Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/087A818E59B311F0882BB7C1DAE4EC9C.roa
File: 087A818E59B311F0882BB7C1DAE4EC9C.roa (raw, json)
Hash identifier: UD7/vVdO6qyOwbpX+KebZOgZrC023W9XKeoAY8IzGzI=
Subject key identifier: 95:52:A3:14:71:FF:BB:70:5A:17:04:65:22:46:D5:5E:19:C5:17:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/087A818E59B311F0882BB7C1DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 15:16:33 +0000
ROA not before: Sat 05 Jul 2025 15:16:28 +0000
ROA not after: Fri 17 Jul 2026 15:16:28 +0000
asID: 400619
IP address blocks: 154.193.192.0/18 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.118.0/23 maxlen: 24
154.202.120.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101138 (0x18b12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 15:16:28 2025 GMT
Not After : Jul 17 15:16:28 2026 GMT
Subject: CN=686941d1-7f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:0b:3a:ee:29:eb:13:0b:ae:75:c9:44:f0:
9c:b6:bb:81:ed:98:67:08:1b:18:a1:b7:7b:5e:c9:
e3:b8:af:f1:1d:61:81:2a:a6:0e:dd:3d:97:f4:3b:
bc:51:10:7e:e8:2e:c7:ca:6b:ae:c7:ed:bd:63:d0:
f7:8c:73:83:10:9a:80:53:4b:86:be:67:c1:1b:e9:
ce:36:33:fd:ab:9b:2c:aa:86:50:a4:1c:be:2f:e7:
03:0e:5d:d9:ff:26:60:c2:75:dd:af:46:15:d5:a9:
23:10:68:b8:42:70:01:25:b1:f6:69:ba:d8:a4:49:
b6:8a:69:91:80:b3:24:92:53:87:51:99:29:2e:5b:
c8:1c:2b:b0:93:aa:6e:05:5a:c5:6f:a4:fa:fb:3e:
b9:3f:0d:98:f4:b0:ef:d6:2c:66:d6:3e:42:64:95:
ab:2f:da:65:7a:1c:f8:85:b4:2d:5b:d0:c7:08:65:
95:a3:ee:f8:9d:17:29:11:e3:5a:2e:ac:11:0b:96:
6c:09:41:ac:ab:67:63:47:a7:ba:12:8c:77:7a:54:
e5:ca:43:23:0f:6d:00:df:59:52:8c:1b:ff:c2:a1:
5b:2f:76:11:17:72:39:76:68:05:2f:0e:4c:2c:91:
0e:f5:37:42:af:1e:77:f4:fa:fb:d9:a3:d9:13:2d:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:52:A3:14:71:FF:BB:70:5A:17:04:65:22:46:D5:5E:19:C5:17:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/087A818E59B311F0882BB7C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.202.117.0-154.202.127.255
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
07:40:b7:5e:cf:42:45:f0:93:b1:ea:0a:c9:1f:65:66:34:3f:
d0:9f:b7:0d:8c:50:3a:1c:f4:f5:cb:61:73:56:1c:a9:2e:c5:
0b:ee:97:da:8c:d4:82:8e:2b:98:fb:d8:c7:55:ff:6e:e6:e9:
ac:94:41:a8:b7:a2:11:b9:8c:8f:d8:7c:36:93:05:f1:26:76:
46:c7:cb:74:dd:e8:f5:aa:6f:49:57:a5:26:bc:02:6e:da:78:
fd:51:2d:91:eb:f6:c6:33:ff:97:b3:f9:2a:59:7e:29:36:f2:
4a:02:2a:5f:dd:29:55:eb:e4:53:e0:df:58:48:06:1f:0c:92:
5b:3e:a8:0b:dd:ff:e7:82:08:9f:b6:0e:10:3f:37:c0:0a:38:
64:a8:b4:36:c6:3d:4c:c4:58:22:0e:fc:9a:5e:b5:34:ca:58:
34:26:5d:63:18:31:2a:89:93:0b:f3:1f:08:85:f1:fd:62:cb:
de:73:fd:59:d1:23:49:d4:d5:87:bf:08:24:4e:fe:9e:0e:9e:
4e:62:5c:aa:b9:bf:4e:14:dd:53:35:fd:28:57:51:52:87:b8:
db:65:d1:4c:d6:35:b3:2d:b9:cb:9f:a4:9f:f9:d0:41:1a:a6:
4e:21:46:fa:55:82:da:89:0c:32:eb:f9:fa:d4:af:c2:3e:a3:
c8:8e:81:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:03 2025 by rpki-client