Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82EA041E946211F082E8187BDAE4EC9C.roa
File: 82EA041E946211F082E8187BDAE4EC9C.roa (raw, json)
Hash identifier: AmAUFDwoT7V7N+3SjwuqRJQN1NFJ+ay2tWe26eoxirI=
Subject key identifier: 73:75:B4:96:93:8D:32:A2:A6:32:9D:F9:BA:CB:84:4E:A6:1C:89:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82EA041E946211F082E8187BDAE4EC9C.roa
Signing time: Thu 18 Sep 2025 07:38:47 +0000
ROA not before: Thu 18 Sep 2025 07:38:42 +0000
ROA not after: Fri 24 Oct 2025 07:38:42 +0000
asID: 153706
IP address blocks: 154.89.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106485 (0x19ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 18 07:38:42 2025 GMT
Not After : Oct 24 07:38:42 2025 GMT
Subject: CN=68cbb707-649c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:89:c8:c7:c5:b2:bf:be:88:63:cb:c4:75:e1:
d1:08:fb:7e:a2:79:e2:46:10:c3:4b:fd:9f:5a:b2:
aa:ad:e7:8e:6c:57:30:bc:da:bb:e4:07:10:9d:03:
15:6d:aa:c9:05:18:ed:b0:3b:3d:f9:25:24:27:c4:
fb:e5:67:1d:cf:22:f8:bd:95:51:5e:b2:76:ad:ad:
51:45:c8:db:07:28:2c:44:f0:bc:69:08:5e:d3:e7:
81:63:2a:51:52:e7:af:81:fd:a4:f4:6b:c9:30:cd:
60:1e:12:5e:3d:94:d6:0a:ef:cb:a3:67:a4:0e:bd:
20:aa:95:39:a0:b4:70:9e:62:32:55:69:e9:fa:89:
64:63:a6:bb:53:71:b2:39:6a:81:ee:82:6c:f9:6b:
ba:cd:06:63:22:ad:5a:bb:59:34:c8:de:40:80:bf:
1c:37:79:d0:ec:5a:ee:e7:4a:c5:2b:af:cd:7b:d4:
7d:60:83:50:b4:c1:83:92:ed:c4:a3:14:3b:26:74:
c5:3b:1f:25:35:83:d2:d6:4c:cc:dd:16:37:b6:d6:
5c:ac:16:91:9a:3c:d7:85:f5:85:14:3e:13:f1:4c:
27:6d:52:a4:70:8a:20:12:70:21:9d:4f:ec:e9:24:
54:19:59:bb:09:6a:cf:5e:26:50:5c:ec:da:9f:b3:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:75:B4:96:93:8D:32:A2:A6:32:9D:F9:BA:CB:84:4E:A6:1C:89:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82EA041E946211F082E8187BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ee:57:b0:58:e2:43:45:0d:8a:cb:a1:00:66:68:0c:d3:9e:
ac:82:c2:44:5e:7e:f8:38:af:27:84:88:9d:66:c5:d9:3b:d9:
41:9c:ed:7e:5a:ea:68:97:23:f6:1b:ec:af:27:cc:0e:3e:cc:
0a:e4:88:13:0b:fa:b0:1e:60:99:54:87:6f:7d:11:f0:50:39:
49:f8:72:4d:58:57:f5:b3:e4:fb:81:4f:72:35:ff:8f:d1:88:
6d:f7:c5:1d:23:15:db:70:8b:df:42:b7:a7:14:a1:71:73:26:
c6:bd:c8:64:e9:8b:de:30:2d:5b:97:fd:29:b7:8c:4c:48:d3:
3e:37:17:fe:c2:d6:84:45:36:11:c9:2d:46:ca:12:4d:75:ea:
a6:cf:21:9c:88:b6:af:6c:0b:e2:95:c6:8d:c9:9b:83:1e:c5:
6f:01:97:80:f1:76:58:a3:ab:bc:26:52:f7:93:10:3f:ef:84:
df:c9:52:a7:52:fa:77:29:78:0b:cd:c3:a0:2f:01:81:83:f9:
fc:b3:80:2c:b2:63:f9:3b:2a:a8:d5:2a:24:32:38:80:b1:93:
aa:56:96:f2:06:e5:8b:a9:a4:2b:78:3b:84:79:2b:46:81:5d:
9a:d9:1b:85:0f:f8:44:18:90:df:38:9a:46:e4:df:2a:4d:0b:
95:26:b8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:05 2025 by rpki-client