Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CFECD18946811F082D8379EDAE4EC9C.roa
File: 2CFECD18946811F082D8379EDAE4EC9C.roa (raw, json)
Hash identifier: 4iCmWn+O3UhQNSjnGenprsPPM95d71a0mwlGYoJtU9w=
Subject key identifier: 0C:75:2D:3B:FE:AB:97:07:9F:AB:EC:CD:2D:D5:54:78:B8:CC:86:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A003
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CFECD18946811F082D8379EDAE4EC9C.roa
Signing time: Thu 18 Sep 2025 08:19:20 +0000
ROA not before: Thu 18 Sep 2025 08:19:15 +0000
ROA not after: Fri 24 Oct 2025 08:19:15 +0000
asID: 54600
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Oct 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106499 (0x1a003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 18 08:19:15 2025 GMT
Not After : Oct 24 08:19:15 2025 GMT
Subject: CN=68cbc088-d9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:35:4e:52:eb:7d:64:8d:78:81:a6:18:dc:
43:07:34:c3:91:b5:71:7f:9b:5e:cf:6f:34:a2:66:
87:a1:d6:9c:bb:8a:cb:bc:93:f0:3e:71:71:9e:22:
ba:71:fa:42:d0:1f:56:e2:08:72:4e:07:35:bd:ba:
f9:30:b8:1c:ce:71:c8:3d:64:b2:38:11:60:7a:45:
42:d0:8c:6a:92:30:44:3c:08:70:c4:20:b8:cc:0c:
61:ca:6d:a4:03:8b:7c:a4:d1:ce:39:84:90:aa:18:
2b:2a:d7:61:9e:7e:af:39:1c:1d:cb:9c:92:77:4b:
82:67:67:23:48:91:90:63:47:b1:2e:28:8d:b7:71:
b2:35:9e:bf:ce:12:36:35:4c:cd:12:29:a9:e2:65:
85:74:14:5e:76:8d:fd:d7:eb:4e:af:77:ca:2d:07:
95:82:e4:59:7f:c8:38:58:6e:bd:27:f0:70:88:df:
82:11:f5:0e:c4:fa:2b:ab:f9:1e:b5:f2:76:55:6e:
95:45:2c:7a:cc:c1:1a:aa:4e:6b:c4:2f:fa:71:cd:
98:f7:e4:9f:42:28:5a:d4:70:cc:10:76:79:fd:26:
3a:33:09:e5:0e:29:37:ee:df:15:45:36:fc:1a:00:
de:ad:33:31:73:4d:40:c2:03:cc:82:e8:a4:fc:d7:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:75:2D:3B:FE:AB:97:07:9F:AB:EC:CD:2D:D5:54:78:B8:CC:86:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CFECD18946811F082D8379EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
b9:8c:37:f9:10:66:ba:9d:13:10:5a:97:cb:ac:6d:ff:34:4f:
dd:46:90:6b:50:ca:6d:af:30:6e:59:16:33:e2:89:bb:57:f1:
da:ea:86:92:32:d8:fa:11:e1:8c:1b:3a:e1:d1:02:22:af:73:
3a:81:60:f6:dd:59:c9:e3:eb:77:24:47:68:d8:77:34:df:75:
1b:c0:a9:9f:ad:23:f9:29:c3:47:f0:70:03:4b:1b:f4:c1:3c:
65:b6:6a:3a:1b:5a:bf:63:cd:92:c9:b7:58:1e:c2:aa:59:2a:
ac:8d:fa:29:39:8e:ec:f6:c9:99:66:c4:8e:33:75:bc:8f:ac:
a3:7b:7a:12:fe:a3:91:26:2a:2c:3e:46:0a:d7:41:6d:00:a8:
96:8d:9c:cf:10:f4:6a:f0:d1:86:4f:db:26:04:0e:ac:4e:1d:
79:8e:f8:4c:47:b6:a5:e5:fa:c0:ea:70:fa:2d:91:90:93:6e:
17:dc:64:56:b7:40:06:dc:4f:5d:80:bc:2f:3b:07:75:76:8e:
6b:9c:62:8f:78:4d:d8:74:20:86:d0:ab:20:dc:27:d9:c5:91:
70:fa:88:ee:30:ba:db:ce:b7:2f:48:00:f7:0c:1d:b9:8d:90:
3f:b9:22:b1:aa:8f:70:58:23:65:1f:74:3a:ea:c1:e7:6c:a5:
6d:cb:ce:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 20:40:25 2025 by rpki-client