Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC659144888E11F0986E7893DAE4EC9C.roa
File: AC659144888E11F0986E7893DAE4EC9C.roa (raw, json)
Hash identifier: q4ynwQf+C3PIvt9VlSn6NZPH8fJCzVynHXxRtLFNrWE=
Subject key identifier: EB:79:31:AB:EF:E9:FF:B5:20:C0:8D:0A:6D:65:E5:07:2C:2A:F2:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019C82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC659144888E11F0986E7893DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 06:24:41 +0000
ROA not before: Wed 03 Sep 2025 06:24:36 +0000
ROA not after: Tue 28 Apr 2026 06:24:36 +0000
asID: 13335
IP address blocks: 154.207.127.0/24 maxlen: 24
154.207.252.0/24 maxlen: 24
154.207.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105602 (0x19c82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 06:24:36 2025 GMT
Not After : Apr 28 06:24:36 2026 GMT
Subject: CN=68b7df29-9095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:f6:c6:25:32:66:c3:14:15:2e:54:d7:34:
89:16:5d:f8:25:3e:1e:d8:fe:6d:2d:4c:f0:04:11:
01:8c:a2:47:5b:4d:8e:33:e2:d5:8f:50:bd:2f:f5:
de:98:c0:a4:e7:65:13:af:b3:55:ae:d4:c3:f5:7c:
d9:3a:e1:06:7e:b2:61:2e:c4:86:a5:3d:a9:22:f5:
32:be:2f:0c:8a:66:e3:47:a8:30:e7:98:e0:10:70:
5d:ab:49:d8:d3:75:b0:34:2b:30:fd:38:3d:62:27:
1d:10:5a:53:48:bf:e4:ff:a7:ad:e5:d6:85:b4:0d:
e3:89:9f:5f:ee:ce:4f:18:7e:34:85:f5:c5:be:e6:
d3:85:3a:18:51:e2:55:27:d6:f6:b1:44:bb:cd:f9:
a8:8d:7e:1a:bb:5e:f2:9c:79:cf:35:a2:46:cf:97:
cf:d3:db:8f:63:66:95:03:00:38:f8:1d:4f:5a:06:
3d:b4:61:4c:bd:38:39:69:80:1f:5a:35:24:4e:c1:
c7:a6:28:ab:08:51:46:84:79:d9:35:05:eb:3d:84:
67:af:e0:3b:e2:15:3f:1d:38:1a:6e:2f:aa:e0:07:
5a:76:ab:83:a4:48:78:7b:4d:a8:b2:18:8a:88:94:
21:61:25:f8:41:35:69:77:9a:df:eb:8d:5d:66:c6:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:79:31:AB:EF:E9:FF:B5:20:C0:8D:0A:6D:65:E5:07:2C:2A:F2:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC659144888E11F0986E7893DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.127.0/24
154.207.252.0/23
Signature Algorithm: sha256WithRSAEncryption
87:46:54:06:01:6f:e7:fa:59:02:a1:39:00:1e:e1:e2:8e:28:
21:73:9d:7d:db:b9:2f:f3:ec:17:18:7c:18:36:56:5e:cd:39:
7a:6a:74:d2:d0:90:49:a6:49:f0:69:34:0d:46:2e:d9:c0:5c:
1b:3c:d0:92:8d:94:98:cd:09:64:60:16:53:14:8e:5d:a9:1c:
f1:a1:ed:51:40:fa:a8:df:9c:c2:2b:08:d3:1b:26:a6:8e:2c:
43:13:d7:8f:01:1e:a5:50:be:fb:32:00:1a:02:2b:1d:b2:ff:
74:3a:2f:73:04:77:ca:89:1a:83:7b:b2:98:9d:32:1e:d2:e1:
2d:10:a2:eb:64:d6:af:f6:51:bc:07:57:cc:72:02:a5:36:41:
9e:7e:12:f9:98:f8:3b:c4:12:87:ce:7e:77:62:f2:78:a2:57:
32:f2:8c:66:b9:67:0d:8e:30:32:85:c2:50:7b:04:c2:f3:52:
56:49:b1:cc:ef:a1:a4:9a:70:00:b0:25:d2:89:28:33:cb:f8:
81:c6:ac:c3:6b:68:92:96:4a:d4:08:83:44:c6:a9:8a:a9:e9:
37:7a:20:95:c1:4e:c8:b4:0c:1e:68:71:8b:cd:e2:9e:bc:98:
77:af:e3:a1:6c:56:51:54:3d:49:59:0d:a4:43:c0:b3:20:e2:
91:ba:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 13:52:10 2025 by rpki-client