Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D0E26AA8AE411F0B94873CADAE4EC9C.roa
File: 3D0E26AA8AE411F0B94873CADAE4EC9C.roa (raw, json)
Hash identifier: 3gIg9VsIcAOLzs/ZBSzqLeRwiUNOQPEZXGxcZGWyn6g=
Subject key identifier: AB:E9:4A:6F:A6:1F:D5:91:18:7E:61:95:55:B9:6D:B4:47:CA:FA:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D0E26AA8AE411F0B94873CADAE4EC9C.roa
Signing time: Sat 06 Sep 2025 05:42:13 +0000
ROA not before: Sat 06 Sep 2025 05:42:08 +0000
ROA not after: Wed 06 May 2026 05:42:08 +0000
asID: 395886
IP address blocks: 154.86.19.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106065 (0x19e51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 6 05:42:08 2025 GMT
Not After : May 6 05:42:08 2026 GMT
Subject: CN=68bbc9b5-15d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d4:9c:0a:d8:5f:08:fc:2e:a0:75:70:1c:b5:
36:c7:88:06:d6:fc:58:ae:ba:cb:75:b5:18:99:d3:
a7:2c:4c:31:11:58:8e:ce:a3:73:97:f2:5e:6b:8c:
32:16:3c:db:1b:57:56:44:43:41:57:c2:53:ba:b0:
dd:48:75:bd:87:67:df:69:25:9a:89:b3:33:4a:7c:
0a:b7:de:39:91:c8:31:e8:f9:04:e6:b3:d0:72:5e:
76:5b:57:52:e1:af:c3:75:3e:a3:ea:7e:9f:f1:33:
86:86:c8:b4:37:5e:3e:63:f8:93:63:dc:a2:9f:cc:
11:20:fa:ac:bc:be:b9:23:12:6a:74:e5:5d:68:94:
e1:07:98:9e:c6:ed:f9:66:e5:59:c1:54:a5:6e:ce:
37:90:9b:e8:04:d2:5a:e0:7f:c6:41:a1:2b:8c:34:
8c:c1:1a:91:1e:fd:89:9c:6a:bd:a9:d8:b1:db:47:
00:67:86:c7:d8:c8:70:bf:84:27:89:96:a3:58:ba:
86:64:63:26:ed:bb:36:27:0e:7c:ef:01:91:6b:b3:
86:62:54:71:9f:ad:42:f0:5b:82:ab:5d:59:b7:b2:
f8:22:c7:db:0c:56:5a:72:27:82:dc:05:d7:94:2d:
ed:09:0c:eb:c1:89:c2:71:ae:e4:39:9e:93:91:34:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E9:4A:6F:A6:1F:D5:91:18:7E:61:95:55:B9:6D:B4:47:CA:FA:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D0E26AA8AE411F0B94873CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.19.0/24
154.86.22.0/24
154.86.25.0/24
154.86.28.0/24
154.86.31.0/24
Signature Algorithm: sha256WithRSAEncryption
91:be:fc:f0:09:91:d0:0e:03:36:e3:5a:66:5a:9c:75:d5:d5:
f4:74:5d:84:c8:5c:b9:ad:22:6e:4a:3e:5a:46:0d:00:a3:b0:
a6:94:43:15:df:27:46:03:12:2b:64:43:33:5e:70:25:7d:58:
fa:7b:ce:13:59:42:49:e4:78:94:62:ba:96:02:3d:a5:af:72:
fa:1d:5c:87:a0:1f:7f:a4:ec:2e:41:a8:32:1b:28:c7:5d:b0:
4d:a7:2f:2e:52:e9:20:17:42:41:13:fc:03:e9:d2:70:e1:84:
48:66:ab:d7:d0:e3:67:25:4f:77:c9:7b:f8:37:da:2a:1f:33:
fd:07:e4:62:f0:4f:f0:a4:d8:03:ca:4f:ab:6d:29:02:2e:e8:
43:bf:82:f7:41:e2:45:1a:df:d0:26:1e:6c:e6:11:26:22:fd:
65:f4:99:2e:46:12:a5:22:f6:93:a1:28:6e:0a:a5:a1:ea:86:
da:af:c9:ce:b3:ea:5a:f0:68:06:d1:9b:25:ba:83:31:09:f6:
7a:02:9d:cb:48:ee:0e:83:e6:b1:84:4f:c9:69:71:9c:31:86:
3a:c1:1f:1f:6d:1c:1e:9b:29:bb:2b:ab:13:21:61:9d:b6:26:
f7:2a:a4:76:3e:6e:c6:d6:36:39:a0:e4:51:6a:7d:01:e2:23:
ca:42:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:37:10 2025 by rpki-client