Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2970CC8E837C11F09C4840F5DAE4EC9C.roa
File: 2970CC8E837C11F09C4840F5DAE4EC9C.roa (raw, json)
Hash identifier: ryB66T0laascMF0Rkkkb915bU9IVJ1HyQ3TJO2ssLXE=
Subject key identifier: EC:22:F0:C3:A2:4C:E2:1D:53:07:7B:68:53:41:3B:40:98:00:5E:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019901
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2970CC8E837C11F09C4840F5DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 19:29:35 +0000
ROA not before: Wed 27 Aug 2025 19:29:27 +0000
ROA not after: Mon 03 Nov 2025 19:29:27 +0000
asID: 63139
IP address blocks: 154.94.90.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.92.0/24 maxlen: 24
154.94.93.0/24 maxlen: 24
154.94.96.0/24 maxlen: 24
154.94.97.0/24 maxlen: 24
154.94.98.0/24 maxlen: 24
154.94.99.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104705 (0x19901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 19:29:27 2025 GMT
Not After : Nov 3 19:29:27 2025 GMT
Subject: CN=68af5c9f-e776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:04:36:52:8b:ea:ed:c0:79:23:64:58:b8:54:
ee:6c:cf:26:cf:9b:c1:48:bd:bc:0a:05:3e:6d:2a:
29:5d:81:1b:15:21:0e:b6:0e:ad:c4:55:87:c9:1a:
0b:eb:94:59:1f:96:6f:9a:e2:af:30:9f:b1:02:3b:
8d:c7:f4:f4:c5:35:c4:6a:bb:b6:3e:4f:3d:41:17:
06:d3:87:65:eb:bf:cd:a2:8a:2b:8a:6e:f9:43:39:
ef:29:65:8c:e5:bb:23:1b:be:55:ea:f8:74:e4:de:
4d:d8:fb:a1:d8:b2:ab:c5:c5:f4:db:20:23:40:28:
a7:75:3a:bb:0c:33:e0:1f:46:82:2d:c2:b5:57:ce:
82:cd:45:4a:a5:76:d2:47:28:f4:1e:dc:5e:eb:fa:
16:2f:cd:36:26:22:c5:cf:d0:aa:a0:1b:3a:7e:f0:
9a:11:c1:77:c6:4e:21:0a:82:aa:ca:96:07:69:7b:
cd:b3:63:6b:a8:a4:83:e0:0c:37:61:88:c7:4b:9a:
3a:c4:5d:86:cc:72:60:bc:0c:9b:cf:d2:36:7f:5e:
9f:fd:a4:69:a3:b9:20:a7:02:e3:f0:be:f4:9f:f0:
8f:b6:32:6b:8e:23:54:a2:d0:d0:6d:63:0e:13:11:
4e:65:0c:63:9c:6f:ef:86:6c:bc:f9:d1:1a:8c:b6:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:22:F0:C3:A2:4C:E2:1D:53:07:7B:68:53:41:3B:40:98:00:5E:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2970CC8E837C11F09C4840F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.90.0-154.94.93.255
154.94.96.0-154.94.100.255
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e7:bf:db:2b:d4:0d:9d:bf:4a:33:aa:d9:fd:24:28:16:0c:
83:92:4c:4b:8c:6c:ee:0d:00:2f:e2:e8:05:bf:08:55:73:8a:
db:73:d3:82:6d:0f:0c:79:0c:48:bf:72:9d:6a:18:41:1f:ac:
e7:5c:ed:17:b4:8d:b1:20:e1:bb:52:02:df:64:80:93:1a:87:
36:d4:c5:49:a7:b6:0c:d2:9d:29:4a:7c:c6:b6:cb:a1:ae:9a:
1b:b4:9d:a6:25:42:35:b3:5a:80:d2:47:2a:17:5f:c4:8d:f0:
94:9a:99:cc:c2:02:17:b1:77:d4:55:a0:29:67:f0:90:0f:e4:
5c:91:1f:33:15:ab:62:c4:4b:14:00:b6:01:7a:27:df:e0:31:
df:34:18:58:e2:7f:bc:ae:6d:92:fd:7e:0b:d0:cd:49:b8:bf:
d5:d0:82:03:24:88:d6:29:e8:24:61:fe:48:3d:6f:92:cc:8a:
ed:3a:11:6e:d2:6d:b1:f6:b9:ed:b8:56:81:94:9d:e1:9e:1a:
96:bd:d9:e1:5e:78:b4:b2:e8:98:e9:19:d9:99:24:08:d0:5e:
76:27:17:8d:74:d7:a5:f7:f3:e1:54:75:d2:47:9b:36:53:08:
d9:1b:97:d3:e4:e3:86:6b:16:ca:ac:25:e1:ce:4e:56:26:db:
8c:fe:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:44:20 2025 by rpki-client