Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59C674FEAA8411F097D4C29EDAE4EC9C.roa
File: 59C674FEAA8411F097D4C29EDAE4EC9C.roa (raw, json)
Hash identifier: QbCGGL22xX0VTXzNNjR0SDUOCocqIyv36pCXbQ+EuEU=
Subject key identifier: 29:68:62:68:18:3B:51:26:72:20:22:5F:EC:7C:0F:65:CA:47:67:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59C674FEAA8411F097D4C29EDAE4EC9C.roa
Signing time: Thu 16 Oct 2025 11:36:27 +0000
ROA not before: Thu 16 Oct 2025 11:36:18 +0000
ROA not after: Wed 19 Nov 2025 11:36:18 +0000
asID: 136501
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.199.0/24 maxlen: 24
154.92.206.0/24 maxlen: 24
154.92.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107512 (0x1a3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 11:36:18 2025 GMT
Not After : Nov 19 11:36:18 2025 GMT
Subject: CN=68f0d8bb-052f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:07:f3:92:8f:d7:a1:79:ef:03:bd:1f:64:
c0:a5:1a:d9:28:13:1d:c0:2d:21:92:4f:9e:9c:4b:
01:81:93:7b:3b:f1:d5:27:21:31:36:f6:b1:88:56:
90:33:b5:84:13:ab:07:30:01:ee:a7:c1:21:b4:31:
0f:e2:2e:5a:37:9a:83:73:bd:b2:46:63:25:24:38:
11:1a:85:70:af:07:43:64:3f:fa:6e:51:38:19:66:
a4:cd:72:0e:0b:d6:2b:f2:ce:b1:88:41:43:19:c1:
49:6d:b0:2d:05:fd:4c:9f:c0:9c:c9:3f:7e:8f:3b:
2e:1e:00:b1:27:04:33:f9:72:a8:52:29:9c:e3:31:
02:6c:2d:1b:75:7d:b2:5a:64:46:90:ad:cb:2e:54:
60:da:fd:ad:9a:de:38:86:b3:7a:78:6e:9f:88:23:
e3:a1:71:cd:c6:0f:e6:7f:db:e8:fe:89:11:21:5c:
38:4c:52:a4:5f:b1:24:7e:fc:71:09:ff:95:85:36:
4c:8b:3f:ea:16:d8:c8:4a:c1:0b:13:fd:a5:ba:99:
b2:63:ac:43:5d:96:1c:a3:44:bb:53:c1:e0:0d:79:
cb:b9:a1:37:d5:b4:07:af:6b:a2:f4:b1:e4:4c:43:
79:7c:c6:3c:c8:60:d4:ae:13:e9:96:73:ab:a4:3b:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:62:68:18:3B:51:26:72:20:22:5F:EC:7C:0F:65:CA:47:67:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59C674FEAA8411F097D4C29EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0/21
154.92.206.0/24
154.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e9:9f:2b:97:c4:68:9e:d6:c4:b6:3e:78:c8:90:ce:ab:ad:
9b:bf:8b:1a:3d:a6:f9:59:5f:a3:12:9e:eb:cb:6c:2d:8f:30:
65:f7:cd:fb:52:46:53:c7:90:a1:99:0d:fc:33:6a:21:8c:98:
96:d2:35:6b:f7:8b:57:f9:85:71:c7:96:9e:70:43:ef:5e:61:
49:ae:c3:14:78:00:f5:2a:1a:f4:07:64:d2:54:8e:60:3b:e3:
82:d3:6c:4f:f2:e8:61:a6:19:c5:c0:dd:be:5a:8f:49:aa:63:
5b:f2:00:9a:e4:e9:94:e0:21:0c:21:03:02:75:aa:4f:23:ee:
a5:7f:42:27:d2:87:24:4e:e6:06:2c:6b:d4:1c:c5:18:ef:a6:
59:51:5f:eb:34:dc:bc:51:f3:90:16:81:a0:5d:7b:10:3f:26:
94:f3:ec:c2:91:fa:b3:4e:d2:3a:ba:1c:59:40:ab:52:59:7a:
dd:3e:9d:43:cc:c2:38:f4:92:63:6d:b4:e5:44:73:b0:7c:7d:
2e:1c:4e:a9:2d:eb:55:dd:50:73:ca:3e:ff:a0:95:b6:4e:e2:
91:d6:6d:61:8a:98:0e:02:bb:54:16:f0:7d:2b:96:4c:bf:fb:
be:0f:0a:73:b5:6b:40:17:62:43:25:e9:22:5b:6b:ea:e9:f2:
aa:f6:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:35 2025 by rpki-client