Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CDECA0AA42711F0995E62A3DAE4EC9C.roa
File: 0CDECA0AA42711F0995E62A3DAE4EC9C.roa (raw, json)
Hash identifier: uwAiwwGQDN1XtZLY0WW9LRQsvyIr3wxRZVHd+DraykM=
Subject key identifier: B2:68:65:76:D7:41:D2:02:EE:A6:78:B1:CA:C8:8F:B9:88:CD:B6:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CDECA0AA42711F0995E62A3DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 09:13:28 +0000
ROA not before: Wed 08 Oct 2025 09:13:23 +0000
ROA not after: Tue 11 Nov 2025 09:13:23 +0000
asID: 30781
IP address blocks: 154.217.176.0/23 maxlen: 24
154.217.184.0/21 maxlen: 24
154.217.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107199 (0x1a2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 09:13:23 2025 GMT
Not After : Nov 11 09:13:23 2025 GMT
Subject: CN=68e62b38-0b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:d2:b0:f9:d4:ea:f3:0b:b0:ed:06:b9:a0:
a4:aa:bf:5a:b0:4d:89:a1:a4:cd:c6:55:f9:d3:ce:
e1:99:75:68:34:d0:5d:ad:98:ab:dc:15:11:91:8a:
57:fe:c6:b1:5b:5b:b7:0e:9e:5c:30:12:c7:2d:06:
44:c6:03:ec:58:62:76:eb:de:a6:23:5b:22:fd:3f:
1c:00:eb:5c:8a:77:ff:6f:86:a0:33:e5:20:4a:18:
40:1a:b0:9d:df:73:3f:2b:41:29:89:87:b8:80:01:
b3:f0:24:13:1f:a5:28:18:3c:01:f5:a6:92:a8:9f:
0c:b1:bd:83:90:4e:bb:90:d6:64:5c:be:df:d9:e3:
c1:c1:d7:66:ad:5a:91:2b:6e:5f:64:ef:1e:51:91:
44:85:84:3c:a3:b2:2d:b8:b8:76:d4:94:ac:ac:52:
85:ef:9a:f2:0c:cb:c5:36:55:db:73:40:b9:76:03:
a6:02:75:c8:21:b8:7f:65:e0:ab:88:ac:6c:d6:d5:
46:8b:96:ad:ca:96:85:48:99:a1:dc:ed:0d:f5:f1:
3f:a4:cc:6d:bc:a8:9a:2c:6f:62:62:75:e1:c7:43:
e9:48:91:ca:f5:7d:fd:dc:c3:e2:fd:74:74:68:19:
72:91:79:2d:36:e2:df:c9:79:6c:88:0c:f0:d8:4e:
a0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:68:65:76:D7:41:D2:02:EE:A6:78:B1:CA:C8:8F:B9:88:CD:B6:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CDECA0AA42711F0995E62A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.176.0/23
154.217.184.0-154.217.223.255
Signature Algorithm: sha256WithRSAEncryption
09:6d:31:dd:9e:5f:31:70:fe:d1:21:10:f4:96:05:06:59:2a:
d1:ba:43:ff:c2:96:a8:4b:dd:22:fb:ff:60:4e:b3:b4:84:de:
fa:f7:64:64:f3:ba:a7:cc:86:12:cf:29:48:92:a3:e7:5f:4c:
4f:e6:76:a3:cc:30:a6:01:d4:d4:be:00:00:05:48:0b:09:b4:
90:6a:1d:d2:19:2c:e8:c7:64:88:0f:34:4f:c3:b0:d7:80:cd:
79:7a:c7:69:d5:0d:97:87:95:d1:af:f9:2a:12:af:27:8d:25:
43:8c:96:da:2e:bc:2e:f5:dd:87:f5:c2:13:00:5f:f0:06:6b:
a4:ab:a5:2e:ca:6f:9e:6d:f9:3c:d5:06:ac:b3:46:f7:f1:bf:
79:23:54:b3:8f:61:46:35:a2:91:fb:79:23:d9:c1:f2:c9:c7:
94:75:a4:b4:be:e6:8d:13:c0:a2:fa:bc:10:7e:0d:8f:2d:a5:
fc:65:30:1b:8c:c2:62:4b:c5:b0:da:86:00:83:d9:2d:27:9a:
3e:fe:a5:cb:1c:55:2b:14:03:90:6e:28:3b:11:83:d7:82:cb:
cc:d8:e0:0b:ed:74:ba:aa:c2:ba:8e:94:8d:b0:3f:9e:5a:54:
6e:ed:66:cb:fe:51:b9:25:fb:b1:35:f8:6d:80:ab:1b:7e:e6:
9e:95:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:07 2025 by rpki-client