Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4FD0C8AAA6C11F088C29C87DAE4EC9C.roa
File: E4FD0C8AAA6C11F088C29C87DAE4EC9C.roa (raw, json)
Hash identifier: JcA/4Fs53stsQcfVgjaF752yxPIzIzSDVjPbaCLuPI8=
Subject key identifier: 22:32:26:45:64:D0:27:7A:FC:A1:FB:07:E2:FC:AE:78:A8:4E:3D:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4FD0C8AAA6C11F088C29C87DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 08:48:33 +0000
ROA not before: Thu 16 Oct 2025 08:48:28 +0000
ROA not after: Sat 25 Oct 2025 08:48:28 +0000
asID: 23764
IP address blocks: 154.85.14.0/24 maxlen: 24
154.85.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107477 (0x1a3d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 08:48:28 2025 GMT
Not After : Oct 25 08:48:28 2025 GMT
Subject: CN=68f0b161-fd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:6f:55:26:6f:ea:e1:7b:68:b3:6f:18:cf:
66:b2:c8:52:79:e6:ae:00:f9:dc:fb:75:a0:d8:65:
68:f1:cb:35:87:a5:f4:88:c6:bc:53:8f:80:6c:70:
bb:84:3f:2a:f7:81:6d:50:fc:af:a2:6a:a1:c3:65:
0d:82:1f:08:3b:9d:80:a6:7c:14:06:64:55:d4:b5:
0d:d2:98:53:77:2a:08:70:58:f7:ac:88:dc:7e:5c:
01:17:77:57:c8:3f:cc:4a:94:90:4b:21:28:11:1c:
f7:06:a2:80:34:62:9c:55:1f:dc:f3:a7:f8:92:e5:
1d:5c:4b:67:77:20:b1:75:23:8b:c3:3f:e4:13:39:
6d:6a:3f:8d:1f:94:ff:87:fc:0b:49:af:44:4e:85:
5d:66:ef:4d:3f:f9:d7:5f:5a:05:b0:af:64:22:7a:
f9:e8:a4:f2:69:ae:0b:87:59:60:a6:d5:c3:eb:d9:
95:38:27:7f:65:5e:18:44:5d:d4:f6:07:0a:c1:71:
2e:74:e4:25:f5:61:50:9b:3e:1f:e9:38:d3:51:ae:
d4:78:6e:b3:7f:a1:b7:cc:d1:fb:cd:e4:e1:37:81:
00:86:fa:91:2d:22:a1:3b:9f:9a:0a:f9:29:86:5b:
18:20:f6:9a:6e:60:a6:cd:5e:78:aa:63:80:86:ea:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:32:26:45:64:D0:27:7A:FC:A1:FB:07:E2:FC:AE:78:A8:4E:3D:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4FD0C8AAA6C11F088C29C87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.14.0/23
Signature Algorithm: sha256WithRSAEncryption
51:0e:41:da:e4:ee:6c:38:a9:0a:b4:0d:3e:ce:cc:e6:0c:4c:
8f:31:92:00:bd:92:5a:1b:c0:86:55:9a:4a:74:fe:63:71:de:
c7:1d:87:0b:af:6a:36:27:9f:a7:17:d5:ca:06:c7:24:01:5d:
51:58:05:3b:40:b6:7e:37:c1:73:a5:3a:68:44:95:e3:dc:25:
b7:a9:46:f1:d2:6f:19:1c:a8:cb:fd:5d:f3:a8:7c:84:04:02:
8c:b7:55:fa:ba:4d:00:19:51:45:f2:16:92:19:64:34:2f:fc:
eb:50:cc:4c:85:a8:67:f4:80:c0:9f:37:b7:7c:9a:67:02:27:
5c:ee:f5:8e:a6:a5:7f:d0:23:80:b6:29:26:b9:c3:70:a9:66:
bd:87:33:7a:39:c5:e3:12:1a:33:70:ea:fc:0f:8c:5f:1d:db:
b1:88:4e:a0:34:ec:29:ac:d9:e8:c8:f7:75:1b:26:19:4d:9b:
ee:ac:ae:91:37:7d:13:a1:a3:ca:f6:7d:25:58:e7:99:14:04:
49:36:34:7c:7b:c2:1c:9b:53:91:37:99:24:a5:df:3c:2b:10:
c7:c2:e2:ed:05:9e:e4:6e:1c:1f:c6:b6:08:8a:0d:46:10:51:
7f:e5:e4:84:ef:11:74:db:6a:fd:bd:8e:b4:b6:27:c4:b6:2f:
9f:ee:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:09 2025 by rpki-client