Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BADD935A87CD11F0B1EBFEB8DAE4EC9C.roa
File: BADD935A87CD11F0B1EBFEB8DAE4EC9C.roa (raw, json)
Hash identifier: vVQ+aPV3l34QETo/6ANUYbTDEtQGfA1zFh8NKl+O5vU=
Subject key identifier: 25:4D:D9:E7:05:17:FB:B9:F6:8A:9B:C4:82:60:85:0A:6D:94:C9:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019BC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BADD935A87CD11F0B1EBFEB8DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 07:23:32 +0000
ROA not before: Tue 02 Sep 2025 07:23:28 +0000
ROA not after: Mon 01 Dec 2025 07:23:28 +0000
asID: 399077
IP address blocks: 154.91.97.0/24 maxlen: 24
154.91.98.0/24 maxlen: 24
154.91.99.0/24 maxlen: 24
154.91.100.0/24 maxlen: 24
154.91.101.0/24 maxlen: 24
154.91.102.0/24 maxlen: 24
154.91.103.0/24 maxlen: 24
154.91.104.0/24 maxlen: 24
154.91.105.0/24 maxlen: 24
154.91.106.0/24 maxlen: 24
154.91.107.0/24 maxlen: 24
154.91.108.0/24 maxlen: 24
154.91.109.0/24 maxlen: 24
154.91.110.0/24 maxlen: 24
154.91.111.0/24 maxlen: 24
154.91.112.0/24 maxlen: 24
154.91.113.0/24 maxlen: 24
154.91.114.0/24 maxlen: 24
154.91.115.0/24 maxlen: 24
154.91.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105412 (0x19bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 07:23:28 2025 GMT
Not After : Dec 1 07:23:28 2025 GMT
Subject: CN=68b69b74-21b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:b7:4e:7b:71:04:78:b6:a6:80:b0:53:c0:
93:d5:d9:7d:95:7e:87:42:bd:79:37:40:a8:8a:64:
aa:b8:9e:ff:e3:0a:a0:20:46:84:0b:85:c2:93:a3:
e8:e7:da:32:ce:83:57:25:b7:80:ac:5e:52:a3:35:
e1:e1:b5:60:48:b9:1d:10:fe:36:5b:3f:4a:b5:7a:
0c:47:d9:d3:d5:e2:68:e8:8d:94:bb:de:55:77:72:
4f:c8:4e:bc:43:18:42:3d:b2:fb:66:b6:24:79:ec:
35:22:9f:53:63:d4:24:80:08:f8:b9:c7:bc:47:fc:
f4:f2:40:f1:95:14:39:60:54:de:b6:30:e5:a5:16:
9c:9b:43:a7:c4:33:b4:29:06:dd:79:31:66:40:01:
cc:b0:75:b1:e6:fe:3a:9e:90:56:cf:59:9e:a7:32:
c9:2c:8d:7b:b2:76:43:d6:66:18:84:6a:2c:e2:15:
6d:64:3d:31:e2:ba:f6:78:ef:ea:bb:b7:2a:c9:6a:
53:5a:35:68:a5:79:99:b0:d2:4e:ff:16:6f:d2:81:
5f:bc:62:8a:0e:38:a0:67:7b:5d:bf:f9:37:27:0a:
06:f5:a1:b5:2a:10:c1:6e:9c:bc:15:bc:fe:9d:15:
95:61:46:90:b2:6a:42:53:cf:61:aa:f2:4f:e2:ba:
9a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4D:D9:E7:05:17:FB:B9:F6:8A:9B:C4:82:60:85:0A:6D:94:C9:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BADD935A87CD11F0B1EBFEB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.97.0-154.91.116.255
Signature Algorithm: sha256WithRSAEncryption
78:31:ce:e8:46:57:fd:16:ba:0a:f7:da:e1:9c:65:3a:46:67:
ac:7d:90:61:f4:f9:39:c3:60:af:1b:cb:83:7a:69:18:1e:1e:
70:05:73:6e:8e:35:02:5f:02:e7:5d:13:03:f9:27:56:9b:07:
64:12:3f:30:b4:9d:7e:fc:4b:51:88:d8:00:98:d4:d7:64:14:
db:23:c6:5d:2f:49:ae:1a:0c:cc:18:a1:ed:29:c4:47:5c:e5:
bc:80:ef:cc:ca:10:67:ee:6f:73:2d:ab:32:9b:95:d4:e7:1f:
9d:1b:a6:19:cb:83:f5:ea:13:61:76:be:3d:c0:13:db:b5:ef:
b0:15:7d:7d:78:1d:b9:19:d6:a2:61:d1:5b:bd:b5:68:da:c8:
91:1f:fd:cc:21:a4:e9:64:38:6a:f5:2e:a2:dc:6d:35:c3:e2:
1a:da:82:7b:50:2d:e6:8c:ed:91:c3:89:62:07:1a:fe:50:8a:
48:4f:54:12:67:9d:5c:d9:80:ce:d3:34:60:7b:38:fc:5a:13:
5b:73:bc:49:7d:3f:3c:83:6b:d1:df:1d:4d:9d:9a:53:ce:2c:
79:fa:a9:bc:16:c9:2e:a8:09:c5:13:1f:ce:da:2c:f0:bf:96:
d5:de:00:36:9a:31:d9:98:0b:2e:ce:ab:10:ad:5f:f6:98:cc:
ea:dc:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:17 2025 by rpki-client