Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D7829CE837611F08FD11BD0DAE4EC9C.roa
File: 0D7829CE837611F08FD11BD0DAE4EC9C.roa (raw, json)
Hash identifier: R+dxHLHnkTQPzR9kn+WzDy/yYZwjvzePE4dZ9SYOpo0=
Subject key identifier: 64:5B:43:C4:82:2C:A3:3F:28:21:A7:AF:B3:C6:34:70:9D:DC:2C:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D7829CE837611F08FD11BD0DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 18:45:51 +0000
ROA not before: Wed 27 Aug 2025 18:45:45 +0000
ROA not after: Mon 03 Nov 2025 18:45:45 +0000
asID: 140666
IP address blocks: 154.93.87.0/24 maxlen: 24
154.93.88.0/22 maxlen: 24
154.93.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104691 (0x198f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 18:45:45 2025 GMT
Not After : Nov 3 18:45:45 2025 GMT
Subject: CN=68af525f-5081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:6a:ad:3c:8b:51:86:5a:a0:82:49:22:84:
a0:4b:86:cb:d7:c2:b1:ce:cf:0c:c2:22:cf:90:0a:
ce:45:08:c0:db:ee:50:c2:ef:43:8a:29:80:44:6e:
08:4f:9a:5a:ca:f0:59:d0:7c:94:3d:f4:9b:cb:1a:
07:08:9f:bc:f1:f4:88:e4:90:9d:3c:1d:2a:dc:77:
b8:12:3f:b1:4b:49:f3:6d:0c:73:3a:3f:2a:52:d8:
75:72:ab:d5:1e:c4:c1:86:5d:63:ed:48:ba:82:7e:
60:0a:dc:2d:d5:cf:f4:93:b8:b5:19:b8:ca:2c:0e:
99:2f:ea:20:e6:93:b2:71:0b:b6:de:d7:dc:bd:80:
3a:1b:8a:61:c3:e8:66:21:60:cf:18:1b:ff:ac:3e:
33:44:bd:11:bc:c3:6b:c4:d6:7a:19:6b:1c:85:a2:
ba:74:14:5c:cb:86:20:e6:d0:be:3e:54:64:34:6d:
c1:80:24:35:04:94:f4:c5:84:a9:83:8c:51:a5:30:
7c:9f:12:4a:56:c3:33:be:7f:f2:0b:6e:5b:a1:c5:
09:48:f8:fc:50:6d:60:60:97:80:d5:4b:ee:59:f0:
b7:f1:70:b9:fd:ef:6c:bd:d6:9d:c2:5f:a4:3f:6d:
ef:24:35:98:9d:c2:9f:6e:5b:9b:97:0d:0a:a0:fd:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5B:43:C4:82:2C:A3:3F:28:21:A7:AF:B3:C6:34:70:9D:DC:2C:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D7829CE837611F08FD11BD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.87.0-154.93.91.255
154.93.94.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7b:44:4a:01:81:96:87:73:a8:12:fa:95:58:5d:fc:47:73:
48:89:9a:35:cf:86:6d:0e:75:3a:2a:82:f3:0c:bc:5c:f8:2b:
cd:d5:0c:2d:69:a1:be:57:67:45:c6:91:f2:4e:d7:94:fd:d8:
b6:07:4f:a2:c2:4e:86:65:37:43:60:9a:f5:67:70:df:74:b6:
5d:42:7c:fd:71:58:0a:97:4b:46:03:08:9f:30:fc:db:07:3d:
41:c7:a5:4e:38:50:cd:49:ca:25:f0:03:19:0d:bb:53:20:eb:
e3:29:c0:e7:92:7e:ac:46:f6:c9:b7:7f:54:03:63:03:1f:12:
73:02:94:bf:3f:da:4b:28:36:77:cc:7c:ed:ee:76:ff:5f:4d:
76:1f:09:bb:cb:4a:e7:d3:da:62:a3:d7:4a:49:ca:57:18:1b:
32:01:b8:80:06:d7:79:90:b3:7e:04:e0:39:85:b0:2a:e8:c4:
d4:03:01:82:3e:c0:a1:29:04:2b:f4:2d:6a:72:5b:8f:37:5b:
4d:01:ba:2b:16:9f:90:9f:4f:04:ae:e5:98:39:b0:69:36:07:
6b:24:6d:da:fa:95:8c:ab:fe:43:36:a0:0b:f8:b3:5f:e9:14:
0d:62:7b:3f:cc:19:9d:7d:f0:f0:2e:45:c9:a0:83:94:0f:6d:
00:8a:96:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:40 2025 by rpki-client