Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A91AF916841011F0B7E555CBDAE4EC9C.roa
File: A91AF916841011F0B7E555CBDAE4EC9C.roa (raw, json)
Hash identifier: zOTR3MYE6p97N/76TRl8XIaPP5UBBBkgP1Yyfl3YriU=
Subject key identifier: 60:EF:4A:07:B1:24:E0:B5:B4:3C:06:AC:A7:1D:FD:ED:52:9C:D4:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A91AF916841011F0B7E555CBDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 13:12:34 +0000
ROA not before: Thu 28 Aug 2025 13:12:30 +0000
ROA not after: Tue 30 Sep 2025 13:12:30 +0000
asID: 62240
IP address blocks: 154.195.139.0/24 maxlen: 24
154.195.143.0/24 maxlen: 24
154.195.144.0/24 maxlen: 24
154.195.145.0/24 maxlen: 24
154.195.146.0/24 maxlen: 24
154.195.147.0/24 maxlen: 24
154.195.148.0/24 maxlen: 24
154.195.149.0/24 maxlen: 24
154.195.150.0/24 maxlen: 24
154.195.151.0/24 maxlen: 24
154.195.168.0/24 maxlen: 24
154.195.169.0/24 maxlen: 24
154.195.170.0/24 maxlen: 24
154.195.171.0/24 maxlen: 24
154.195.172.0/24 maxlen: 24
154.195.173.0/24 maxlen: 24
154.195.174.0/24 maxlen: 24
154.195.175.0/24 maxlen: 24
154.195.176.0/24 maxlen: 24
154.195.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104902 (0x199c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 13:12:30 2025 GMT
Not After : Sep 30 13:12:30 2025 GMT
Subject: CN=68b055c2-5f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1d:09:bb:ea:4e:82:6c:b7:92:e0:8c:d5:84:
d6:31:06:6e:12:ae:5c:6c:20:f4:65:47:06:9f:a8:
1a:8d:0c:c4:f4:b3:98:f8:8e:9e:d7:76:01:e5:3e:
92:49:7c:1a:05:e8:ff:7e:5e:95:a3:37:c5:d9:8e:
b5:b0:2d:18:c4:0e:d7:9a:80:8b:2f:bc:7c:77:56:
fa:7c:76:7f:2c:ee:2e:2a:22:0e:00:79:82:6a:bb:
21:6d:4f:14:bf:a9:34:b3:c1:b5:7a:5e:b5:ff:0c:
e9:77:3b:56:45:9c:8a:83:a3:5a:07:b7:a6:ba:a5:
82:be:d1:1f:be:f0:17:06:2f:64:d7:9f:24:75:cd:
6d:96:9f:4d:ca:5f:d0:02:5f:52:9c:c6:4b:09:78:
88:82:02:5b:3d:67:c9:9b:7f:ec:b5:4d:6e:f1:81:
16:84:ed:04:7b:3b:13:80:bc:df:56:be:e1:04:0b:
65:32:fb:9c:d6:58:46:a7:bd:38:24:e6:f7:51:4c:
7c:2c:2f:43:1c:7b:63:69:ce:64:09:01:30:fb:3c:
8d:e7:d0:d5:42:4e:40:21:a0:70:04:60:67:73:6f:
89:17:5c:4a:41:c6:db:a5:c0:dc:19:eb:fa:43:3e:
8b:ae:8c:00:6c:c2:75:16:b6:4b:1a:02:dc:c7:fe:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EF:4A:07:B1:24:E0:B5:B4:3C:06:AC:A7:1D:FD:ED:52:9C:D4:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A91AF916841011F0B7E555CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.139.0/24
154.195.143.0-154.195.151.255
154.195.168.0-154.195.177.255
Signature Algorithm: sha256WithRSAEncryption
2c:d3:18:fe:41:47:84:c6:ce:95:44:56:73:ee:ee:bf:6d:e6:
ef:9e:32:12:82:7a:60:d5:49:fe:92:28:40:79:26:b8:53:ff:
d7:32:11:96:93:d4:8d:93:97:5b:6e:38:39:83:aa:5c:30:ec:
c5:86:2f:5e:7d:81:7e:fd:2b:44:41:0d:98:d8:c0:77:a1:ce:
e2:bc:81:68:dd:a7:4a:01:c4:12:99:2e:8d:22:3b:1e:2a:6b:
2f:2c:7e:a1:06:6c:26:f3:1f:c8:d3:c0:8d:0e:0b:0c:de:54:
da:b7:0d:bf:7c:18:68:60:3a:ba:97:5e:be:f6:87:d0:51:ba:
f3:3a:f5:79:3e:9c:c1:4d:df:c2:6b:b1:6b:d1:31:21:de:6c:
83:42:5f:78:5c:51:9f:08:c3:73:f3:c4:25:15:20:5b:7f:26:
74:f5:06:6d:fa:37:fa:eb:ae:b3:2e:34:ee:d9:ef:d6:07:69:
db:df:0d:d7:c7:98:f6:69:5a:4c:35:21:7e:82:40:45:37:f0:
b6:2e:fb:ce:fd:5a:77:18:62:a0:17:78:56:f9:ed:fe:62:05:
ed:e0:d2:70:f6:97:00:1a:cc:46:2d:c6:a2:91:dd:3f:5d:a9:
7c:fd:2d:cf:ac:88:7b:e3:55:2a:ea:e7:2e:e4:bb:24:2e:68:
a4:8e:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:48:27 2025 by rpki-client