Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C56FA39AB31411F0834CC4D2DAE4EC9C.roa
File: C56FA39AB31411F0834CC4D2DAE4EC9C.roa (raw, json)
Hash identifier: h9lsuRVaDFGOWs+dxpVSO28yneN2KH5aCH+RD1yX5Ok=
Subject key identifier: 5B:78:E2:92:4A:F0:44:6D:2C:DC:16:B1:1B:41:6C:30:BF:A4:A4:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A50C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C56FA39AB31411F0834CC4D2DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 09:10:24 +0000
ROA not before: Mon 27 Oct 2025 09:10:20 +0000
ROA not after: Fri 30 Oct 2026 09:10:20 +0000
asID: 38638
IP address blocks: 154.194.51.0/24 maxlen: 24
154.194.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107788 (0x1a50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 09:10:20 2025 GMT
Not After : Oct 30 09:10:20 2026 GMT
Subject: CN=68ff3700-f23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f4:38:b8:9e:9e:e5:90:25:28:be:c1:0a:78:
99:52:ed:db:d6:15:bd:bb:3b:e8:fa:c3:29:13:0f:
f8:26:43:b1:31:f9:62:9e:a9:49:97:f0:bc:c0:1a:
48:da:c8:8b:fa:b2:5f:9c:6f:8f:49:dd:52:e7:f8:
80:dd:b6:3b:49:55:2a:fa:35:e5:d3:e7:45:60:98:
03:8d:5c:cf:69:67:e0:20:44:23:97:37:99:eb:90:
7b:30:c4:1d:e7:52:33:61:0f:66:36:db:35:df:88:
1e:e3:ca:86:1c:4a:84:be:ed:5c:3d:6f:07:b7:ac:
fb:fd:14:7f:91:84:45:92:3c:8d:81:9a:c7:99:19:
f4:25:b6:7a:18:31:9f:11:43:2c:0f:ea:57:22:49:
e3:bc:d1:91:a9:14:19:ca:0f:95:76:70:23:b1:f9:
5c:6b:98:4b:3f:88:3e:e2:2d:4a:69:12:3f:a9:2a:
43:6e:5a:6c:49:4b:7e:57:ce:11:14:68:ad:cc:b3:
a1:14:e4:09:08:76:12:61:d8:d4:5d:02:c8:dd:0b:
8f:21:9e:74:57:90:05:c2:59:98:82:30:4a:5d:b8:
4d:26:a7:b9:a3:82:44:e8:b1:6b:2a:3a:f9:a3:e1:
31:b5:20:ce:1b:60:0f:4c:10:57:66:96:6a:28:95:
40:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:78:E2:92:4A:F0:44:6D:2C:DC:16:B1:1B:41:6C:30:BF:A4:A4:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C56FA39AB31411F0834CC4D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.51.0/24
154.194.62.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ed:cb:39:d7:4d:f4:ba:98:5c:d8:74:10:49:ed:17:40:ea:
f3:fc:58:d4:0e:16:60:77:6d:74:2b:c0:f5:fa:7a:42:5e:51:
5c:60:05:ba:ea:80:00:47:68:de:53:5d:50:25:fe:9f:53:b5:
70:fc:24:d9:46:e8:e6:04:17:0e:2f:49:e4:b6:f9:33:cc:1c:
d1:23:45:3c:8b:21:c1:f5:70:33:37:0a:33:8e:7f:a6:48:51:
64:2e:af:f9:db:fd:b1:c5:96:4a:9d:72:ec:d4:99:5c:dd:ea:
6a:09:75:5f:11:79:0e:00:5f:46:df:4c:a1:2e:5e:ba:ea:f8:
f1:54:6c:b3:e6:b8:4d:6f:3e:68:a7:93:02:b0:c4:62:c9:11:
26:b8:08:42:22:cc:41:67:a6:6f:d9:15:e3:de:58:6f:df:45:
4e:d6:fb:1f:f7:79:77:c4:66:26:bc:49:f0:3a:9f:6e:9f:c2:
cb:6d:77:e3:e9:2c:cd:a6:19:6a:d4:7a:2f:d2:b3:0c:c6:60:
66:7c:aa:b6:0a:f1:11:aa:60:3f:e7:51:97:cc:16:70:6f:ac:
97:6d:ac:ed:5c:06:06:f7:f5:a2:b6:84:95:71:5c:9f:e6:28:
5d:d9:1d:05:e8:80:c4:2c:de:f0:6e:31:f5:20:1f:89:1b:34:
3d:88:b1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:36:30 2025 by rpki-client