Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/094D722A804A11F0956AC5B0DAE4EC9C.roa
File: 094D722A804A11F0956AC5B0DAE4EC9C.roa (raw, json)
Hash identifier: bX0gkbUOPrHlIc0KjewLIJNiRLYT+oATMlXliboRRys=
Subject key identifier: A1:DE:74:AC:4B:CD:27:56:C5:3A:12:83:5A:6F:22:A6:6A:0F:30:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01961B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/094D722A804A11F0956AC5B0DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 17:53:12 +0000
ROA not before: Sat 23 Aug 2025 17:53:08 +0000
ROA not after: Tue 30 Sep 2025 17:53:08 +0000
asID: 9304
IP address blocks: 154.90.134.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103963 (0x1961b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 17:53:08 2025 GMT
Not After : Sep 30 17:53:08 2025 GMT
Subject: CN=68aa0008-1d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:cf:7d:de:8c:7b:09:be:02:43:5f:15:73:
f1:e4:88:4f:a5:a3:9f:f4:38:67:d0:19:42:f3:f5:
e4:e6:04:07:85:98:9a:36:6f:d6:90:46:ed:e0:2d:
52:13:56:e3:72:97:b6:7b:53:23:cb:18:a7:cd:b7:
4c:8a:25:f3:ec:ec:5f:e7:0b:19:f6:92:0f:a3:18:
f2:97:e6:3b:d6:0e:be:a1:98:c2:bf:90:0e:02:31:
f5:af:d1:e6:10:33:ed:b3:93:94:e8:ca:8d:7e:f1:
79:19:b4:53:c5:2a:3d:ae:a9:51:33:5e:49:28:29:
22:73:27:80:38:bc:53:b7:4e:fe:0e:58:e3:9a:5e:
04:de:8b:b8:24:a1:19:1a:38:2a:dd:60:4b:a7:5a:
1c:e3:c2:30:42:94:72:ed:d3:ab:c8:62:2f:bb:4c:
a1:28:70:55:ce:ee:3a:46:c7:8e:47:51:a5:8d:07:
36:96:b3:4e:e8:f8:3c:8c:f3:e3:bd:29:0a:d9:c0:
cb:50:3f:b3:cb:a1:e4:b4:98:68:25:d1:a3:0a:5c:
bf:db:95:60:68:e2:db:bd:f4:2a:20:36:03:f9:f3:
02:23:4b:55:a1:c8:43:f0:e9:ec:de:7a:31:85:63:
ae:8b:57:bc:d8:e2:c7:ea:bf:d6:3f:18:d6:5e:cd:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DE:74:AC:4B:CD:27:56:C5:3A:12:83:5A:6F:22:A6:6A:0F:30:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/094D722A804A11F0956AC5B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.134.0/24
154.193.35.0/24
154.196.179.0-154.196.180.255
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.131.0/24
154.200.140.0/24
154.200.142.0/24
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:66:58:db:cb:c4:76:04:27:a1:06:7a:f1:2c:a4:e4:c6:6c:
09:61:ed:7b:28:1c:e6:6d:c9:e8:d0:5c:13:54:6f:d5:1e:1c:
67:b5:00:14:90:85:24:02:8f:75:12:53:7e:35:0a:22:28:c8:
36:38:48:14:3b:0f:21:8f:29:74:95:a6:91:0c:cc:1e:18:96:
54:40:d3:c3:55:86:3a:82:83:e6:3c:f1:46:f1:5c:c9:c1:79:
96:0f:30:04:c6:2f:52:8c:a0:7d:9b:09:09:2d:03:a0:d5:0e:
23:6c:84:c7:36:03:aa:67:1d:df:c8:b2:60:55:c6:7b:27:f8:
93:a2:aa:45:9a:b5:92:46:06:43:0f:c0:ac:1b:b7:cc:c2:46:
44:23:14:f8:30:0c:48:39:66:d3:aa:ae:98:f3:27:82:07:d8:
ac:de:47:ff:60:13:d9:eb:c3:3e:4f:78:92:0d:28:01:e3:8b:
da:78:f1:82:cf:22:73:a7:1d:d4:f1:05:a1:c7:7a:19:56:e5:
a9:ff:4d:0c:83:ae:48:8a:c0:ac:25:cf:5b:42:04:ff:8c:fb:
72:55:70:0d:84:cc:66:b9:aa:53:4a:1d:87:84:5b:44:59:9f:
04:6a:07:6b:b8:45:25:15:7d:a5:24:23:19:37:63:2f:30:a2:
c1:bd:0d:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:48 2025 by rpki-client