Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AC601B0896F11F0B08754CCDAE4EC9C.roa
File: 1AC601B0896F11F0B08754CCDAE4EC9C.roa (raw, json)
Hash identifier: ZGlkQjabTixcDw6woOL9lxryvlS9gL1IqS8uYS+FFRo=
Subject key identifier: F4:D7:5B:30:86:8D:60:51:D8:F7:BD:31:6C:56:C0:71:5D:04:8F:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AC601B0896F11F0B08754CCDAE4EC9C.roa
Signing time: Thu 04 Sep 2025 09:11:14 +0000
ROA not before: Thu 04 Sep 2025 09:11:08 +0000
ROA not after: Sat 08 Nov 2025 09:11:08 +0000
asID: 61112
IP address blocks: 154.83.83.0/24 maxlen: 24
154.83.84.0/22 maxlen: 24
154.83.88.0/21 maxlen: 24
154.83.90.0/24 maxlen: 24
154.83.91.0/24 maxlen: 24
154.83.92.0/22 maxlen: 24
154.83.96.0/23 maxlen: 24
154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105867 (0x19d8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:11:08 2025 GMT
Not After : Nov 8 09:11:08 2025 GMT
Subject: CN=68b957b1-c3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:c6:f2:59:b9:12:8f:86:51:f3:e9:27:1f:
25:fd:4a:36:3e:bb:29:d8:56:f9:3f:fe:81:5d:78:
dd:ec:e6:c8:e5:2a:73:cd:61:c3:11:7e:5c:a3:1b:
b4:46:f5:d3:74:5e:f1:0d:38:e9:2c:e1:f1:5e:62:
0e:c5:86:bc:bf:d7:bc:5b:8b:c6:84:01:f1:c4:5f:
54:40:5f:a3:d8:72:e6:1e:aa:1c:d0:7d:a2:ed:46:
35:d9:f7:ae:ed:12:00:cc:6b:e3:32:3a:06:82:f4:
5f:9d:a2:cc:d8:70:61:55:51:2c:1e:1d:f2:16:92:
14:c6:8c:e3:a4:ce:f3:ba:62:46:97:ad:05:e4:16:
c6:e6:48:05:4d:a3:e2:52:42:20:47:cd:09:a8:4e:
02:cb:7e:5c:d9:88:48:72:72:66:db:53:30:b4:87:
24:93:91:a8:00:d7:8e:5f:80:18:46:a8:02:2e:6a:
09:f3:42:4f:fe:34:41:ef:9d:dd:a3:23:fb:c4:a8:
aa:aa:54:93:50:ed:0f:1f:0c:2a:09:3a:ef:f0:37:
68:8c:98:dc:68:b9:75:16:57:bb:d0:e8:de:e9:4e:
ff:e5:65:3f:96:05:f9:35:c3:b0:0a:e7:41:45:a4:
68:9e:40:6e:07:51:53:cc:f7:fd:36:b0:69:3f:1b:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D7:5B:30:86:8D:60:51:D8:F7:BD:31:6C:56:C0:71:5D:04:8F:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AC601B0896F11F0B08754CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.83.0-154.83.98.255
Signature Algorithm: sha256WithRSAEncryption
67:e4:33:7e:76:31:2d:ce:ac:de:0d:93:fa:f4:90:41:9a:53:
34:94:b9:4e:d5:f8:bf:02:3f:1b:72:37:39:e8:aa:e7:26:35:
f1:20:70:8a:40:cc:b0:ec:40:f4:a4:4e:03:fe:0e:3c:b9:eb:
b2:db:c6:a3:91:c0:c1:18:91:bc:04:04:70:20:e5:c3:67:a5:
82:c6:6d:68:d0:00:f0:2a:06:4a:fe:49:1b:0a:0d:5c:58:e2:
f0:3f:6c:4b:c1:d1:8f:a3:2a:9e:70:bc:0f:47:a1:61:95:d4:
f5:fe:ca:3a:f4:89:0c:78:ec:45:ed:df:ed:ef:30:40:e6:56:
31:98:b9:81:60:5b:ba:77:9a:3d:a9:f1:63:f3:da:44:40:77:
95:ab:56:15:9e:4b:fd:ac:32:57:93:d0:3f:43:14:6a:0b:61:
98:24:76:8a:2a:fa:47:8a:2d:82:d7:cf:7a:e5:20:5e:da:c9:
79:a7:66:f5:d1:dc:5a:cb:09:2b:00:4a:4f:1b:ea:4c:09:a3:
95:d4:4a:0a:2a:9f:ee:18:e5:a3:89:02:2e:9d:0f:1d:73:42:
20:4f:a6:85:a7:32:22:0f:85:b0:f6:0b:06:3d:91:19:0f:75:
21:24:65:c8:e4:de:d9:2c:bd:58:a8:59:26:b2:14:b2:9f:38:
1a:5f:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:05 2025 by rpki-client