMatK+9gZjIyYoRxuoYNhg8=
Subject key identifier: C8:60:3B:67:BB:25:50:5D:AA:56:14:84:E6:8F:14:08:08:53:4F:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A49B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1909DE4AF1B11F0BDE8E2D1DAE4EC9C.roa
Signing time: Wed 22 Oct 2025 07:50:20 +0000
ROA not before: Wed 22 Oct 2025 07:50:15 +0000
ROA not after: Thu 29 Oct 2026 07:50:15 +0000
asID: 135600
IP address blocks: 154.211.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107675 (0x1a49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 07:50:15 2025 GMT
Not After : Oct 29 07:50:15 2026 GMT
Subject: CN=68f88cbc-0c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:05:e3:dc:22:85:f1:20:dd:e7:d0:9d:b4:
b4:ce:2a:54:40:44:08:d8:61:b5:89:2a:e1:f1:c0:
98:5a:a1:cb:20:1c:90:7a:5d:f3:86:8d:00:00:d4:
e6:42:4f:43:8f:f6:97:3b:a7:41:18:0c:28:31:77:
03:f4:f3:9d:e2:32:ff:07:3f:ba:c0:c8:7d:05:b5:
a3:18:ae:92:45:4f:4c:b1:47:03:57:84:39:a4:26:
3f:84:2b:3d:0b:53:d5:db:6c:fa:12:c4:f1:03:69:
1a:b9:6e:5d:fd:f6:37:b8:5d:4b:f7:be:b3:e0:c3:
30:1a:0e:17:a2:66:56:73:c0:c1:85:c8:24:27:32:
76:3e:66:ec:ab:f4:73:98:ed:30:3e:ea:d0:36:35:
24:b8:75:78:cb:70:5d:e4:64:a7:99:17:d7:a4:d6:
69:9f:5d:eb:8e:9d:66:b5:d1:bc:4f:4a:8e:9c:22:
f5:8d:ef:17:17:42:e2:ee:d9:62:b7:ae:ce:b5:34:
e2:94:25:4c:ef:a9:aa:58:95:cf:8f:6d:76:fe:d0:
ce:32:8f:e1:01:54:72:b5:b6:65:a0:87:93:c9:71:
e0:c0:62:70:4b:25:7b:ab:9f:9f:ab:42:da:cd:2c:
e0:33:b3:0e:9d:ba:f2:d3:cf:c4:78:36:f8:43:ac:
1a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:60:3B:67:BB:25:50:5D:AA:56:14:84:E6:8F:14:08:08:53:4F:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1909DE4AF1B11F0BDE8E2D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.184.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:8c:9d:48:b2:62:ad:25:2a:5f:a7:67:ba:5d:3d:58:81:0f:
28:27:45:bc:d2:c4:ad:51:df:27:1e:bc:33:21:3a:ef:9a:86:
a2:24:14:51:c7:f7:93:21:da:f5:d2:76:20:85:e3:f7:f8:25:
ea:80:22:9a:54:bb:27:a1:cc:4a:43:1b:8e:d4:e8:a4:5c:6f:
b8:be:d5:1b:4b:a0:ce:a4:28:57:07:36:f1:df:85:16:a6:8f:
5e:28:38:1e:17:67:d2:db:cc:38:9c:b9:12:60:d2:97:59:20:
3d:07:e3:92:55:59:9c:a1:36:3c:66:21:e0:de:91:b5:de:fc:
84:28:76:f1:9b:11:78:e3:cc:7e:05:9d:73:2e:05:94:5b:90:
02:13:ce:12:49:0b:af:aa:51:40:36:b6:27:c9:d0:1d:c7:aa:
89:83:22:25:ce:f1:e6:19:41:7b:90:1e:28:4a:42:2a:1a:f5:
89:3e:b8:60:68:b4:02:f9:91:a3:29:e2:f5:8a:1c:b1:98:df:
92:04:8f:b3:bd:1e:c2:e4:c1:ac:31:be:e8:4d:5f:99:88:af:
93:4f:84:de:e2:00:4d:6a:a5:ea:9a:c5:79:7c:cf:3a:01:83:
1a:48:b1:7f:49:47:72:fe:9d:9b:be:22:b2:62:8c:e8:66:9d:
08:34:04:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:33 2025 by rpki-client