Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/957D7C0087C911F092F1319DDAE4EC9C.roa
File: 957D7C0087C911F092F1319DDAE4EC9C.roa (raw, json)
Hash identifier: a2p7Ho43DgwjbF2gaRiLZSA3V6TV8nPwV7e4GtRL/i4=
Subject key identifier: 52:0E:0D:29:7C:04:90:EE:27:6F:A4:76:6B:03:CE:00:36:50:5B:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019BBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/957D7C0087C911F092F1319DDAE4EC9C.roa
Signing time: Tue 02 Sep 2025 06:53:52 +0000
ROA not before: Tue 02 Sep 2025 06:53:47 +0000
ROA not after: Sat 04 Oct 2025 06:53:47 +0000
asID: 17561
IP address blocks: 154.198.8.0/24 maxlen: 24
154.198.188.0/23 maxlen: 24
154.200.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105402 (0x19bba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 06:53:47 2025 GMT
Not After : Oct 4 06:53:47 2025 GMT
Subject: CN=68b69480-7360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:34:44:fe:1d:ed:a6:04:d2:a1:ba:df:f0:93:
8c:7d:9c:cd:2c:1c:b0:a6:6b:06:0f:d0:31:2c:6d:
42:42:b7:29:14:26:65:38:6e:bf:93:21:19:75:5a:
14:91:32:33:13:ce:40:9a:bf:8c:a1:ff:d4:97:89:
d9:b4:e9:2b:42:08:b4:4d:26:b2:0b:e7:70:90:0a:
0f:70:0e:83:1a:a2:8e:32:14:32:8a:a6:c2:66:c4:
29:63:d9:8f:da:cd:7c:fd:e9:a0:63:07:46:04:ab:
fc:eb:d5:33:36:35:58:f2:16:74:6b:a3:20:e7:5b:
41:bb:6f:4e:24:20:8d:8c:45:fd:91:05:2b:ea:bf:
39:44:b7:e4:60:a1:80:04:d8:3a:61:bc:6b:66:8e:
42:21:e7:31:e0:c5:f7:86:9c:36:fa:cf:ba:88:3c:
b4:83:c8:36:16:95:6e:34:36:6e:b7:06:52:47:c3:
a2:39:96:67:f8:30:68:e9:74:94:42:8e:c7:05:10:
0a:37:6e:25:52:54:a1:12:9b:61:6f:b7:92:81:4a:
87:99:e6:66:be:57:2f:36:64:28:c0:97:ac:a3:04:
a3:f3:2e:ce:33:09:56:04:aa:0c:d0:db:f8:6d:86:
e4:e4:a5:59:07:ba:c1:a7:ef:5e:b9:bc:5c:f9:bd:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0E:0D:29:7C:04:90:EE:27:6F:A4:76:6B:03:CE:00:36:50:5B:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/957D7C0087C911F092F1319DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.8.0/24
154.198.188.0/23
154.200.151.0/24
Signature Algorithm: sha256WithRSAEncryption
42:cd:65:96:03:30:56:62:f9:e2:79:c0:3a:9a:f9:a5:b4:9d:
6c:a2:10:fd:5e:9d:ee:24:97:f5:a2:2a:08:25:f4:a1:e8:85:
1c:cd:de:cc:60:bb:25:b9:a1:10:b3:81:f5:1f:c7:27:4e:f2:
33:a4:d5:e2:0c:c2:4a:e1:96:4b:0d:09:0b:b8:62:95:de:96:
c3:96:4b:5d:0e:8f:6d:af:12:18:d7:19:92:f1:a9:00:cd:db:
ae:55:4d:60:1b:05:9e:2d:c2:c2:d3:bf:70:83:97:fa:6b:48:
05:96:1c:d8:1a:f7:1e:7b:a6:cb:9f:f2:35:3a:45:66:a4:af:
ca:c6:d9:25:4b:48:90:92:93:c8:03:21:7a:22:de:c9:9d:7e:
6f:06:bc:2a:43:fc:a2:66:f8:7a:9a:b0:eb:5a:6c:b5:aa:25:
67:de:ca:e6:69:a9:aa:15:50:26:d8:05:6a:47:94:ac:7d:f7:
19:ba:b8:c1:a0:c3:92:e5:da:2e:34:10:d7:b1:0b:25:84:bb:
80:a3:d5:4c:74:aa:88:9e:30:82:31:8c:d5:51:49:b5:2e:92:
18:17:c7:67:b1:95:ac:26:9e:21:43:08:2b:9b:49:94:45:cb:
46:e1:e5:77:ed:15:ff:14:d5:c5:3e:b1:b7:7d:0a:02:59:29:
a6:0f:9d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:14 2025 by rpki-client