Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82CBA64C844811F0968D38B2DAE4EC9C.roa
File: 82CBA64C844811F0968D38B2DAE4EC9C.roa (raw, json)
Hash identifier: 2yKOHiG/aRarZ5gl8TNkoV89SQ0k8ZqlLiIFg2bEfUM=
Subject key identifier: BF:D8:AC:47:BE:02:DD:7E:7D:4E:00:E3:9C:8F:45:ED:2A:D3:68:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82CBA64C844811F0968D38B2DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 19:52:22 +0000
ROA not before: Thu 28 Aug 2025 19:52:17 +0000
ROA not after: Fri 13 Feb 2026 19:52:17 +0000
asID: 63199
IP address blocks: 154.89.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105001 (0x19a29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 19:52:17 2025 GMT
Not After : Feb 13 19:52:17 2026 GMT
Subject: CN=68b0b376-1233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:1e:e5:8b:cc:2a:7f:74:9a:e4:7b:57:59:
0b:99:f7:3c:fc:c7:6b:9f:bd:4d:38:5a:ce:82:0b:
c1:45:7c:1a:a6:b1:34:ad:88:24:3c:2f:77:98:2f:
a2:1d:53:51:18:0f:36:b0:1e:89:a0:66:68:af:d7:
30:15:38:72:af:42:29:47:56:61:5d:1e:e9:37:01:
97:da:35:8c:9a:1a:08:0a:bb:fe:77:6a:52:ec:d1:
92:bb:29:ef:87:3c:d4:83:0b:b7:ed:72:75:fd:83:
fc:98:c9:5e:89:fe:42:be:f0:ff:18:ee:f6:8b:91:
c3:3b:74:0f:c4:18:ed:c0:29:db:c8:c3:28:a4:a8:
2b:a5:ce:34:38:aa:f7:6b:be:55:9f:f6:12:24:98:
37:5b:71:e8:81:3a:fe:aa:40:2e:3e:ab:a6:24:a4:
8c:98:6b:82:79:f3:35:d5:c2:87:86:e1:8f:79:f6:
6e:09:73:0d:3d:49:81:1b:1f:a0:57:c0:2d:32:54:
98:7c:90:76:0b:7e:e6:39:bb:83:a0:99:fe:4f:e0:
84:7d:6b:0f:00:a6:51:dc:a2:c4:f5:a6:0a:8a:39:
ed:66:43:1a:43:14:31:75:a9:b2:6d:42:5f:f5:66:
fd:37:b8:3c:df:bf:96:f4:bf:ba:67:cc:b9:2f:78:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D8:AC:47:BE:02:DD:7E:7D:4E:00:E3:9C:8F:45:ED:2A:D3:68:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82CBA64C844811F0968D38B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.140.0/22
Signature Algorithm: sha256WithRSAEncryption
36:ec:7b:7e:4d:b2:05:9f:dd:48:1e:22:d8:29:95:10:b5:ba:
fb:0d:26:00:9f:a1:50:61:40:4c:5a:2b:cd:0b:c5:7a:99:9f:
f5:52:6f:53:ac:9f:40:2a:97:f9:e0:f8:5e:8e:a9:2e:74:f3:
53:42:f9:15:a1:44:b7:0d:f1:1f:cb:74:b0:62:94:02:3b:d4:
74:08:51:34:e1:de:12:71:a4:1f:e6:e4:ec:5a:af:2a:86:3b:
9d:64:97:89:06:25:e6:ee:2f:d5:e3:e2:38:56:93:0d:7a:e2:
8c:86:62:e0:61:8d:4e:b5:77:83:e0:22:17:a2:d9:f3:23:79:
71:87:61:12:07:31:22:c4:22:2a:49:89:d8:a8:a1:af:9b:ec:
dc:a3:41:e8:ac:e8:60:78:f9:97:90:43:88:45:8a:0a:ba:cb:
be:f1:5b:4e:63:b1:74:de:86:0d:64:da:a7:39:cc:d4:c3:19:
8c:4f:83:e4:66:88:3d:a5:38:cf:c0:a1:99:08:ab:38:f6:87:
40:32:49:22:b5:e4:9f:db:87:c9:5c:1b:58:6b:9b:f6:68:ce:
96:0e:68:d3:11:97:10:50:ff:73:14:a2:a5:3b:59:48:55:21:
5a:27:bc:c2:95:ce:fa:5b:b8:90:59:f1:a4:5a:42:90:ea:f4:
54:4f:d6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:09 2025 by rpki-client