Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95A822408D6711F08FF6D192DAE4EC9C.roa
File: 95A822408D6711F08FF6D192DAE4EC9C.roa (raw, json)
Hash identifier: rEtZgzui/xUgth/WeVhlrmkT119nCuFxDotJoTtThBo=
Subject key identifier: EC:13:31:4D:DE:DE:B6:83:BE:2E:2F:80:43:46:B1:0A:31:7D:26:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95A822408D6711F08FF6D192DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 10:27:28 +0000
ROA not before: Tue 09 Sep 2025 10:27:24 +0000
ROA not after: Thu 16 Oct 2025 10:27:24 +0000
asID: 22773
IP address blocks: 154.82.11.0/24 maxlen: 24
154.82.12.0/24 maxlen: 24
154.82.13.0/24 maxlen: 24
154.82.14.0/24 maxlen: 24
154.82.15.0/24 maxlen: 24
154.85.12.0/24 maxlen: 24
154.85.22.0/24 maxlen: 24
154.85.23.0/24 maxlen: 24
154.85.104.0/24 maxlen: 24
154.85.105.0/24 maxlen: 24
154.85.106.0/24 maxlen: 24
154.85.107.0/24 maxlen: 24
154.85.108.0/24 maxlen: 24
154.85.109.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.111.0/24 maxlen: 24
154.85.112.0/24 maxlen: 24
154.85.113.0/24 maxlen: 24
154.85.114.0/24 maxlen: 24
154.85.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106266 (0x19f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 9 10:27:24 2025 GMT
Not After : Oct 16 10:27:24 2025 GMT
Subject: CN=68c00110-a553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:4c:ed:7a:19:57:70:2e:6f:96:24:32:ad:
84:59:92:9b:a3:cd:0f:ee:be:e0:4e:fb:aa:58:45:
67:76:47:04:93:ba:63:e2:6f:69:7d:eb:b0:ab:8e:
1d:35:8a:f3:6e:dc:27:bd:bf:ca:33:f8:01:14:24:
04:f6:cb:5b:56:0f:7f:15:49:02:9a:21:68:e8:bb:
a6:d5:55:b5:f5:46:8a:e2:b5:a6:7d:71:d0:e7:e3:
69:8d:61:09:64:b6:f0:b9:b6:85:1c:e2:17:47:02:
77:9c:79:3f:9c:46:72:1e:9b:a6:b6:08:d9:62:1e:
3c:f2:9a:f5:11:78:23:f5:b6:f0:39:5f:19:fb:dd:
a2:8c:fe:33:f0:5f:01:9e:77:a4:7d:f7:89:7d:ae:
15:33:f3:cf:50:ef:5b:ff:ec:14:5d:60:15:2f:56:
ac:5b:16:1f:36:80:f1:4f:96:44:cb:80:97:5b:47:
b8:11:23:14:88:79:69:60:bb:60:34:25:1c:9f:4c:
eb:ec:10:e3:fc:93:dd:46:3b:5b:63:ee:f9:c0:7f:
d7:1d:43:19:6f:2c:93:3a:a5:70:31:f9:c0:cf:a2:
0d:49:85:de:91:8a:05:64:a0:be:71:c0:18:bb:d7:
36:a8:25:62:8f:82:bc:65:37:93:13:07:df:0d:8a:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:13:31:4D:DE:DE:B6:83:BE:2E:2F:80:43:46:B1:0A:31:7D:26:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95A822408D6711F08FF6D192DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.11.0-154.82.15.255
154.85.12.0/24
154.85.22.0/23
154.85.104.0-154.85.115.255
Signature Algorithm: sha256WithRSAEncryption
37:49:23:6b:0d:9c:20:96:e2:f1:e4:01:1d:01:f8:c7:dc:cb:
12:8c:5a:43:12:e8:67:74:9f:fe:ca:1c:25:81:ff:a1:cb:94:
89:01:aa:0c:3d:5a:6e:65:6a:8e:6c:15:c5:2e:d8:35:7e:cf:
30:ca:e6:47:28:f9:34:9f:68:ef:2b:29:1b:1a:ef:84:2e:eb:
58:12:e3:7a:7a:1d:11:2d:26:a2:d8:ab:88:aa:fc:c0:08:eb:
dd:d1:4a:fe:c6:a7:2c:25:67:b8:b3:53:ff:d1:f3:de:b5:f4:
b0:dc:36:a2:75:3e:3f:c3:19:6e:a7:28:fd:79:bd:c0:c3:a1:
55:3b:9f:ca:97:e4:a7:cd:c3:3e:6f:2f:80:ad:bb:5b:dd:42:
f3:94:ad:9e:4c:1d:f5:8d:7c:43:fc:3d:22:a4:1c:9b:b0:56:
07:cf:37:bc:d6:f9:6c:61:08:e2:eb:ba:d9:36:cd:38:e5:21:
a8:21:88:0b:2d:05:0f:07:3f:3a:f4:8a:73:61:1b:ea:83:f1:
4e:7f:5b:fb:d7:30:28:b2:74:16:e4:e5:64:cc:43:5b:0d:cd:
96:38:73:5a:e9:74:40:4d:82:3c:49:b6:70:44:8b:e5:3a:2d:
8d:87:af:c2:56:ab:d6:e7:64:69:26:f9:d7:c7:26:6c:84:3c:
7f:1b:de:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:26:07 2025 by rpki-client