Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4262FF0E842C11F094A5E27EDAE4EC9C.roa
File: 4262FF0E842C11F094A5E27EDAE4EC9C.roa (raw, json)
Hash identifier: iAqYBpTIgonQhvu5CDZBMsbzPnu+5qmkHsOtvgXrisk=
Subject key identifier: B3:D9:54:C1:43:33:14:0F:F1:98:44:89:35:0A:06:60:CA:13:D8:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4262FF0E842C11F094A5E27EDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 16:30:08 +0000
ROA not before: Thu 28 Aug 2025 16:30:03 +0000
ROA not after: Wed 08 Oct 2025 16:30:03 +0000
asID: 44559
IP address blocks: 154.209.155.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.201.0/24 maxlen: 24
154.209.202.0/24 maxlen: 24
154.209.203.0/24 maxlen: 24
154.209.205.0/24 maxlen: 24
154.209.206.0/24 maxlen: 24
154.219.71.0/24 maxlen: 24
154.219.72.0/24 maxlen: 24
154.219.75.0/24 maxlen: 24
154.219.81.0/24 maxlen: 24
154.219.82.0/24 maxlen: 24
154.219.83.0/24 maxlen: 24
154.219.84.0/24 maxlen: 24
154.219.85.0/24 maxlen: 24
154.219.86.0/24 maxlen: 24
154.219.87.0/24 maxlen: 24
154.219.88.0/24 maxlen: 24
154.219.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104962 (0x19a02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 16:30:03 2025 GMT
Not After : Oct 8 16:30:03 2025 GMT
Subject: CN=68b08410-629b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:f2:e3:06:e2:c2:1e:7b:58:4e:b6:bd:c1:
4a:0d:36:f0:ae:48:c5:b2:16:f9:2f:8f:4f:7c:f9:
a9:ac:91:8e:26:d6:0b:e7:a6:a0:64:ba:d4:3f:b8:
0d:6b:9c:82:a7:49:f0:89:71:5d:bb:ce:7a:a0:b4:
5b:77:25:83:f6:a7:f6:f2:2e:1b:b1:5e:b0:42:d0:
a8:db:09:3b:60:4f:e5:6f:b4:11:b7:d2:cb:42:c1:
e1:d2:02:2f:0d:f9:30:85:1c:82:bb:57:39:16:80:
81:db:e0:ee:9a:f9:ed:a9:06:60:b3:01:45:d8:5c:
dc:d1:a0:60:eb:29:99:0b:86:b7:7e:48:c0:26:c9:
1e:ca:f7:fa:bc:0c:09:ae:be:39:be:fb:0a:ff:04:
45:f0:c6:96:7a:47:f1:22:98:42:84:70:a7:da:a1:
78:e8:37:5c:5e:51:71:0f:48:72:55:92:c6:99:a4:
c2:41:5a:59:d1:ee:a1:b3:89:39:ae:63:ec:1c:5c:
f2:08:d2:6d:2a:33:dc:0a:1a:5a:74:1a:14:68:6a:
e4:48:5c:2e:5f:e1:a7:ce:b6:d8:c7:fe:72:0a:4f:
91:6c:40:95:ce:00:4e:25:c1:92:a1:7d:9b:38:38:
29:a4:6d:b0:e3:0d:12:75:4b:ca:7a:ea:14:4c:43:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D9:54:C1:43:33:14:0F:F1:98:44:89:35:0A:06:60:CA:13:D8:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4262FF0E842C11F094A5E27EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.155.0/24
154.209.157.0-154.209.158.255
154.209.201.0-154.209.203.255
154.209.205.0-154.209.206.255
154.219.71.0-154.219.72.255
154.219.75.0/24
154.219.81.0-154.219.89.255
Signature Algorithm: sha256WithRSAEncryption
10:e0:a4:de:9d:d0:14:15:58:e3:e2:31:6c:0d:ca:b3:4e:7f:
6e:20:96:54:15:f5:4d:07:98:27:ea:db:1c:55:43:60:5d:1c:
16:dc:3e:c6:fe:3e:22:63:0c:0e:93:37:82:8c:70:7d:0a:9b:
b3:b9:2a:c7:12:25:e6:22:0d:6c:a1:65:15:4d:51:f3:1d:56:
f5:cb:13:19:6e:a6:9c:55:46:53:7c:09:0f:84:f4:ce:6a:2c:
61:f7:07:c1:19:8b:8b:6d:43:72:fe:c4:56:97:ba:3a:96:76:
dd:a8:5c:bc:fb:c3:30:c4:33:01:77:51:41:71:58:98:e9:d1:
34:93:e2:42:97:79:86:6c:aa:e0:ef:cb:ce:62:09:a0:5b:a1:
91:74:e3:f9:87:2e:4d:41:44:4d:38:4a:ad:9b:37:1d:a6:3b:
69:48:3a:8a:67:03:b4:d7:5c:5a:a3:66:f2:25:3f:d9:4b:b8:
5c:56:b4:d5:e6:45:50:fe:7c:9e:94:d9:5b:5d:e9:03:d2:9d:
de:64:2f:c6:25:83:16:93:95:7c:4a:2f:51:26:6f:bd:0c:3b:
c5:87:89:d8:eb:e0:20:1e:49:1f:35:c6:67:4d:b8:0c:2c:67:
06:d3:a2:74:4f:bd:05:67:63:ee:61:d9:26:5c:71:16:dd:ff:
21:66:ea:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:14 2025 by rpki-client