Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82853514804B11F08C0762BBDAE4EC9C.roa
File: 82853514804B11F08C0762BBDAE4EC9C.roa (raw, json)
Hash identifier: E8bCkKPsJqliEsv0hYFrdhkeQgFaMipuphYDQC6crHg=
Subject key identifier: DF:5D:16:25:4B:79:92:34:63:09:8B:B7:C5:3D:54:FD:4A:16:A0:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01961D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82853514804B11F08C0762BBDAE4EC9C.roa
Signing time: Sat 23 Aug 2025 18:03:45 +0000
ROA not before: Sat 23 Aug 2025 18:03:40 +0000
ROA not after: Tue 30 Sep 2025 18:03:40 +0000
asID: 9304
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.193.2.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103965 (0x1961d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 18:03:40 2025 GMT
Not After : Sep 30 18:03:40 2025 GMT
Subject: CN=68aa0281-ef24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:f6:a5:c7:c5:6c:5f:08:27:0c:48:3e:ce:
a3:66:7b:4a:a3:5f:ef:96:59:0e:f0:67:ff:0d:cf:
d6:74:2f:28:96:37:0c:7a:0a:08:a5:3c:a2:86:a6:
60:c8:73:84:99:c1:a9:6b:aa:1f:18:23:88:0d:0b:
e8:0e:65:67:a9:c2:9d:4d:c7:d8:b8:3f:62:6e:b0:
fa:d3:8d:80:ae:be:15:1c:c7:c1:58:97:f2:da:7c:
60:c8:c5:2f:97:91:10:a4:8a:bd:39:d2:94:5b:a2:
41:bf:56:c9:77:72:32:b0:62:2d:c9:d2:98:83:9d:
e0:71:c2:e0:14:be:fb:e4:86:0b:fa:9f:5c:c0:46:
32:d8:1f:1b:18:cd:c9:ad:4a:70:97:c2:64:2a:8e:
7f:92:f2:7e:45:26:d9:84:ae:fa:4f:c4:1b:3e:7d:
ef:72:7f:69:6c:10:81:6b:dc:9c:74:00:1c:2b:78:
28:42:52:04:66:9a:67:c5:55:61:1a:cc:4a:ce:9a:
a7:4c:29:59:d7:1e:ef:bc:39:1c:5c:b7:20:03:5e:
d5:1d:d3:25:8f:a2:cd:e4:ad:ba:63:c6:e7:4e:7d:
78:ab:6e:0a:5c:74:7b:f9:e2:a1:c1:6d:7a:6d:e4:
b6:3c:17:8f:00:6f:ab:1d:96:45:63:37:06:04:3f:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5D:16:25:4B:79:92:34:63:09:8B:B7:C5:3D:54:FD:4A:16:A0:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82853514804B11F08C0762BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.193.2.0/24
154.199.4.0/24
154.200.130.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
Signature Algorithm: sha256WithRSAEncryption
86:9d:88:0a:90:1e:0e:72:f8:9b:1d:24:6b:89:b3:c2:36:34:
51:4e:f0:36:0b:f3:90:42:cf:c8:0f:bf:02:a2:a0:72:a7:71:
a2:fa:97:c3:c3:d7:05:b5:b9:19:19:92:cc:3e:88:14:c5:fe:
fd:aa:97:8f:53:2f:f5:cc:13:92:61:52:82:63:4c:f4:e1:b6:
49:32:1c:b1:aa:3c:ea:a5:61:e2:75:d1:4b:c0:dc:9b:af:c0:
cd:83:59:2e:96:25:d3:6c:42:3b:06:f8:21:2e:8c:40:fb:fc:
88:18:4e:55:a1:e5:b8:bd:cc:f0:3d:8e:90:3b:55:6b:a6:c1:
a6:56:4d:83:d1:3d:e8:ca:6e:46:65:a0:4e:fc:14:7c:2f:ad:
ec:ab:42:d9:c6:f3:df:bf:77:8d:3d:ba:39:7e:ff:3d:d9:01:
44:2b:1c:f7:10:d1:43:18:78:4e:93:fe:96:15:09:e5:10:5b:
2c:32:42:1c:8f:4b:8c:95:ab:a0:33:f9:9c:5d:f6:f5:ae:c0:
43:48:47:61:c9:a0:db:de:e9:6a:3b:36:02:b1:ca:f3:3c:82:
84:2b:44:df:16:11:94:16:ce:82:79:11:29:7f:ff:58:2b:3f:
0c:de:02:1a:70:90:43:d6:07:96:c4:95:f7:9e:df:77:85:ec:
95:4d:7e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:34 2025 by rpki-client