Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94EC6C088D6C11F0828A70B1DAE4EC9C.roa
File: 94EC6C088D6C11F0828A70B1DAE4EC9C.roa (raw, json)
Hash identifier: 0UQ7IvvCOJnL5h2SNVJaukd94+Nz/6kUjemh6tgWkk0=
Subject key identifier: 5B:7C:26:45:1E:70:38:49:56:56:C0:CC:C2:E7:58:CE:8F:1C:9A:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94EC6C088D6C11F0828A70B1DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 11:03:15 +0000
ROA not before: Tue 09 Sep 2025 11:03:09 +0000
ROA not after: Thu 16 Oct 2025 11:03:09 +0000
asID: 22773
IP address blocks: 154.202.23.0/24 maxlen: 24
154.202.24.0/24 maxlen: 24
154.202.25.0/24 maxlen: 24
154.202.26.0/24 maxlen: 24
154.202.27.0/24 maxlen: 24
154.202.28.0/24 maxlen: 24
154.202.29.0/24 maxlen: 24
154.213.207.0/24 maxlen: 24
154.213.208.0/24 maxlen: 24
154.213.209.0/24 maxlen: 24
154.213.210.0/24 maxlen: 24
154.213.213.0/24 maxlen: 24
154.213.214.0/24 maxlen: 24
154.213.215.0/24 maxlen: 24
154.213.216.0/24 maxlen: 24
154.213.217.0/24 maxlen: 24
154.213.218.0/24 maxlen: 24
154.213.219.0/24 maxlen: 24
154.213.221.0/24 maxlen: 24
154.213.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106276 (0x19f24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 9 11:03:09 2025 GMT
Not After : Oct 16 11:03:09 2025 GMT
Subject: CN=68c00972-c502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:20:16:95:b5:f6:85:ab:dd:68:c7:d9:06:
5a:2f:d6:07:67:20:e3:c3:b4:e0:bb:6d:64:b9:4d:
49:5d:f5:aa:9d:fa:29:ae:58:38:cf:65:d9:e4:71:
57:74:4e:d1:b3:02:20:13:45:49:cc:f9:48:76:3c:
cf:0f:4a:28:a5:14:48:a0:0b:b9:58:e0:a2:58:11:
36:59:bc:22:68:4d:30:32:13:cb:98:8f:3c:41:75:
4a:8f:5d:5b:2d:78:f7:8f:72:e1:69:c8:e2:84:70:
be:34:fb:7d:b0:70:42:d6:f5:41:26:76:cb:af:29:
7c:69:68:50:bb:60:e9:d6:ce:04:ff:60:f8:07:49:
b1:d7:81:d6:9b:ba:0f:c3:b5:68:79:83:db:f3:ac:
d5:eb:93:62:6d:f2:df:fc:f5:43:e7:e7:fd:08:9e:
0b:30:54:d8:52:52:d7:33:45:ca:1c:b5:4b:58:b6:
63:99:55:a3:4a:84:30:e8:d4:0a:f5:64:78:5e:b2:
69:08:77:0f:94:18:31:60:a5:c3:04:0c:ef:18:83:
d5:00:59:09:98:0f:1e:e5:da:3c:0e:9b:78:ff:83:
41:c5:71:4e:e4:89:93:86:2b:38:48:7e:c6:30:b6:
5d:f7:6e:b2:80:bd:6b:c3:f8:e3:ac:c6:24:a3:59:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7C:26:45:1E:70:38:49:56:56:C0:CC:C2:E7:58:CE:8F:1C:9A:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94EC6C088D6C11F0828A70B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.23.0-154.202.29.255
154.213.207.0-154.213.210.255
154.213.213.0-154.213.219.255
154.213.221.0-154.213.222.255
Signature Algorithm: sha256WithRSAEncryption
37:d7:9a:9b:c3:e8:17:ce:bf:81:c2:05:da:11:ee:49:ff:1a:
04:b8:ab:3a:64:3a:1a:cd:a6:78:49:5a:55:aa:41:c0:27:e6:
b2:16:b0:e6:0e:27:09:5b:76:8d:79:f4:1a:8d:5a:89:9f:04:
e0:dc:21:84:33:f3:ae:5b:a8:41:0e:eb:3f:5c:7f:ff:31:58:
60:6f:18:cb:d9:ae:76:c9:20:5b:40:aa:6d:a1:54:e0:96:c8:
b0:c2:b7:c4:00:d9:56:3a:94:cd:7c:df:4d:0b:83:62:a2:69:
2b:85:04:32:8d:4e:ff:45:1a:a8:a1:84:b4:34:bd:c7:1d:b7:
5a:dc:39:95:2f:0a:4c:e8:e4:ba:4f:9f:e0:18:65:de:c4:9f:
51:33:b4:8b:0a:07:bf:c0:62:a4:47:60:0b:4a:66:66:43:64:
d5:88:0e:ef:81:6b:47:52:3f:ae:2f:c4:9b:3e:a4:16:4d:03:
23:d6:ed:cd:af:9e:ec:9a:b0:0b:ad:5d:2d:61:2e:7e:99:60:
21:5e:0f:e3:00:9f:88:31:5c:80:7b:12:e0:b1:0a:49:43:d1:
6a:02:8f:f8:48:97:7b:5a:26:12:b3:a0:34:9d:4c:94:3f:ce:
98:66:3e:fb:2a:9d:5e:40:77:25:3c:e2:df:a8:15:d8:cd:19:
b2:a9:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:51:44 2025 by rpki-client