Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D231460842A11F0A794C5EFDAE4EC9C.roa
File: 1D231460842A11F0A794C5EFDAE4EC9C.roa (raw, json)
Hash identifier: L2KMo/OkFPa9udjUpuyamJYdVkaoeaXZqjz+p9RzVGY=
Subject key identifier: 65:E0:37:55:3C:1A:A7:D2:96:3D:95:ED:06:A0:EF:14:2E:4A:2E:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D231460842A11F0A794C5EFDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 16:14:46 +0000
ROA not before: Thu 28 Aug 2025 16:14:42 +0000
ROA not after: Mon 06 Oct 2025 16:14:42 +0000
asID: 44559
IP address blocks: 154.209.136.0/24 maxlen: 24
154.209.137.0/24 maxlen: 24
154.209.138.0/24 maxlen: 24
154.209.139.0/24 maxlen: 24
154.209.140.0/24 maxlen: 24
154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.143.0/24 maxlen: 24
154.209.150.0/24 maxlen: 24
154.209.151.0/24 maxlen: 24
154.209.193.0/24 maxlen: 24
154.209.194.0/24 maxlen: 24
154.218.27.0/24 maxlen: 24
154.219.193.0/24 maxlen: 24
154.219.194.0/24 maxlen: 24
154.219.197.0/24 maxlen: 24
154.219.200.0/24 maxlen: 24
154.219.204.0/24 maxlen: 24
154.219.205.0/24 maxlen: 24
154.219.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104958 (0x199fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 16:14:42 2025 GMT
Not After : Oct 6 16:14:42 2025 GMT
Subject: CN=68b08076-7554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:8c:e1:64:95:23:1c:ef:30:b7:b7:c1:5d:
d6:32:0c:af:7b:2b:38:c4:83:a1:15:e8:e9:2d:8b:
79:12:02:0d:bf:b2:61:78:b8:9d:26:1b:01:d9:f5:
e6:f4:83:98:4d:2e:bc:61:fa:91:eb:2d:03:e3:01:
79:c1:1a:7b:c1:b7:35:44:59:d9:44:bb:8c:a4:d2:
3f:41:fd:ea:c7:5e:84:b2:60:aa:d0:f5:68:82:68:
0b:af:3e:80:c0:cd:30:03:d6:c3:a4:ea:75:5d:b3:
73:86:39:f3:bf:64:e9:d2:6b:3b:9f:3e:63:7b:88:
16:b0:2c:6b:82:9d:6b:e3:d4:4c:f0:6f:36:ec:13:
c4:73:d0:dd:5b:5b:d7:49:1e:9b:52:c8:2c:f4:d1:
c4:13:a6:4d:70:03:94:d6:c8:ce:c3:fd:1a:8b:80:
12:27:82:cb:32:e7:70:29:dd:fb:86:c6:9c:6a:a9:
6b:0e:fe:70:cc:30:00:e2:d8:ea:b0:df:29:8b:20:
fd:cf:f0:22:a0:dd:f6:87:fe:51:9f:53:c4:65:3a:
c4:10:8e:e1:f7:ea:50:2f:52:0b:83:be:b6:e3:10:
c1:02:26:76:00:d1:9f:d3:01:3e:3c:99:49:34:4d:
28:a0:cb:21:3c:ea:a9:52:96:f8:d8:ef:02:2d:bd:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:37:55:3C:1A:A7:D2:96:3D:95:ED:06:A0:EF:14:2E:4A:2E:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D231460842A11F0A794C5EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.136.0/21
154.209.150.0/23
154.209.193.0-154.209.194.255
154.218.27.0/24
154.219.193.0-154.219.194.255
154.219.197.0/24
154.219.200.0/24
154.219.204.0-154.219.206.255
Signature Algorithm: sha256WithRSAEncryption
93:cf:63:98:14:1a:7d:c3:10:72:1e:e1:e1:e7:41:3b:b8:c9:
f5:0e:4d:b4:de:17:5b:eb:c7:53:99:42:40:25:4f:20:73:cc:
55:ab:2f:c1:ec:0b:a9:3a:8c:c9:96:bd:d3:de:d9:d1:0f:48:
24:ad:fa:bf:47:80:16:d6:48:37:03:69:c6:31:08:8f:4c:2f:
0f:2b:b5:ef:06:5e:ac:8b:81:46:fe:05:92:d0:92:5c:e2:be:
d4:87:7d:df:b4:92:49:f7:cd:de:26:a0:cf:c7:45:73:66:80:
2a:49:d6:f0:b4:18:2d:45:43:aa:c2:e4:31:24:3c:8d:95:51:
7d:46:dc:cb:3f:e0:c8:32:45:27:55:8f:db:d7:ab:2a:3c:ae:
85:0a:c4:a9:2b:0d:8e:c9:e7:39:c0:4c:f5:07:09:33:94:26:
67:f0:2e:79:77:e2:f5:f7:9e:11:5c:77:87:7c:1b:e9:32:e1:
3f:ad:4a:2b:2b:e8:03:a3:42:ec:9b:92:d1:48:b8:37:7c:6b:
90:65:1c:95:5c:d9:1f:b4:ed:53:05:88:5f:6b:79:b5:eb:c1:
44:34:03:f7:b2:7d:76:5b:f5:c3:5f:04:40:63:1b:66:54:cb:
7e:30:01:dc:39:b9:b2:e5:aa:d2:96:81:e8:57:dc:25:f6:31:
7e:b6:4a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:37 2025 by rpki-client