Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07595BB4834211F09F015E82DAE4EC9C.roa
File: 07595BB4834211F09F015E82DAE4EC9C.roa (raw, json)
Hash identifier: ImDOudJh6Am3P9wgb6CQgKFVquPepJlS6vap2oiPM80=
Subject key identifier: 1D:FD:E7:9B:81:6C:CB:B8:EA:40:77:FF:F3:7A:8F:6F:9A:DA:B9:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019883
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07595BB4834211F09F015E82DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 12:33:27 +0000
ROA not before: Wed 27 Aug 2025 12:33:20 +0000
ROA not after: Fri 10 Oct 2025 12:33:20 +0000
asID: 138915
IP address blocks: 154.90.46.0/23 maxlen: 24
154.93.34.0/23 maxlen: 24
154.93.36.0/23 maxlen: 24
154.93.38.0/23 maxlen: 24
154.93.40.0/23 maxlen: 24
154.95.69.0/24 maxlen: 24
154.95.76.0/24 maxlen: 24
154.95.77.0/24 maxlen: 24
154.95.78.0/24 maxlen: 24
154.95.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104579 (0x19883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 12:33:20 2025 GMT
Not After : Oct 10 12:33:20 2025 GMT
Subject: CN=68aefb17-7370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:bc:98:ab:df:89:a3:30:84:32:b2:1a:b0:
a1:2f:b9:bf:a9:e5:e2:dc:94:59:f1:e9:a6:cf:e3:
fc:f1:c3:eb:33:ee:f7:f2:45:3c:e6:85:3d:7a:89:
cf:77:e7:1e:33:bd:6e:3d:0d:c3:98:37:68:59:35:
1e:8f:32:3e:e7:df:4b:e9:fb:a7:ef:a1:97:07:44:
39:ba:e2:31:ca:89:ee:54:dd:8f:ca:23:53:0f:a4:
31:38:37:7c:5b:bc:df:a8:2e:9a:b4:2a:0b:12:2d:
d1:40:b5:5e:f5:fc:6e:72:b9:8f:7b:c0:cc:88:03:
49:8e:b4:9e:85:92:3e:0f:42:6e:ae:45:0e:4a:3d:
91:c2:74:48:df:ec:bf:11:e4:10:34:29:d2:2d:a1:
3a:6e:12:45:4a:b7:c8:2d:0e:9a:6c:3c:9e:c4:a4:
39:b4:85:87:19:d9:09:fa:0f:29:49:a3:d8:f6:a9:
77:76:18:a0:75:2e:01:0d:b4:57:d4:32:91:e4:56:
38:6f:e6:ce:96:90:39:03:f2:c1:9f:34:ac:c6:b5:
6b:45:86:1f:92:56:7e:2d:95:90:88:39:eb:64:6c:
fc:0f:b5:8c:08:15:ea:2d:a6:b5:86:71:ec:46:af:
35:95:f0:28:22:74:fb:c6:14:07:50:3e:8a:7e:f3:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FD:E7:9B:81:6C:CB:B8:EA:40:77:FF:F3:7A:8F:6F:9A:DA:B9:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07595BB4834211F09F015E82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.46.0/23
154.93.34.0-154.93.41.255
154.95.69.0/24
154.95.76.0/22
Signature Algorithm: sha256WithRSAEncryption
89:54:24:2a:0b:2c:df:28:db:92:b4:65:2f:a4:8c:e3:2d:22:
77:e8:83:e8:3c:0b:fa:6e:d3:b1:12:87:d7:0e:32:a6:a8:f0:
11:a2:8b:4c:ee:de:8f:42:68:18:9f:9c:54:82:c5:36:02:43:
ee:67:a5:bc:3c:8b:a4:92:4a:cf:d5:5b:18:a9:ec:24:1e:fb:
5a:7a:ac:b6:36:79:f8:30:54:5e:41:12:a4:91:de:77:26:16:
45:0c:02:03:9a:7d:50:23:cb:21:5b:65:cd:a3:cb:b9:0c:57:
1c:b1:de:a8:57:5a:96:91:91:6f:5d:c3:76:38:4f:3f:95:64:
c9:7a:73:c5:f0:29:5b:e1:a4:c1:89:f8:17:c0:0e:a3:b1:0a:
aa:c8:bd:67:c1:fd:1e:97:10:9f:32:a1:3f:bc:51:69:23:fc:
30:fd:a1:97:72:f5:90:b4:d9:14:87:f9:96:dd:70:ae:b9:a9:
1e:99:60:8c:56:19:95:26:6d:cc:b9:aa:6e:70:d4:dd:45:fd:
6e:41:e9:3b:dc:bf:d2:8b:9d:fd:b4:91:85:ff:a8:a8:96:24:
0a:ab:55:30:93:92:61:9e:5e:fb:b3:7d:1c:28:2c:01:f8:25:
7e:ce:d2:41:39:3f:fd:9c:03:70:09:00:17:aa:83:22:73:6d:
e6:20:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:38 2025 by rpki-client