Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A6F8B18996A11F097874D7EDAE4EC9C.roa
File: 6A6F8B18996A11F097874D7EDAE4EC9C.roa (raw, json)
Hash identifier: l45+8UAbT8FyY3BKaSfERz+in0q0LXcAvn2U2+HRdhU=
Subject key identifier: 31:33:C0:F0:AB:9C:F5:70:B9:A9:71:C6:30:99:56:A3:3C:8D:A9:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A09E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A6F8B18996A11F097874D7EDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 17:17:58 +0000
ROA not before: Wed 24 Sep 2025 17:17:53 +0000
ROA not after: Sun 04 Oct 2026 17:17:53 +0000
asID: 201411
IP address blocks: 154.205.188.0/24 maxlen: 24
154.205.189.0/24 maxlen: 24
154.205.190.0/24 maxlen: 24
154.205.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106654 (0x1a09e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 17:17:53 2025 GMT
Not After : Oct 4 17:17:53 2026 GMT
Subject: CN=68d427c6-0fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:95:d9:09:70:0c:19:c5:54:ce:d2:3c:51:
f1:0b:d5:39:cd:70:63:1b:3e:e7:2f:91:f6:0b:0b:
b2:8e:f1:61:d4:d7:e4:64:46:21:b4:a9:db:26:0c:
00:d6:e2:a0:a6:73:23:f9:a0:15:b1:be:9f:fa:d2:
1f:0f:58:d9:de:4e:c4:84:5b:3c:24:e4:eb:2e:7b:
e6:3b:cb:91:f1:31:b0:75:d6:7f:90:a1:5d:69:69:
a1:f3:b7:a2:ed:87:2e:a5:da:b9:44:d2:6a:73:ef:
8a:7e:0d:51:14:fe:a9:38:f4:77:0c:86:72:44:2c:
6e:7b:af:13:60:cc:dc:77:52:29:ac:c7:8e:ef:fb:
70:bf:a0:70:ac:63:0d:d8:3e:09:53:92:29:16:48:
85:21:db:0a:1c:1f:c6:da:dd:2d:01:85:e4:a0:3d:
87:04:de:b9:5b:ea:98:b1:cc:54:61:e8:cb:00:54:
c4:47:ae:43:92:74:76:17:8d:d3:47:eb:42:87:6f:
f3:ae:88:3c:ef:bb:23:5d:7c:86:2e:6b:44:62:7d:
5e:bf:71:87:bf:02:96:25:c1:6c:9b:c2:f4:d3:75:
e6:1b:ec:fb:51:24:79:d2:22:f1:8b:d4:56:5f:1d:
c5:a4:6c:65:b7:3b:51:19:6f:33:5c:a9:50:06:e8:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:33:C0:F0:AB:9C:F5:70:B9:A9:71:C6:30:99:56:A3:3C:8D:A9:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A6F8B18996A11F097874D7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.188.0/22
Signature Algorithm: sha256WithRSAEncryption
01:04:c7:33:78:ae:e5:b5:7f:d6:e9:37:af:87:0b:ad:47:da:
03:cf:eb:cb:e9:c0:ac:ff:a8:52:af:43:49:93:09:48:83:69:
2a:62:67:ec:bf:83:8c:5a:34:e9:ba:56:df:5e:06:53:80:60:
f9:bd:be:1e:f6:0d:6d:ad:86:fd:65:cf:dd:f6:01:6e:8f:8f:
42:9d:9f:b3:34:8a:cf:d4:63:50:5d:4d:66:ac:bd:6e:8a:f6:
a4:ec:c9:ca:53:a4:25:f7:f3:13:57:95:c3:32:19:cf:97:ec:
0a:69:84:ba:f7:56:da:de:c8:99:05:e9:1b:1f:ea:b6:a8:1b:
03:a8:98:97:fc:83:49:47:6e:ef:83:22:60:e5:d6:db:85:4a:
2a:6e:ed:a7:cc:b4:1e:27:1e:ca:f2:ae:57:f0:aa:22:7f:ba:
84:38:0b:79:d9:21:21:4d:f8:d8:a4:b0:76:fc:14:b0:d2:c9:
8f:51:46:c1:24:b6:df:0e:fb:68:3c:c7:ed:fd:5e:57:e6:16:
46:ba:dd:02:3e:d6:fb:44:a4:45:18:90:ae:06:e2:ca:db:ab:
df:47:fb:26:74:e3:c0:16:ab:9c:70:8d:70:82:92:1e:30:3e:
ef:1f:76:64:70:06:18:4c:38:e2:32:ea:69:0d:36:b9:42:73:
ef:6e:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:54 2025 by rpki-client