Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/766C2630844111F097759686DAE4EC9C.roa
File: 766C2630844111F097759686DAE4EC9C.roa (raw, json)
Hash identifier: e6Gt0HRj1DvjsTxWu+Hx9dxcY59tt2CixZCJ37QqLzs=
Subject key identifier: F2:3B:32:94:2C:DB:04:BC:64:BA:8C:2A:59:BD:DC:22:6B:7B:F0:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/766C2630844111F097759686DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 19:01:55 +0000
ROA not before: Thu 28 Aug 2025 19:01:47 +0000
ROA not after: Wed 08 Oct 2025 19:01:47 +0000
asID: 62084
IP address blocks: 154.210.239.0/24 maxlen: 24
154.219.94.0/24 maxlen: 24
154.219.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104992 (0x19a20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 19:01:47 2025 GMT
Not After : Oct 8 19:01:47 2025 GMT
Subject: CN=68b0a7a3-d7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:8e:da:b0:f8:0d:8c:a6:d4:27:7a:2d:12:
59:59:99:ae:39:10:ac:35:29:dc:bb:4a:81:a2:64:
fc:e5:98:38:8e:3f:5b:24:ea:09:c3:50:a2:bb:e5:
59:b2:ef:63:af:32:08:bc:18:1a:8e:62:98:7f:40:
60:05:6b:f1:19:ac:12:7a:71:48:2d:24:18:89:60:
3f:e1:c9:51:f8:44:e9:60:b1:1a:e1:74:2b:dc:91:
b8:a4:b4:0d:fd:a1:ad:50:55:49:46:ec:9e:64:b1:
b7:28:c5:96:c3:93:fa:2b:32:99:4b:0d:99:92:24:
5a:72:32:ea:7f:d7:d1:ba:06:2e:f0:fe:70:59:c2:
b0:b9:45:48:5e:14:6e:07:fc:ad:38:e1:15:79:4a:
7d:1d:4b:8a:01:cc:9a:a5:ad:b4:1f:0f:c2:9d:7e:
76:67:b7:1d:42:12:33:ec:95:3d:78:d3:aa:86:7d:
cb:53:87:7a:7a:97:97:62:f4:11:6b:fd:a4:1d:24:
d8:83:cc:92:36:01:b2:d5:e4:27:e3:49:43:57:45:
1d:59:5f:81:d9:29:c7:f6:f3:63:39:eb:aa:23:68:
d0:30:a2:df:1c:37:c7:12:9b:eb:d1:8f:3d:4e:f0:
3e:62:2c:44:ec:39:ef:25:3a:d9:65:df:b5:44:c8:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3B:32:94:2C:DB:04:BC:64:BA:8C:2A:59:BD:DC:22:6B:7B:F0:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/766C2630844111F097759686DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.239.0/24
154.219.94.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:6a:36:b7:59:78:dc:6a:f1:66:36:cf:c5:68:22:7a:2f:0e:
9d:7c:89:7a:46:6e:a4:06:38:a6:4c:4e:b8:16:2e:1f:a5:02:
6d:c3:fe:0c:1e:33:9a:3a:51:45:5b:4b:c9:e4:ff:75:c3:6b:
f0:f5:7e:8e:90:c5:e7:e9:98:e4:a1:de:fe:f5:ce:58:9a:73:
c5:d1:bb:6d:81:38:a0:4f:b5:3f:f4:e5:ca:d3:11:b3:6e:e9:
9e:39:82:96:a2:48:bd:4d:c8:81:57:15:cb:22:52:03:65:5f:
42:8a:f4:0e:2d:5b:4b:18:7e:55:18:d1:45:a3:d2:d8:c1:f9:
df:a2:40:11:bf:a9:b7:fb:3a:17:e2:5b:02:1e:6a:40:bc:e7:
1f:ce:2e:8a:8a:00:5a:4a:18:d2:cc:c1:d5:81:87:8b:93:ff:
62:64:00:4a:49:d3:f0:a1:cd:89:8e:98:77:72:4d:d6:27:0e:
aa:b9:7f:19:c1:f0:f1:eb:b3:e4:3a:85:6a:ac:88:7b:7d:70:
52:06:91:a7:3e:b0:9c:90:d2:ec:83:f4:6b:00:5a:bd:96:68:
ac:bf:8a:b3:93:6f:24:47:66:85:e7:66:d8:66:ae:3f:4c:7c:
39:6c:94:5b:c4:a2:39:a4:56:f0:cd:e4:42:eb:c0:86:85:55:
ad:df:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:36:10 2025 by rpki-client