Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD7222C088BE11F0B015F0C9DAE4EC9C.roa
File: AD7222C088BE11F0B015F0C9DAE4EC9C.roa (raw, json)
Hash identifier: jaKvg0Zo+T3509YWxsKa6bmwRobd7wJRUKjhdEbQvMg=
Subject key identifier: 6D:93:EA:43:44:52:A1:AD:C4:8B:91:2A:A9:9A:4C:4C:77:2A:AC:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD7222C088BE11F0B015F0C9DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 12:08:19 +0000
ROA not before: Wed 03 Sep 2025 12:08:12 +0000
ROA not after: Sat 11 Oct 2025 12:08:12 +0000
asID: 150698
IP address blocks: 154.197.72.0/24 maxlen: 24
154.197.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105736 (0x19d08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 12:08:12 2025 GMT
Not After : Oct 11 12:08:12 2025 GMT
Subject: CN=68b82fb3-d4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:b9:b1:a7:62:dc:35:80:82:2e:0c:c9:8f:
48:9a:0e:17:aa:2e:f6:47:eb:0f:53:3a:55:58:f6:
d9:d2:5b:85:d4:12:c0:24:06:8b:89:60:18:79:be:
57:3e:ef:8b:8a:12:37:c2:fc:9f:34:14:3a:2d:f4:
dd:14:6c:e6:0c:92:c9:5d:e5:77:bf:bb:a7:28:36:
8d:00:1d:12:68:82:67:9b:57:f5:92:10:d4:73:7c:
a9:12:72:0e:db:8b:ef:37:a0:9f:0a:67:77:55:88:
b6:c7:21:88:b3:56:2f:9d:52:67:30:6d:ad:d5:58:
37:3c:c2:37:69:70:06:5e:3e:6e:47:b4:bb:82:08:
e0:e0:8c:91:92:3d:81:a8:a8:ed:c1:ac:d5:0e:d7:
ed:17:76:ce:97:d3:fd:15:16:54:d4:13:c8:07:d5:
0a:fa:8b:c5:e9:eb:6a:64:6c:b9:f5:02:bd:e0:e1:
03:a0:7d:b8:dd:fa:90:a2:f1:33:ef:a4:df:ad:87:
cd:35:16:e5:24:d3:47:7f:26:52:ea:f6:d5:eb:2f:
23:fb:2d:79:2c:65:df:44:72:c8:ad:fe:7a:ce:8f:
8d:60:ba:11:8d:0d:34:29:81:d3:b8:7d:68:80:d2:
17:23:b3:cd:5c:96:d2:6e:89:d8:b6:e9:3f:22:82:
d8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:93:EA:43:44:52:A1:AD:C4:8B:91:2A:A9:9A:4C:4C:77:2A:AC:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD7222C088BE11F0B015F0C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.72.0/23
Signature Algorithm: sha256WithRSAEncryption
99:10:2b:44:03:e7:49:9e:15:6f:3b:dd:bc:39:f6:a8:96:71:
70:1e:7d:00:d7:06:1c:f6:28:56:8d:eb:a2:ca:94:59:ab:77:
a6:0c:c0:68:9b:ef:b1:a2:6f:9c:80:95:b0:79:fa:12:b8:d6:
4a:f1:2a:01:c4:8b:94:5c:6c:e8:df:06:70:c2:3c:34:b8:23:
63:ac:86:a4:33:d0:3c:b6:67:39:44:5d:3e:1a:9b:3f:65:3a:
1d:d2:b0:c5:8e:2a:04:ed:1c:79:7b:b5:30:23:44:c2:f4:0d:
f8:83:98:04:27:68:23:fa:e8:e8:c1:e0:5f:7a:1c:4f:06:f7:
d1:ee:9b:66:fc:87:b6:2f:80:3e:bd:a8:ad:6b:35:42:2a:dd:
e8:8d:5e:5a:f1:b6:fd:59:24:3d:93:e7:c5:3a:6a:5b:17:04:
ca:eb:2e:c8:d7:37:61:68:87:2d:e7:1e:42:52:d4:c9:dc:ea:
00:37:a3:ae:da:ee:aa:0b:f2:b6:cc:9d:a2:f1:0d:f1:90:b8:
22:b3:bd:b2:35:45:17:53:15:8b:3a:2d:80:e4:37:3b:8b:87:
0e:47:dd:e1:7c:db:08:7e:b6:d4:85:08:c1:17:5f:4d:2a:0b:
86:76:86:bb:6f:c4:04:d2:59:9e:c8:ae:cc:96:91:dc:65:35:
1a:2a:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:44 2025 by rpki-client