Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5D15C3CB3D611F094506AB8DAE4EC9C.roa
File: F5D15C3CB3D611F094506AB8DAE4EC9C.roa (raw, json)
Hash identifier: lzaRed2kyDJeXTdmxCS3Z5dANtY63BWI45MdnsTIxFE=
Subject key identifier: 19:9E:4F:01:D6:02:E9:4D:B4:5B:36:21:9C:20:77:01:AF:AF:47:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5D15C3CB3D611F094506AB8DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 08:20:28 +0000
ROA not before: Tue 28 Oct 2025 08:20:23 +0000
ROA not after: Thu 04 Dec 2025 08:20:23 +0000
asID: 20326
IP address blocks: 154.83.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107994 (0x1a5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 08:20:23 2025 GMT
Not After : Dec 4 08:20:23 2025 GMT
Subject: CN=69007ccc-afb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:6a:7d:66:9b:82:7a:56:f7:e4:eb:4a:83:
9c:cb:23:b3:6a:44:28:4d:4a:f8:d1:08:22:2c:51:
0f:e2:94:9e:01:10:44:89:62:1b:51:ca:b1:42:b8:
e3:3e:b7:17:b0:5b:10:88:c7:1d:c5:f0:39:63:79:
0c:b9:89:d1:2c:ff:5c:85:79:c6:f3:f3:ba:7c:76:
c6:60:79:df:41:10:ac:af:d6:49:19:4e:25:fe:c9:
94:29:4b:d7:db:a4:b6:ef:50:12:96:e5:56:b0:00:
c3:3a:57:f4:3e:49:b4:1f:09:6f:ab:11:eb:51:cf:
99:c0:c2:d7:4d:e4:18:19:44:2f:c0:a4:fd:4d:cd:
6b:7f:99:96:ec:90:57:31:22:c4:1f:f8:54:f5:f7:
a3:d8:a5:d1:eb:a1:37:19:cb:fc:f6:e5:c0:08:f9:
b4:27:e8:9f:0f:2a:8d:c3:04:1f:78:38:3e:ee:ab:
54:6b:0e:a6:26:ff:47:f7:e1:59:7d:f3:7e:fb:32:
3f:60:a1:bf:79:19:81:e0:39:67:f4:94:84:63:ed:
90:ac:2d:fd:89:01:dc:b0:8c:83:4f:d3:d2:94:76:
09:78:1d:d0:81:df:9f:8a:ff:68:3b:8e:79:ee:9f:
4d:95:2b:19:04:8f:cd:5b:2b:3a:3a:6d:a8:44:e9:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9E:4F:01:D6:02:E9:4D:B4:5B:36:21:9C:20:77:01:AF:AF:47:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5D15C3CB3D611F094506AB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:75:d7:99:be:59:3c:fb:9d:ef:df:ce:55:1e:d9:f0:29:bf:
4a:38:43:08:39:fd:cc:22:4b:9a:11:e1:9f:a3:08:4d:7c:3c:
5b:0b:51:56:e7:6d:5a:b7:cb:21:cf:7a:c6:d8:9a:b6:b2:c4:
51:dd:1c:2c:dc:b3:f6:fe:96:2f:86:8b:9d:10:49:65:fd:24:
5a:bc:00:83:70:47:9a:d3:11:a1:1b:2d:e7:d4:41:e6:a5:ec:
e7:9d:e5:7f:d1:c5:f9:8e:af:9e:bd:a3:fb:89:19:e7:8a:52:
44:fc:d7:4e:1c:1f:60:c5:92:c7:9d:09:d4:43:97:6c:37:c4:
2f:a4:d8:89:be:a9:37:f5:89:d0:a8:33:e4:87:7a:22:72:02:
11:59:a7:df:61:a0:f0:5f:13:17:80:8b:85:f0:81:9b:44:ff:
4c:f3:f9:25:00:66:15:c6:61:25:67:2e:b6:67:9b:95:52:29:
b0:a6:f6:0e:a0:3c:e5:6c:d1:bd:26:a6:6c:84:ba:1b:88:e5:
a2:70:9d:0a:e5:52:a7:60:cd:7b:51:f4:35:77:93:c7:37:84:
22:37:c2:15:ae:a3:25:6d:64:4b:1a:2c:46:83:20:60:aa:26:
bc:29:93:74:72:b9:93:fd:59:0f:77:73:53:03:d1:d9:96:d2:
9a:7a:f0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:25:29 2025 by rpki-client