Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14F07CA6870411F0A3B63B90DAE4EC9C.roa
File: 14F07CA6870411F0A3B63B90DAE4EC9C.roa (raw, json)
Hash identifier: 71ED2uTF4gma3zNIVqtsRKQyC86ihP3c0P6t8ypj3vk=
Subject key identifier: 48:4F:35:8C:75:69:37:27:5C:A3:C7:84:9B:CE:44:9A:6C:85:DF:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B31
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14F07CA6870411F0A3B63B90DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 07:20:05 +0000
ROA not before: Mon 01 Sep 2025 07:20:00 +0000
ROA not after: Tue 30 Sep 2025 07:20:00 +0000
asID: 401783
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105265 (0x19b31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 07:20:00 2025 GMT
Not After : Sep 30 07:20:00 2025 GMT
Subject: CN=68b54925-4590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:94:35:71:31:be:4f:45:90:6b:8b:7d:1a:
d2:d7:c6:46:6a:ce:19:89:ea:b1:0f:fa:82:ea:e0:
43:d4:cd:96:f7:69:8d:31:31:cf:77:32:b8:c2:9e:
96:e1:6d:1b:f9:ab:ab:eb:f7:c8:b1:31:ae:c2:9f:
4c:c6:e3:53:3c:31:5f:17:39:52:cf:3c:fc:62:28:
b9:d4:14:b1:2d:56:48:b3:38:a7:65:dd:c7:51:45:
a3:90:ab:7f:54:47:76:ba:09:43:a2:73:2c:10:4e:
70:a2:c3:3f:25:cf:fd:e8:04:42:d1:47:4a:8f:9d:
fd:ba:49:8a:d5:23:44:28:41:69:78:ae:2d:d6:e1:
d9:77:f6:37:5d:cb:f4:b6:82:9d:e5:a2:d6:61:71:
22:84:5d:e5:c1:e6:7e:8b:5a:87:df:b6:c1:ce:30:
1e:94:3b:c3:27:f9:7d:af:b6:bc:85:24:1e:85:58:
e6:10:e9:36:a5:53:cd:50:35:40:f2:c1:61:93:0e:
d0:25:ea:bb:c0:40:76:e2:19:d2:57:ac:8a:37:20:
2d:1b:f0:9c:ca:14:41:6d:8b:37:78:4e:85:70:6e:
66:b6:e3:e5:d3:e3:bb:0d:ad:bf:2a:ff:fb:a4:26:
5a:a5:34:e9:7e:fc:8d:46:14:58:a9:74:e7:be:c6:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:35:8C:75:69:37:27:5C:A3:C7:84:9B:CE:44:9A:6C:85:DF:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14F07CA6870411F0A3B63B90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
13:5c:df:f1:6b:d9:51:36:45:c7:22:fd:60:2f:0b:5d:82:b5:
a9:01:f8:fc:72:2e:c2:52:af:38:ed:bd:11:00:1c:60:15:3e:
e2:ab:c2:83:57:3d:42:81:dc:d0:99:8d:a7:30:d6:74:6a:5e:
0c:b0:13:34:9c:c8:e2:75:fd:75:c9:7e:58:e4:d7:f5:9e:fc:
3f:d3:9b:e0:d7:05:62:93:34:8f:42:86:39:aa:8c:76:08:3a:
d5:d6:67:5c:99:9a:4b:3d:67:25:82:56:ac:bb:16:9e:7b:2c:
0b:19:c3:de:bc:aa:c8:9b:7f:8f:35:74:f8:3d:35:09:0f:36:
0a:36:d1:f2:21:3d:40:5b:06:99:b8:4b:a4:2c:25:f6:2e:68:
b5:59:09:23:5e:c0:c1:4c:7a:63:0c:05:a0:56:29:f8:39:04:
7f:ea:9a:fd:02:b8:ac:26:5a:0a:30:39:83:2f:a3:6c:2d:4f:
9b:9f:58:ec:c0:74:25:42:37:27:48:b1:33:2d:62:71:97:d1:
5e:dd:63:c7:63:df:fd:0e:93:70:77:50:68:52:57:00:f9:ca:
fd:20:9d:8d:fa:d0:38:a1:2a:f9:e0:e7:81:17:48:be:32:e7:
d1:da:aa:3a:f9:a0:28:62:cf:98:85:73:c6:28:5d:a7:a1:7b:
d6:fe:3b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:28 2025 by rpki-client