Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A6DAF06994611F0A01E5A96DAE4EC9C.roa
File: 6A6DAF06994611F0A01E5A96DAE4EC9C.roa (raw, json)
Hash identifier: CcvIsuGFrxWYyl4Ns7Gy/y9EQKvSxRxipVeIuaZyXrY=
Subject key identifier: 45:36:53:62:A9:FE:2F:6D:96:A2:09:0C:A9:1B:A4:95:1D:75:81:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A078
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A6DAF06994611F0A01E5A96DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 13:00:16 +0000
ROA not before: Wed 24 Sep 2025 13:00:12 +0000
ROA not after: Mon 27 Oct 2025 13:00:12 +0000
asID: 6079
IP address blocks: 154.202.138.0/23 maxlen: 24
154.202.140.0/22 maxlen: 24
154.207.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106616 (0x1a078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 13:00:12 2025 GMT
Not After : Oct 27 13:00:12 2025 GMT
Subject: CN=68d3eb60-e017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:9a:fc:cb:06:f8:dc:fc:08:6f:61:66:3d:
f6:a3:94:28:c7:43:52:14:8b:d7:45:4c:8f:3e:d7:
30:ee:06:ca:63:48:0c:7d:43:49:20:47:5b:e2:67:
c4:2d:aa:b9:03:4e:cf:d9:ef:e9:ff:69:25:17:04:
1d:73:67:48:5f:48:3d:03:24:62:cb:cd:90:cb:7f:
0d:a9:79:93:3e:d4:73:92:15:48:85:8d:f2:ae:37:
c4:b9:55:05:86:37:ee:b4:1b:de:f9:47:16:6f:64:
eb:2a:88:9d:16:d1:0f:e1:77:b7:f2:29:ec:c5:e1:
38:3d:81:41:76:34:84:42:74:8d:07:cb:6e:51:04:
28:de:43:10:4a:78:54:86:39:86:6f:97:85:72:72:
78:c7:46:49:3e:de:a0:3a:0a:0f:6a:95:c7:96:78:
87:d4:39:d5:00:de:cf:14:62:be:df:6c:34:27:22:
54:aa:62:aa:07:06:e5:8c:54:cf:cf:9a:a0:b3:db:
71:b3:df:5c:26:77:9d:71:b7:d9:79:06:bc:89:56:
88:44:26:50:36:48:78:2f:1a:53:44:aa:5a:7f:38:
0a:f2:b3:f3:06:49:b9:28:2d:f8:80:32:bc:b6:16:
ff:7f:a9:27:4f:9c:db:64:2a:ae:24:07:15:7c:67:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:36:53:62:A9:FE:2F:6D:96:A2:09:0C:A9:1B:A4:95:1D:75:81:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A6DAF06994611F0A01E5A96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.138.0-154.202.143.255
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:c7:19:31:dd:ef:47:4e:51:0e:aa:ac:cf:ef:9c:ca:49:09:
4b:1f:d1:b4:62:a2:c2:ff:07:00:02:b6:dc:34:f2:f1:a6:9e:
9c:10:21:b6:df:fd:44:7c:fb:92:95:4f:86:f0:3e:c7:17:f7:
2e:a3:f3:46:dc:73:8f:b0:04:5e:52:3d:ec:f7:9f:02:70:9b:
fc:5c:ac:2b:d0:48:62:41:89:f0:91:b1:dc:da:45:b5:02:09:
98:6b:82:bd:27:97:7f:8c:f5:b8:f5:dc:1d:61:9b:7d:32:c4:
15:51:68:cd:e7:3a:76:ee:df:3b:43:56:60:f1:a6:af:47:ea:
67:02:43:68:dd:58:10:92:b3:68:85:51:cd:c6:e9:2e:59:5e:
0c:39:a8:31:a0:ce:42:06:45:a9:8b:33:12:52:54:2d:62:06:
32:0c:c1:b4:c0:db:49:28:46:e8:cb:86:f3:ea:91:2a:f6:8d:
24:10:42:79:ec:5a:e2:e1:40:6d:23:e6:b0:70:39:b2:4f:25:
77:74:ca:64:c7:1d:37:4c:29:ef:be:00:ad:02:35:f1:d2:91:
e1:60:a1:0b:73:98:8b:da:9f:79:c4:8f:81:79:fb:f1:ac:c6:
74:cf:e4:62:17:74:6f:08:4b:b4:28:e8:16:10:65:a0:ec:7c:
f7:78:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:52 2025 by rpki-client