Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/999C280C841511F0AA00C5EBDAE4EC9C.roa
File: 999C280C841511F0AA00C5EBDAE4EC9C.roa (raw, json)
Hash identifier: rBeVbA/ApAPWAQVKI9lyQsVp5RtedCz4qcWaPJX9O3k=
Subject key identifier: A4:4C:5D:41:63:46:5A:30:0E:00:B0:5D:91:33:2B:81:4C:BD:70:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/999C280C841511F0AA00C5EBDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 13:47:56 +0000
ROA not before: Thu 28 Aug 2025 13:47:51 +0000
ROA not after: Tue 30 Sep 2025 13:47:51 +0000
asID: 62240
IP address blocks: 154.194.33.0/24 maxlen: 24
154.194.119.0/24 maxlen: 24
154.194.120.0/24 maxlen: 24
154.194.121.0/24 maxlen: 24
154.194.122.0/24 maxlen: 24
154.194.123.0/24 maxlen: 24
154.194.124.0/24 maxlen: 24
154.194.125.0/24 maxlen: 24
154.194.126.0/24 maxlen: 24
154.194.127.0/24 maxlen: 24
154.196.29.0/24 maxlen: 24
154.196.32.0/24 maxlen: 24
154.196.34.0/24 maxlen: 24
154.196.35.0/24 maxlen: 24
154.196.37.0/24 maxlen: 24
154.196.38.0/24 maxlen: 24
154.196.39.0/24 maxlen: 24
154.196.89.0/24 maxlen: 24
154.196.90.0/24 maxlen: 24
154.196.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104924 (0x199dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 13:47:51 2025 GMT
Not After : Sep 30 13:47:51 2025 GMT
Subject: CN=68b05e0c-8bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:8a:12:4c:dd:78:74:b0:d0:c2:d1:41:47:
07:4d:4d:6e:f2:4a:b5:6b:8f:09:40:f0:e4:e7:c4:
2d:2e:41:f0:6e:98:19:71:93:53:26:74:c4:45:08:
6e:cb:84:04:c8:89:93:5e:1d:df:d7:37:10:1b:39:
e3:2f:aa:a7:a8:0d:1c:40:56:07:16:15:e9:f3:43:
00:b9:8c:5f:f6:b3:e7:1f:cd:e4:ca:92:39:be:77:
1a:41:c2:5a:a6:66:dd:f0:8e:e4:b5:2e:4f:e6:c4:
00:7a:22:6b:ad:d2:51:66:3f:33:f0:54:42:70:3a:
23:5f:89:b7:c7:54:4e:ff:e9:a4:b4:61:f6:5a:91:
6c:8d:75:11:d8:0e:69:bc:4c:6a:a2:2f:4f:1e:bd:
39:ae:64:aa:8e:5d:71:32:3c:58:84:70:ef:f1:64:
06:f9:da:99:01:12:6f:b1:53:9b:bc:f9:d0:26:28:
06:f9:58:d4:18:bc:b3:ba:ac:44:da:a9:01:81:b2:
c5:c3:66:e5:67:cd:1d:4f:48:f1:c2:d3:40:73:d3:
96:9c:64:5d:8d:c6:1b:98:69:12:c9:b4:f6:2c:8e:
57:1f:a8:81:5e:26:2b:94:8b:49:a1:ca:f7:40:91:
a7:90:a2:be:04:c2:82:d7:76:73:19:01:0a:c9:8c:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4C:5D:41:63:46:5A:30:0E:00:B0:5D:91:33:2B:81:4C:BD:70:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/999C280C841511F0AA00C5EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.33.0/24
154.194.119.0-154.194.127.255
154.196.29.0/24
154.196.32.0/24
154.196.34.0/23
154.196.37.0-154.196.39.255
154.196.89.0-154.196.91.255
Signature Algorithm: sha256WithRSAEncryption
cf:40:b8:e7:19:62:e4:03:9c:98:73:4e:b4:7a:39:56:ac:18:
95:86:a3:eb:eb:72:e4:cd:14:30:48:27:9f:f6:b7:cc:4c:cf:
82:58:80:7b:61:92:21:d9:74:a4:e2:41:26:81:d4:89:a3:4a:
10:da:d5:a7:99:5c:71:00:e0:51:7e:04:4c:13:1e:04:8a:ac:
28:82:36:89:7a:70:fb:ac:b0:c9:27:ec:de:8d:30:77:ab:26:
09:75:d1:1c:ea:73:a0:54:6f:2c:ce:e0:75:da:f3:73:2a:e1:
be:4a:e3:23:b7:8a:f7:85:1c:e2:6f:c0:75:24:49:16:e4:b7:
68:52:b3:3d:f3:32:05:fd:b7:c7:3c:6b:d1:36:23:58:d6:08:
1c:1c:86:bf:d3:9d:3f:d3:2f:eb:cf:68:0e:f9:fe:52:da:0e:
c6:50:55:8d:3e:47:28:71:9a:ef:f6:bd:53:a6:c0:d3:ff:97:
e7:0b:fc:f9:79:4d:90:6f:87:ee:5e:b6:e9:68:a2:99:e2:df:
14:93:6e:22:c8:4e:c8:15:e6:38:91:ed:60:b8:4a:c1:97:24:
28:bd:3b:ba:c0:37:b0:9f:b8:22:ea:d5:05:54:f5:7a:cf:b8:
9c:57:b7:03:13:4d:89:2e:96:dd:30:ea:8a:76:9f:ae:ef:cf:
13:d3:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:41:50 2025 by rpki-client