Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFCAD74A87F811F0AEB1D9CDDAE4EC9C.roa
File: AFCAD74A87F811F0AEB1D9CDDAE4EC9C.roa (raw, json)
Hash identifier: eK6FmNRiIyrX7Dd0o8YdLziJTxEjokKu13cGh107xfY=
Subject key identifier: A6:42:6E:59:FB:F3:59:04:FE:0A:A0:AC:E8:36:47:C6:D3:76:46:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019C30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFCAD74A87F811F0AEB1D9CDDAE4EC9C.roa
Signing time: Tue 02 Sep 2025 12:31:02 +0000
ROA not before: Tue 02 Sep 2025 12:30:57 +0000
ROA not after: Tue 14 Oct 2025 12:30:57 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105520 (0x19c30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 12:30:57 2025 GMT
Not After : Oct 14 12:30:57 2025 GMT
Subject: CN=68b6e386-63e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:64:0a:e0:06:9c:4d:7a:34:88:bd:91:3d:
62:db:5c:18:e1:cb:19:6e:c7:1c:75:d1:4b:bf:cd:
9c:6d:9c:4b:0e:d0:89:45:76:67:2e:28:9f:d9:74:
8d:0f:5e:a7:26:2e:78:43:f2:8e:87:b0:1e:8c:39:
90:a4:92:79:9e:91:9e:94:bc:ad:8d:2f:6c:6f:4f:
ca:cd:0a:8b:80:c0:a0:e8:ed:52:fc:ae:dc:09:21:
51:9e:ac:1c:6b:39:99:7c:56:c6:cf:bb:9d:4a:19:
20:a1:1d:94:ab:9a:73:4f:86:7b:76:58:44:ec:2c:
fc:5f:53:90:17:16:56:f9:78:6e:47:5d:87:ad:03:
e5:03:42:78:10:9e:87:01:bc:c1:32:64:82:d8:21:
cc:d5:4d:a2:9f:cd:65:ee:f9:93:86:98:a1:ad:81:
a9:b2:33:07:38:0d:e1:cf:f5:ba:6e:5c:ef:2a:9f:
57:2d:83:c7:06:c0:ae:3e:76:95:9c:30:aa:36:2f:
26:ad:74:28:5a:a8:27:47:0e:92:7f:ff:83:ec:31:
e4:bc:53:07:ee:81:23:c6:52:98:92:90:83:e5:22:
e6:d2:3f:dc:cf:6d:c6:e8:2c:42:28:1e:5e:b9:f0:
3a:ba:65:28:cb:a7:3a:2f:b4:0b:35:bc:63:70:37:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:42:6E:59:FB:F3:59:04:FE:0A:A0:AC:E8:36:47:C6:D3:76:46:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFCAD74A87F811F0AEB1D9CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:53:30:20:31:de:83:ae:b9:61:e8:41:12:c7:ee:6d:b0:f3:
8f:a9:ed:86:a5:98:f2:7c:81:00:37:fd:55:9a:3e:f7:a7:88:
b8:11:a0:22:12:f9:77:7c:56:f6:37:12:0e:8d:87:63:15:77:
66:44:ef:f6:a4:fb:a8:e3:09:94:ff:53:a5:5e:e9:31:9d:00:
b1:77:cc:d7:8a:45:aa:ba:d1:62:96:c9:38:cf:cd:04:12:05:
f2:c8:f8:c4:be:56:4e:04:1f:99:10:b0:06:5e:f0:82:d8:99:
78:1a:f7:dd:55:c7:09:32:68:d2:dc:dc:5a:38:97:20:24:da:
e6:86:33:8f:5e:5c:f6:0f:b6:c8:f6:8b:59:ac:a8:ad:d3:1f:
a7:73:f9:e6:85:fc:27:06:a3:1e:a9:66:7f:50:53:12:a1:04:
72:b1:eb:f6:62:fd:7f:cd:68:09:d6:59:4d:28:ef:a6:01:53:
f9:5b:fc:52:82:ac:2c:3d:6a:06:63:72:9d:f9:ae:22:5a:d0:
60:32:8f:23:50:06:79:55:bc:f5:ec:bd:ad:b1:f7:f1:36:cf:
d7:11:93:1e:c3:64:ca:45:b2:ca:9f:4d:3e:0f:a2:e7:98:1c:
d4:4d:0f:82:92:cc:17:1e:92:c6:44:ce:01:1a:48:90:2e:8a:
25:78:64:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:43 2025 by rpki-client