Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C88231C836511F0A25D62E2DAE4EC9C.roa
File: 1C88231C836511F0A25D62E2DAE4EC9C.roa (raw, json)
Hash identifier: e3mgcoou51umS8NnJh4sCnrWpVEvLbHdAatcbKvR9hk=
Subject key identifier: AA:E0:92:B8:0C:65:96:C4:C1:EA:DD:EE:A4:AD:76:D3:01:ED:13:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C88231C836511F0A25D62E2DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 16:44:34 +0000
ROA not before: Wed 27 Aug 2025 16:44:30 +0000
ROA not after: Wed 15 Oct 2025 16:44:30 +0000
asID: 138915
IP address blocks: 154.205.128.0/24 maxlen: 24
154.205.129.0/24 maxlen: 24
154.205.130.0/24 maxlen: 24
154.205.131.0/24 maxlen: 24
154.205.132.0/24 maxlen: 24
154.205.133.0/24 maxlen: 24
154.205.134.0/24 maxlen: 24
154.205.135.0/24 maxlen: 24
154.205.136.0/23 maxlen: 24
154.205.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104669 (0x198dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 16:44:30 2025 GMT
Not After : Oct 15 16:44:30 2025 GMT
Subject: CN=68af35f2-62c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:d1:eb:1e:f3:e6:ff:bd:7d:3e:ec:87:60:
c2:ee:89:d2:0e:76:de:e8:18:f7:9b:b1:92:de:e4:
de:f9:b2:db:2d:9c:39:f0:12:02:9f:b9:27:e1:de:
13:a7:62:6a:95:b5:d7:b9:fa:c5:93:d9:52:06:ad:
ad:cd:cf:9a:1f:ca:45:ae:a8:bb:96:1b:78:24:56:
cd:10:f7:aa:04:da:28:15:a3:19:15:e3:1c:3e:7a:
22:e1:87:ed:6f:fe:ed:a0:3e:45:bd:ac:ac:3b:08:
ff:6c:29:59:ff:bd:c7:67:07:fc:3a:f4:2b:56:ed:
2c:30:8e:4a:b1:c4:bf:dc:71:b8:af:97:31:3f:c6:
b9:de:28:74:c2:41:ad:49:a5:c9:2f:57:47:9c:02:
e8:c7:6c:53:f2:4e:4a:45:0c:bc:77:4c:c9:fc:9c:
26:28:8c:04:1d:ba:82:68:f9:8f:1e:2b:81:bb:25:
5f:10:7e:42:58:8e:60:01:9a:68:a2:f2:aa:8e:63:
3f:92:c7:f7:9a:71:c0:eb:7d:36:86:74:3d:2c:d6:
0f:c1:06:0a:41:1b:e5:f3:7d:ae:52:4d:ca:c6:06:
e8:da:0e:4d:ec:57:4c:e9:cf:24:ca:bb:42:6b:f3:
16:ed:77:8b:98:dd:5a:b9:d2:f2:18:1b:46:ea:70:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E0:92:B8:0C:65:96:C4:C1:EA:DD:EE:A4:AD:76:D3:01:ED:13:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C88231C836511F0A25D62E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.128.0-154.205.138.255
Signature Algorithm: sha256WithRSAEncryption
5a:ba:70:03:ae:47:93:17:9a:b6:68:5a:37:03:90:9a:57:46:
cc:35:46:8c:e1:eb:33:5c:e5:f6:0e:b6:13:88:60:3b:19:51:
dd:d6:16:8b:55:eb:cf:3d:48:e5:d0:4a:e0:c4:e8:eb:df:62:
81:9b:f0:63:05:bb:4c:32:c0:d1:49:76:89:20:f5:6d:35:e8:
c1:fa:20:da:6e:36:28:c2:7e:b3:d9:86:26:81:47:34:39:2d:
d3:f5:bf:08:23:1c:5b:98:11:51:93:a2:c6:76:3d:ef:95:63:
c5:52:1a:9e:e0:ff:8b:95:22:ff:12:c1:21:fa:64:9b:8e:25:
79:5d:33:8d:fc:ad:be:e2:96:6c:3c:6e:7e:97:17:c7:f4:7f:
1a:52:fb:7d:41:a2:33:96:a3:43:93:30:9d:e5:dd:4f:e3:a3:
85:21:da:1c:69:b4:92:43:99:2c:fc:80:3a:68:6d:1c:e9:b6:
81:13:3f:cc:7b:65:60:b4:d3:63:18:54:88:ec:b2:36:4d:46:
70:da:f4:0a:a9:ff:6e:2f:27:fd:7e:26:90:45:af:87:46:05:
3d:34:1e:d7:0e:e4:ca:b9:5c:15:23:f7:c8:92:ab:0c:8b:1c:
73:80:16:22:62:e6:d1:e8:7b:1b:81:50:0c:3c:16:51:39:04:
b9:54:2b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:39 2025 by rpki-client