Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37D848068A4811F08A6109D1DAE4EC9C.roa
File: 37D848068A4811F08A6109D1DAE4EC9C.roa (raw, json)
Hash identifier: kVEAXTDeRbrlczV3BA+5+xoxPVKssbbnRniTPjPeLiQ=
Subject key identifier: B6:9D:43:EF:D5:A3:68:87:82:3E:18:BE:95:03:BB:D5:00:0D:D5:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37D848068A4811F08A6109D1DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 11:05:23 +0000
ROA not before: Fri 05 Sep 2025 11:05:18 +0000
ROA not after: Fri 05 Dec 2025 11:05:18 +0000
asID: 150008
IP address blocks: 154.210.228.0/24 maxlen: 24
154.210.229.0/24 maxlen: 24
154.210.230.0/24 maxlen: 24
154.210.231.0/24 maxlen: 24
154.210.232.0/24 maxlen: 24
154.210.233.0/24 maxlen: 24
154.210.234.0/24 maxlen: 24
154.210.235.0/24 maxlen: 24
154.210.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Sep 2025 00:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106004 (0x19e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 11:05:18 2025 GMT
Not After : Dec 5 11:05:18 2025 GMT
Subject: CN=68bac3f3-257b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:03:34:dc:cf:6d:b0:13:17:1c:d4:81:29:
ef:fe:b5:d0:ad:f7:e3:a7:16:8a:ad:f6:74:18:c7:
4f:6d:9e:1c:61:f2:ce:11:67:62:0a:88:49:d0:f1:
de:d4:31:8a:9f:6a:43:b5:4e:62:2d:e4:a2:0e:8a:
68:65:1b:91:fc:f3:4a:9e:85:2a:eb:13:88:61:0a:
e7:b3:0b:ec:b7:a1:3f:96:d3:7a:03:81:87:8f:ff:
72:fa:79:18:45:cd:be:28:5d:ff:fe:55:49:c7:01:
38:03:ec:70:28:e1:d5:2d:50:05:51:ae:bc:0f:8a:
b2:e3:23:24:02:97:5c:54:6a:98:62:21:1b:75:c0:
ff:7c:fe:41:59:0a:30:2e:1d:5b:86:b6:b5:84:71:
0a:38:ca:f3:c2:07:08:41:08:e8:e4:22:d3:37:c9:
ff:ad:b4:db:9d:47:5e:7a:a5:09:b5:7b:ab:4f:16:
72:15:cd:8a:37:f7:90:4d:c3:56:4d:58:63:00:5d:
2b:0f:ac:27:fa:18:55:41:80:11:82:e2:74:40:9f:
d2:13:bf:54:2c:17:53:bb:10:06:77:fd:d0:4a:dc:
b3:3d:67:de:55:cc:6e:49:09:56:a6:9d:c8:64:ab:
7d:7c:2c:93:c4:ad:64:01:4f:a1:a8:1d:e4:5f:3e:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9D:43:EF:D5:A3:68:87:82:3E:18:BE:95:03:BB:D5:00:0D:D5:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37D848068A4811F08A6109D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.228.0-154.210.236.255
Signature Algorithm: sha256WithRSAEncryption
9f:75:5a:9a:c9:ff:bd:f9:8e:ab:1e:f2:ef:30:16:78:81:a6:
8e:05:51:01:44:5c:f6:32:60:9e:ea:da:02:aa:ec:1f:1a:21:
5c:e7:90:29:c5:cd:83:f0:03:6e:c7:ae:66:a7:a6:4b:5d:95:
f4:c1:fa:6e:f7:89:82:fb:e3:9f:46:6c:d9:96:0e:68:7b:55:
60:db:8b:42:ee:4f:6a:43:a4:d3:55:1f:47:38:54:a7:2d:2b:
f4:76:28:38:2a:05:a9:15:d1:a3:8b:1a:0c:41:ee:64:ca:37:
43:c7:6f:72:eb:24:b2:1e:87:a5:4d:30:c8:26:12:b6:c7:12:
0c:63:e6:b8:7a:9e:fc:d0:9b:aa:37:d5:6b:2e:c5:d4:37:d8:
dd:88:62:69:48:b1:a9:ae:37:82:ec:43:a4:3b:42:6d:53:6e:
a5:89:71:b8:06:e7:ed:4c:e6:86:7c:66:94:67:48:76:8d:cd:
c8:8a:a6:41:3b:ad:3f:cd:81:da:ff:56:3b:45:a4:f6:10:5e:
25:7c:fe:71:1d:66:a4:3e:10:a7:35:1c:90:72:ee:b9:f4:cb:
2a:47:dd:ec:f4:e0:e6:e7:80:3e:ae:ff:a9:a2:11:18:1e:c8:
73:2c:e5:4f:10:ec:fc:6f:2f:df:0c:dd:81:95:db:a2:1c:c7:
41:3e:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 03:17:04 2025 by rpki-client