Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7945310A834511F09174CD96DAE4EC9C.roa
File: 7945310A834511F09174CD96DAE4EC9C.roa (raw, json)
Hash identifier: QEPzGd24t5o6NGPPmbHiKkfJ0W5gw8/jX6q2EYi29FU=
Subject key identifier: 2A:80:D9:6D:91:A4:7E:D8:62:59:D9:15:84:F4:78:18:21:F4:F4:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019896
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7945310A834511F09174CD96DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 12:58:06 +0000
ROA not before: Wed 27 Aug 2025 12:58:01 +0000
ROA not after: Mon 03 Nov 2025 12:58:01 +0000
asID: 138915
IP address blocks: 154.93.109.0/24 maxlen: 24
154.93.110.0/24 maxlen: 24
154.93.111.0/24 maxlen: 24
154.93.114.0/24 maxlen: 24
154.93.115.0/24 maxlen: 24
154.93.116.0/22 maxlen: 24
154.93.120.0/24 maxlen: 24
154.93.121.0/24 maxlen: 24
154.93.122.0/24 maxlen: 24
154.93.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104598 (0x19896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 12:58:01 2025 GMT
Not After : Nov 3 12:58:01 2025 GMT
Subject: CN=68af00de-d312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:f1:e0:1f:96:e3:06:5a:45:e0:22:75:73:
6f:b5:1a:38:f2:a8:02:6b:66:f0:18:86:23:37:59:
37:5e:d2:53:14:d6:c8:45:90:ff:56:e1:48:1e:3c:
5a:bf:05:97:3b:4c:f0:48:90:eb:34:ea:eb:3d:51:
59:82:70:bf:e2:b5:e1:a0:e8:9a:80:7b:d1:a0:f5:
e6:d3:f1:ab:60:0f:56:fa:bb:af:a3:94:fd:55:c1:
c9:32:a8:f5:97:61:9a:16:91:e5:47:5a:41:17:4e:
4f:dc:b4:27:82:60:63:f8:5b:04:a2:e4:4f:14:b5:
f5:65:e7:fb:c9:bb:1e:75:23:ec:ff:24:73:95:d3:
75:87:f2:02:4a:39:a0:76:75:e9:58:74:58:e2:ef:
ff:17:f7:59:03:e1:42:fb:c9:af:51:70:28:c9:8e:
2c:ae:3f:39:2b:14:e2:75:a3:91:1a:1b:bd:fb:d0:
9a:d9:45:43:8a:30:3c:97:54:96:02:c7:3b:1f:6c:
64:3d:3b:51:1a:ce:4c:bb:e4:76:7b:bd:0e:0a:a9:
74:3c:66:77:32:15:bc:43:96:3f:70:a0:b4:3c:70:
1f:e2:ee:0c:95:95:97:6c:9b:8d:1e:06:32:3c:77:
65:27:ce:28:29:ed:fe:f2:10:22:af:c8:2d:4c:39:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:80:D9:6D:91:A4:7E:D8:62:59:D9:15:84:F4:78:18:21:F4:F4:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7945310A834511F09174CD96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.109.0-154.93.111.255
154.93.114.0-154.93.122.255
154.93.124.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:f3:ef:a6:65:06:4b:c3:c3:a7:49:74:7a:fe:5e:a0:de:e7:
44:09:e2:d7:e9:49:78:6e:a7:8b:2c:68:52:4f:b8:66:5a:89:
09:a2:60:0f:82:7d:c9:32:ee:ac:80:d3:28:20:39:fb:0f:7a:
70:f4:0a:de:05:07:30:52:9b:8f:4e:95:43:43:aa:1d:2a:19:
22:30:53:28:8d:79:ef:a8:d4:f4:83:4f:78:9e:6f:24:bb:08:
d0:e6:50:ba:65:5e:af:c7:1c:01:70:58:39:75:80:6c:f6:64:
d8:c3:ea:d9:f8:90:25:ef:ad:0d:fa:28:a7:d7:eb:29:3d:95:
ad:ac:cb:88:8b:81:fc:ef:ce:32:2e:f4:e9:2c:85:59:a8:73:
57:b4:6d:60:b9:8c:4e:d7:88:0f:1d:af:c6:78:a5:b7:52:03:
34:44:9a:4d:8f:2f:52:45:52:d6:bd:81:18:e1:7f:2c:e3:f8:
78:39:d8:fb:06:ef:23:47:7f:91:02:96:33:ac:31:02:53:05:
8f:ff:db:c7:5a:e9:18:9a:3d:48:09:9d:12:67:8e:88:a2:b4:
46:b9:d1:9f:3a:76:3a:38:89:9b:17:ae:fc:9a:83:b8:3b:76:
69:eb:e8:76:0c:4a:c0:45:a0:6c:2e:e2:31:e3:66:fb:a9:aa:
43:8e:c4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:41 2025 by rpki-client