Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7673D8B4825511F0942B0DF6DAE4EC9C.roa
File: 7673D8B4825511F0942B0DF6DAE4EC9C.roa (raw, json)
Hash identifier: A9RBzqEDxbaK7nGHaXlRVzlWDR7yNbHaV+48IcXGZoA=
Subject key identifier: EC:A6:19:70:6A:5C:0E:1E:02:86:A1:BA:D6:5B:66:19:55:1B:60:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0197AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7673D8B4825511F0942B0DF6DAE4EC9C.roa
Signing time: Tue 26 Aug 2025 08:20:02 +0000
ROA not before: Tue 26 Aug 2025 08:19:57 +0000
ROA not after: Mon 29 Sep 2025 08:19:57 +0000
asID: 214143
IP address blocks: 154.196.214.0/24 maxlen: 24
154.197.25.0/24 maxlen: 24
154.197.90.0/24 maxlen: 24
154.197.127.0/24 maxlen: 24
154.200.72.0/21 maxlen: 24
154.200.109.0/24 maxlen: 24
154.203.196.0/22 maxlen: 24
154.203.208.0/22 maxlen: 24
154.203.240.0/24 maxlen: 24
154.205.248.0/22 maxlen: 24
154.206.4.0/22 maxlen: 24
154.206.11.0/24 maxlen: 24
154.208.72.0/22 maxlen: 24
154.208.88.0/22 maxlen: 24
154.222.72.0/23 maxlen: 24
154.222.74.0/23 maxlen: 24
154.222.80.0/23 maxlen: 24
154.222.82.0/23 maxlen: 24
154.222.84.0/23 maxlen: 24
154.223.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104364 (0x197ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 08:19:57 2025 GMT
Not After : Sep 29 08:19:57 2025 GMT
Subject: CN=68ad6e32-d947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:67:81:4f:9f:3f:c8:94:b7:01:21:55:ae:
d0:31:e8:db:2c:53:b2:b1:fd:88:a4:23:a2:6b:16:
2b:b1:5c:ae:56:1e:8b:42:39:03:de:7f:5a:31:d7:
1b:cf:b6:e9:76:39:c3:a8:85:5b:e9:f9:ba:32:6d:
be:1b:5c:7e:b0:1a:22:66:04:54:35:2b:55:8c:b9:
af:81:8e:7f:1a:50:78:78:29:e0:e7:ba:ec:cf:e5:
4f:f1:50:a7:dd:2d:c0:19:cb:a7:cf:8a:45:bf:c0:
8a:a8:e4:2b:28:9d:0e:02:e0:d2:ef:db:d2:24:96:
f6:d2:95:06:82:09:35:87:89:d9:8b:a2:2e:74:39:
42:5d:25:a8:08:0e:9d:6a:bc:0b:dd:b8:5b:98:06:
57:0f:ea:b9:70:ce:c0:c5:32:aa:35:68:b0:41:81:
dc:da:27:9d:64:0b:a3:97:75:8c:54:cd:68:4a:cb:
9d:31:ab:bb:46:ca:08:58:08:ea:06:02:b9:6c:ee:
e8:03:be:6c:25:ee:01:7a:e5:29:33:d6:85:70:fb:
51:1d:9c:74:1e:2b:01:fc:44:8c:9b:cf:c8:ff:f6:
19:73:c7:e9:9a:fe:7e:f4:06:1e:c7:5a:ce:ed:38:
ef:e6:38:5c:a0:07:2f:f2:f2:ec:b9:93:1f:75:95:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A6:19:70:6A:5C:0E:1E:02:86:A1:BA:D6:5B:66:19:55:1B:60:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7673D8B4825511F0942B0DF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.214.0/24
154.197.25.0/24
154.197.90.0/24
154.197.127.0/24
154.200.72.0/21
154.200.109.0/24
154.203.196.0/22
154.203.208.0/22
154.203.240.0/24
154.205.248.0/22
154.206.4.0/22
154.206.11.0/24
154.208.72.0/22
154.208.88.0/22
154.222.72.0/22
154.222.80.0-154.222.85.255
154.223.232.0/21
Signature Algorithm: sha256WithRSAEncryption
69:77:90:c2:d2:cf:67:ee:85:9d:e8:35:37:15:31:02:ad:9d:
e8:24:98:4e:46:99:f8:13:37:4c:60:a4:3b:36:98:68:63:d6:
6f:e0:87:d3:f0:e5:76:63:53:68:3c:61:91:1d:4f:10:8d:0b:
bf:5c:dc:c9:d6:f1:31:d5:d3:09:61:f2:f4:8f:2d:44:0a:34:
1d:47:ba:e2:cc:a2:8a:b6:ce:da:0e:c8:b9:72:37:22:52:6f:
06:f1:96:df:2d:4c:ad:51:b2:bb:c0:74:88:e1:a5:06:0d:ac:
c7:f4:cc:58:75:02:70:00:a5:f4:3e:2f:57:2b:28:ee:e5:16:
ec:4f:5e:16:57:df:00:8d:86:27:5b:43:21:e1:fd:f5:45:de:
16:25:d8:8e:44:ae:c7:57:a3:5b:31:e7:9b:3b:66:66:b1:44:
90:5c:31:b5:5c:33:5e:da:dc:09:a9:89:85:85:16:3a:a6:b9:
36:b9:f7:06:88:8e:0f:6a:55:4d:4f:18:c2:39:84:31:f1:aa:
ef:89:76:b6:01:5d:1e:75:ce:ee:95:c2:d4:e6:b7:10:db:18:
cd:08:c5:79:de:b5:02:02:15:36:10:84:9c:47:47:57:69:ef:
ff:eb:d4:af:9e:50:48:1f:71:39:4f:df:ac:66:8e:78:44:a9:
53:7d:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:28 2025 by rpki-client