Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/587F15388EE611F0AF68577BDAE4EC9C.roa
File: 587F15388EE611F0AF68577BDAE4EC9C.roa (raw, json)
Hash identifier: ywZffFhSqMM13I1WQBZtZwczEkrLpOTJJwKOc6Su2Nw=
Subject key identifier: 60:46:E3:7F:4D:AB:3F:14:38:AF:91:DB:D1:3C:69:A6:77:09:7B:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F5B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/587F15388EE611F0AF68577BDAE4EC9C.roa
Signing time: Thu 11 Sep 2025 08:07:23 +0000
ROA not before: Thu 11 Sep 2025 08:07:18 +0000
ROA not after: Fri 17 Oct 2025 08:07:18 +0000
asID: 22773
IP address blocks: 154.194.3.0/24 maxlen: 24
154.194.6.0/24 maxlen: 24
154.194.63.0/24 maxlen: 24
154.194.66.0/24 maxlen: 24
154.194.240.0/23 maxlen: 24
154.198.6.0/23 maxlen: 24
154.198.14.0/23 maxlen: 24
154.198.17.0/24 maxlen: 24
154.198.18.0/23 maxlen: 24
154.198.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106331 (0x19f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 11 08:07:18 2025 GMT
Not After : Oct 17 08:07:18 2025 GMT
Subject: CN=68c2833b-34d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:1d:b9:f5:ad:78:1f:45:72:ab:f7:b6:56:
b0:85:91:9e:be:2e:1f:c3:e4:df:db:c4:50:57:88:
ce:bb:7e:28:f0:ce:45:30:eb:82:c0:74:cd:f5:8e:
21:9d:7f:d8:ce:71:35:59:fe:8f:5d:8a:e1:49:4a:
21:3f:ad:43:35:81:c0:9a:59:83:ea:fe:5b:6b:5f:
7e:c9:90:ad:1c:35:fe:df:4a:4a:58:aa:1b:2e:bd:
95:f5:3d:f6:07:5a:79:89:65:91:eb:18:97:15:82:
fc:3d:45:55:d9:78:5a:b5:d3:7c:66:cc:7a:2e:4e:
b9:ea:95:d6:f1:07:e7:0b:a5:59:da:05:c4:d1:fe:
06:9a:06:12:9e:10:da:83:a3:1d:c5:74:20:9d:84:
39:84:da:55:05:85:89:f1:ab:6e:74:d0:01:9a:39:
11:6f:77:eb:08:a0:81:1c:78:e6:7c:33:b8:b1:07:
a8:3e:43:06:15:cd:91:3e:87:9e:8d:9f:df:1a:51:
44:6e:2e:b6:e4:42:49:f5:4a:20:7d:b4:18:1d:34:
24:32:df:aa:59:31:af:db:8d:c6:f3:cf:a1:b0:30:
95:7f:57:22:1a:5b:60:5a:dd:c4:cd:5a:af:74:73:
ef:91:e7:64:7d:9a:ca:32:25:70:31:94:2c:1c:63:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:46:E3:7F:4D:AB:3F:14:38:AF:91:DB:D1:3C:69:A6:77:09:7B:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/587F15388EE611F0AF68577BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.3.0/24
154.194.6.0/24
154.194.63.0/24
154.194.66.0/24
154.194.240.0/23
154.198.6.0/23
154.198.14.0/23
154.198.17.0-154.198.19.255
154.198.190.0/24
Signature Algorithm: sha256WithRSAEncryption
32:08:aa:61:97:be:66:9d:13:fc:d6:dd:1f:68:b2:db:4a:20:
95:aa:76:55:80:a4:8d:7d:8c:c7:a1:f2:9e:55:7c:23:97:55:
fb:09:0c:71:2f:e4:54:30:9f:35:f3:04:d7:03:9c:7a:01:e0:
e2:ea:27:30:eb:4a:8f:87:45:f7:e9:17:75:27:61:f2:86:60:
89:5a:e5:8c:0c:c3:c7:f1:0f:c4:67:57:0d:af:c2:37:e4:92:
7f:57:a4:6c:b1:1e:1e:d7:8c:4a:7e:79:fa:a6:a8:16:62:8d:
49:e2:d1:a3:f6:e6:3a:f4:05:e1:19:e2:38:33:65:0b:b0:a6:
7d:60:09:2f:05:bd:b0:d4:e7:ee:27:18:ac:66:58:4e:85:d4:
ea:ba:31:73:6e:be:cc:ee:6f:37:04:d0:88:15:37:8c:4a:41:
c2:2b:20:5e:a7:29:cd:44:63:bf:42:5a:c1:2a:91:f6:8b:3c:
f3:8d:6c:b8:5c:7c:2b:f9:b8:b5:ba:af:52:74:98:88:7f:32:
0b:05:57:87:0b:57:c2:bd:f6:4c:87:f6:88:1c:6d:29:8b:ac:
4f:69:4c:79:23:1e:a4:1f:d7:01:1f:00:dd:61:47:05:f3:b1:
0c:f8:ca:52:cd:1d:1e:44:89:b1:6d:e9:c3:be:9f:bb:a0:1c:
3b:d6:2b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:26:03 2025 by rpki-client