Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/816438DA994E11F0BA8AAEC9DAE4EC9C.roa
File: 816438DA994E11F0BA8AAEC9DAE4EC9C.roa (raw, json)
Hash identifier: jHHoERG6PVKM3TtrpePlLVQ+58rZJvd7eJG2lyoxETc=
Subject key identifier: 15:2A:C3:D5:BE:85:C0:B3:E3:BC:F2:E3:7C:AE:5A:28:AD:5E:61:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A07A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/816438DA994E11F0BA8AAEC9DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 13:58:11 +0000
ROA not before: Wed 24 Sep 2025 13:58:05 +0000
ROA not after: Fri 31 Oct 2025 13:58:05 +0000
asID: 395793
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.200.55.0/24 maxlen: 24
154.200.56.0/22 maxlen: 24
154.200.56.0/24 maxlen: 24
154.200.57.0/24 maxlen: 24
154.200.58.0/24 maxlen: 24
154.200.59.0/24 maxlen: 24
154.200.80.0/21 maxlen: 24
154.223.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106618 (0x1a07a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 13:58:05 2025 GMT
Not After : Oct 31 13:58:05 2025 GMT
Subject: CN=68d3f8f3-777b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:9f:f6:fe:3c:c7:c3:3d:e8:c9:6a:6c:26:
4d:08:09:6e:41:6c:14:53:68:24:aa:f5:f8:e8:1d:
8b:0d:20:ef:f8:01:3f:30:2a:62:2d:06:05:0a:d2:
49:2d:07:26:53:ab:60:37:f3:14:d1:66:58:73:d9:
9c:97:35:51:2e:3e:91:99:e2:72:a3:85:51:51:1f:
c9:e5:af:9d:79:1c:82:8e:f7:49:ba:5a:97:34:aa:
2d:35:32:66:fb:76:8a:fb:38:3c:db:59:86:04:90:
e4:41:a8:43:75:c7:ef:f7:e1:23:f0:53:ed:6e:41:
73:e3:f6:fc:56:3e:85:20:e9:c5:7f:1f:fc:d5:6c:
4e:87:38:fc:de:83:02:55:d0:73:ed:c7:ef:68:b8:
f8:f9:4e:88:08:d7:20:c7:57:31:25:3e:9a:a6:ba:
75:57:f6:14:65:6d:d4:96:44:81:7f:ee:ba:5e:72:
4e:bd:84:4d:45:cc:6a:bc:de:ba:ec:69:b8:9c:63:
d1:79:0a:d4:c7:4d:2e:0f:c2:f4:91:a3:5f:ac:61:
07:e4:d4:bf:03:da:23:22:91:60:51:c4:b5:d3:f1:
a4:ad:d1:5f:d4:16:d0:88:5f:da:48:bc:97:29:68:
e5:0a:07:28:31:ca:5b:99:01:84:4b:e7:32:0a:5d:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2A:C3:D5:BE:85:C0:B3:E3:BC:F2:E3:7C:AE:5A:28:AD:5E:61:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/816438DA994E11F0BA8AAEC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
154.200.55.0-154.200.59.255
154.200.80.0/21
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:3b:20:41:fe:9e:ac:f5:a4:ac:1c:7f:7c:77:79:47:52:33:
ee:3e:1b:38:92:01:df:4e:74:a4:b3:c3:c3:4d:86:8c:57:d6:
93:c6:d0:9a:a8:cc:d1:d1:99:b1:5f:b1:62:b5:a8:bd:3b:7d:
b7:11:ea:b7:ab:41:b3:5a:ef:a5:b8:a4:62:a2:a5:8d:b2:70:
c7:f6:67:56:a5:2e:9a:dd:db:4e:46:e9:09:f8:81:0f:7f:9f:
29:9d:4d:c1:bd:e1:28:fd:36:06:e1:2a:ea:bf:71:d5:62:c7:
fd:a1:10:ed:50:f8:e1:dd:1d:3d:df:70:84:96:c6:af:e6:4d:
93:20:bc:f3:71:5e:92:d5:1b:18:b2:55:e0:48:2e:cc:d7:d8:
c6:7b:c1:c7:d8:4a:4a:c5:91:53:25:2d:3d:08:1c:6b:31:6c:
c7:3a:e6:89:82:5e:21:5f:e0:b2:1d:2e:d1:3a:08:ac:31:43:
36:e6:95:e5:b2:13:d6:d6:e9:56:2c:4d:68:4e:6b:c3:38:9c:
56:04:a0:7d:98:f5:5e:55:ec:ba:b0:fc:8f:98:2a:20:4a:9e:
54:58:07:8f:9a:88:21:45:1f:85:0e:31:73:bf:f9:18:17:09:
f0:67:6c:61:61:7f:ed:4b:24:95:1a:82:e0:6a:f7:b1:a3:24:
c8:f9:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:37 2025 by rpki-client