Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ED769AA837811F092D56ADFDAE4EC9C.roa
File: 9ED769AA837811F092D56ADFDAE4EC9C.roa (raw, json)
Hash identifier: 5uO/5oyWS82DXncPHYNpVyMEWPfLzBuZZdJPed5oEdE=
Subject key identifier: 54:90:11:C6:B1:A0:BD:29:F4:11:9E:71:3A:9F:74:23:3C:D3:7E:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ED769AA837811F092D56ADFDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 19:04:14 +0000
ROA not before: Wed 27 Aug 2025 19:04:06 +0000
ROA not after: Mon 03 Nov 2025 19:04:06 +0000
asID: 63139
IP address blocks: 154.94.111.0/24 maxlen: 24
154.94.112.0/24 maxlen: 24
154.94.113.0/24 maxlen: 24
154.94.114.0/24 maxlen: 24
154.94.115.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.117.0/24 maxlen: 24
154.94.118.0/24 maxlen: 24
154.94.119.0/24 maxlen: 24
154.94.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104697 (0x198f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 19:04:06 2025 GMT
Not After : Nov 3 19:04:06 2025 GMT
Subject: CN=68af56ae-6096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:6a:10:1a:ff:f3:c6:f9:5a:66:d1:57:4b:
68:9b:13:e0:f9:db:11:87:ef:1a:1f:6f:e3:3f:39:
45:35:6c:79:ad:45:b8:2a:79:f6:7a:43:14:c0:68:
f9:2f:3a:0f:5f:9d:2c:ee:41:14:2f:b6:45:13:7a:
57:71:0d:bc:dc:bc:13:15:f5:33:20:3d:6e:61:5b:
bb:f0:05:b0:4f:e2:b4:61:6e:66:ad:c2:84:a8:b0:
33:c0:79:c5:58:36:c1:d3:a1:19:29:e2:c4:fa:85:
96:06:b0:b0:8e:01:c4:5d:fd:36:4e:5f:62:51:12:
b9:52:b5:1f:12:50:01:4a:b6:6d:82:40:0b:4e:24:
84:36:1a:fa:58:e7:60:93:1d:c8:62:f7:9c:54:2d:
86:02:e7:e6:e7:b4:04:c7:11:95:6d:16:bc:0e:eb:
99:fd:09:18:78:05:00:53:83:64:23:bc:4b:b1:dc:
c8:e3:c2:2f:40:87:eb:8f:84:f6:a7:e8:9c:7f:bc:
6b:c1:be:2f:fa:d3:3d:a1:d6:b5:36:e8:d3:1b:a5:
0c:70:73:c3:96:0e:4e:4a:33:b0:b0:e4:d2:b1:bf:
9e:07:bc:cb:26:b2:f9:f2:57:f0:72:6d:4d:8d:22:
6e:47:b8:66:a1:3a:46:5e:b3:63:c9:58:05:e5:54:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:90:11:C6:B1:A0:BD:29:F4:11:9E:71:3A:9F:74:23:3C:D3:7E:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ED769AA837811F092D56ADFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.111.0-154.94.120.255
Signature Algorithm: sha256WithRSAEncryption
85:e0:26:4a:de:0b:d5:51:44:86:01:79:63:4a:f7:22:e5:58:
63:d9:99:7f:b2:9d:f7:d2:a2:bf:7d:80:0d:b4:8a:56:84:ba:
29:32:92:e7:fd:66:9a:64:0f:cf:75:fd:a5:ed:f4:e1:04:60:
53:96:1d:b5:a7:de:ed:06:4f:40:89:c3:d3:8f:29:33:3c:95:
17:87:54:86:f1:a8:91:69:b5:e6:79:21:5c:1f:d6:fc:46:32:
24:e3:8b:b1:5a:19:60:66:1f:8f:25:17:a0:53:33:a2:98:87:
fe:cd:62:8a:1c:77:20:cb:23:01:0b:b4:aa:71:75:47:4a:ee:
37:66:90:aa:74:5d:4a:1c:79:a5:cd:84:b6:44:89:59:74:e2:
ce:68:55:4e:8c:eb:80:31:3d:3e:32:52:91:90:7a:da:09:a2:
8c:2f:7f:59:33:7c:29:05:c1:09:91:6f:f5:01:c7:17:73:a0:
a3:06:2c:54:d3:77:29:a1:31:6b:d3:56:f8:9c:54:22:93:8e:
8e:5e:b2:69:24:5c:7a:59:ef:ec:28:42:13:60:c2:a9:bc:83:
97:4d:24:ca:3a:5f:54:a3:2f:3f:59:9b:dc:f1:cc:83:c2:02:
60:df:73:9c:6e:6c:c9:cd:40:64:6b:92:55:d0:66:cb:e8:b5:
df:7c:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:48:28 2025 by rpki-client