Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B35C7F68FB111F0A17E079ADAE4EC9C.roa
File: 0B35C7F68FB111F0A17E079ADAE4EC9C.roa (raw, json)
Hash identifier: o6eL6iH7AKAX8/Xu1NBUGboBOj+0Em6utL8waGS6Yi0=
Subject key identifier: DB:26:AA:EA:91:ED:DC:C0:C8:60:55:28:EE:99:32:56:91:2E:82:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B35C7F68FB111F0A17E079ADAE4EC9C.roa
Signing time: Fri 12 Sep 2025 08:18:21 +0000
ROA not before: Fri 12 Sep 2025 08:18:16 +0000
ROA not after: Sat 25 Oct 2025 08:18:16 +0000
asID: 54801
IP address blocks: 154.213.212.0/24 maxlen: 24
154.222.77.0/24 maxlen: 24
154.222.78.0/24 maxlen: 24
154.222.136.0/23 maxlen: 24
154.223.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106358 (0x19f76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 12 08:18:16 2025 GMT
Not After : Oct 25 08:18:16 2025 GMT
Subject: CN=68c3d74d-97af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:3f:94:ae:b6:23:04:f3:5c:fc:a1:10:cd:
29:24:81:66:75:ef:43:42:08:2b:4e:22:6f:f4:43:
0a:87:e2:cc:3a:48:52:e9:2c:72:d9:9d:bc:01:1a:
97:81:8d:fc:1e:17:01:93:da:2c:3e:b4:72:21:d6:
ad:3b:47:25:63:9f:59:67:8e:9d:69:98:fe:9c:05:
9c:89:29:da:e5:f6:79:75:7d:ce:80:17:01:b8:55:
02:41:e1:eb:db:94:6e:cd:cd:31:51:19:71:64:cb:
d3:de:78:49:05:9c:c4:12:a3:8a:0e:24:d3:09:65:
cf:f1:97:f9:95:55:fc:41:e1:4c:f3:ad:3f:c2:07:
52:7a:c9:e4:ff:a4:e3:18:74:e3:77:3d:66:6d:1b:
06:ce:1c:8f:bc:05:f9:c7:0a:5a:a7:98:e9:1f:75:
08:54:b3:a0:ff:09:d5:67:32:72:1e:e7:c5:5b:36:
fd:b7:54:32:c9:96:8d:39:e0:37:be:5c:88:4b:d8:
3f:e7:fb:df:ae:22:22:0a:05:10:53:f4:ec:34:10:
35:31:b0:46:4b:b9:21:8b:2a:21:46:91:fa:77:bf:
74:15:bb:5e:9d:77:27:57:75:20:7f:42:0a:fa:42:
82:c8:12:67:31:f8:3b:8f:e2:2b:a7:a9:75:a9:8f:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:26:AA:EA:91:ED:DC:C0:C8:60:55:28:EE:99:32:56:91:2E:82:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B35C7F68FB111F0A17E079ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.212.0/24
154.222.77.0-154.222.78.255
154.222.136.0/23
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:5d:fe:2a:e6:83:86:95:4e:7a:e8:a9:9d:0a:1d:be:2e:ca:
7f:89:99:c4:76:3d:9b:f3:94:31:34:89:fa:ed:36:1a:b6:5f:
74:d2:1f:38:d7:b5:55:f5:d6:20:02:29:94:f2:28:08:6e:5c:
52:59:8b:39:be:d7:da:f8:a7:59:0b:38:a8:88:e1:34:d9:5b:
1b:35:11:71:96:3a:28:28:ac:bb:55:b3:07:5c:8c:6d:68:14:
06:82:4c:d3:42:ee:9d:ef:0c:d6:87:17:2f:4c:df:ec:4c:69:
4e:7d:ae:2c:ae:0c:3c:13:b5:3d:2a:30:48:af:36:a9:50:cf:
ac:59:6e:5a:39:34:3f:2c:7a:b2:7a:6b:96:74:21:be:89:1b:
37:5b:ce:2b:c4:b0:f1:40:24:2d:99:ea:f6:57:c4:8f:88:c9:
dc:61:25:d7:ba:6d:b8:bf:f8:68:e4:00:4b:bc:45:a4:50:54:
68:c9:09:bc:2d:1d:bd:da:5d:a7:e1:50:fd:a7:bd:45:6c:09:
c8:08:f8:03:fd:03:af:ca:98:fd:7d:15:e3:ab:60:e7:a6:b0:
7c:89:f5:b6:12:d9:84:5f:79:13:3d:8f:ab:de:b8:fd:f3:6c:
26:49:7b:c1:15:f7:4c:54:60:2f:d6:97:8c:23:ec:f4:dc:ed:
18:5e:51:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:11 2025 by rpki-client