Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E33EBA90AE6011F096C4C49FDAE4EC9C.roa
File: E33EBA90AE6011F096C4C49FDAE4EC9C.roa (raw, json)
Hash identifier: YRrvvH8YIHKstXuNh+XtznaqjLrBEZ8GFPOfTItrGbo=
Subject key identifier: F1:61:11:1E:E5:1C:32:E7:F6:A5:60:E8:C1:EF:4A:B1:0D:71:14:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A47E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E33EBA90AE6011F096C4C49FDAE4EC9C.roa
Signing time: Tue 21 Oct 2025 09:32:40 +0000
ROA not before: Tue 21 Oct 2025 09:32:34 +0000
ROA not after: Thu 27 Nov 2025 09:32:34 +0000
asID: 17561
IP address blocks: 154.82.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107646 (0x1a47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 09:32:34 2025 GMT
Not After : Nov 27 09:32:34 2025 GMT
Subject: CN=68f75338-de4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:59:5c:d2:a7:6d:79:6d:15:80:2f:c4:a1:
da:3c:41:7f:77:95:cc:bd:4e:86:5f:41:2e:f7:50:
d8:ad:23:69:ec:b6:80:5a:8f:8f:42:22:02:c1:56:
fc:bd:c3:68:87:be:f3:c6:19:b0:90:34:de:f2:e3:
3f:3f:a0:43:58:3e:d7:68:ac:03:c5:97:f6:f5:e5:
c2:d3:5a:b3:48:4c:8a:65:3a:bc:5e:d6:69:90:11:
39:0b:c3:34:8f:06:34:e4:98:d2:03:37:80:2a:42:
c4:15:2f:aa:20:e8:a1:d2:b6:63:07:3c:9a:be:e3:
f9:71:82:39:41:3e:24:4d:4a:97:2c:da:d3:81:2e:
58:0e:47:23:d8:21:34:7e:a4:2d:64:20:81:a4:91:
85:48:d8:d0:d1:96:95:6b:eb:d8:0f:f8:5f:92:57:
1d:da:23:4f:75:d1:f8:05:20:88:03:f4:9e:77:02:
9b:3a:85:61:df:c3:45:17:a1:b9:df:2f:71:0a:09:
e5:95:7e:1b:fc:24:3c:f4:df:31:3d:2a:c9:bb:30:
0e:ec:d6:c1:ba:49:d4:da:64:fc:d2:f0:91:68:06:
e3:55:ec:1c:71:68:d4:d3:58:9f:f5:d6:27:8d:03:
49:dc:6d:7a:8a:13:1e:ab:b6:c2:de:3f:5d:08:07:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:61:11:1E:E5:1C:32:E7:F6:A5:60:E8:C1:EF:4A:B1:0D:71:14:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E33EBA90AE6011F096C4C49FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.154.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:e4:0d:05:9c:32:c1:56:a3:91:25:b1:c3:ab:3f:b8:58:45:
8d:3d:dd:74:11:86:e6:5d:de:ac:49:d0:2e:46:16:ef:9d:ed:
1e:a4:63:44:40:9e:05:18:19:5a:0a:69:29:24:c9:b8:2d:02:
4f:3b:13:b6:09:91:18:62:42:25:25:3d:58:b0:75:6d:ad:03:
0a:e3:c1:72:13:3e:6b:a2:2e:b2:d2:d5:5d:6c:db:09:78:70:
e2:14:b1:0d:ac:66:b0:9a:13:89:c3:b1:a0:e0:1c:34:08:26:
d4:f0:74:ec:7f:e7:45:8a:39:cf:e4:3e:f5:68:6c:e9:aa:03:
3e:f9:f1:50:3b:b7:b6:b8:b5:2b:85:dd:b1:33:a2:9c:07:75:
9c:ac:80:6d:01:83:2d:28:dc:35:ef:e4:81:2f:1e:59:a6:d4:
51:f7:b7:5b:7c:7a:e4:af:5c:cb:07:61:91:a1:59:57:ed:06:
80:1c:8c:8b:34:11:23:96:ee:94:68:6e:f8:00:9a:a2:b3:d9:
bf:4d:45:8a:f0:4b:cf:e8:ee:69:82:d9:0f:ab:63:5b:7b:fc:
10:97:a5:94:08:c7:e0:e8:42:5d:2c:29:a4:e5:03:42:90:bd:
12:a9:40:ec:28:df:f1:61:56:90:5b:43:9b:0a:6a:7e:1a:94:
07:d6:cb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:21:38 2025 by rpki-client