Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C880161287CE11F08924A9BFDAE4EC9C.roa
File: C880161287CE11F08924A9BFDAE4EC9C.roa (raw, json)
Hash identifier: NuSxjxzzz6MIBNIoblzmA/4gB0TD+BK/JniqxKW0crU=
Subject key identifier: 74:D3:17:AE:21:9F:1B:4C:DC:B1:89:B2:0E:0B:5E:93:F3:A4:98:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019BC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C880161287CE11F08924A9BFDAE4EC9C.roa
Signing time: Tue 02 Sep 2025 07:31:05 +0000
ROA not before: Tue 02 Sep 2025 07:31:00 +0000
ROA not after: Mon 01 Dec 2025 07:31:00 +0000
asID: 399077
IP address blocks: 154.91.77.0/24 maxlen: 24
154.91.78.0/24 maxlen: 24
154.91.79.0/24 maxlen: 24
154.91.80.0/24 maxlen: 24
154.91.81.0/24 maxlen: 24
154.91.82.0/24 maxlen: 24
154.91.83.0/24 maxlen: 24
154.91.84.0/24 maxlen: 24
154.91.85.0/24 maxlen: 24
154.91.86.0/24 maxlen: 24
154.91.87.0/24 maxlen: 24
154.91.88.0/24 maxlen: 24
154.91.89.0/24 maxlen: 24
154.91.90.0/24 maxlen: 24
154.91.91.0/24 maxlen: 24
154.91.92.0/24 maxlen: 24
154.91.93.0/24 maxlen: 24
154.91.94.0/24 maxlen: 24
154.91.95.0/24 maxlen: 24
154.91.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105416 (0x19bc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 07:31:00 2025 GMT
Not After : Dec 1 07:31:00 2025 GMT
Subject: CN=68b69d39-975e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:1d:42:16:d0:dd:f7:e9:de:4e:19:64:8c:
f9:5c:1b:d9:b4:26:fb:33:10:ae:37:4c:c2:30:ff:
42:62:3d:e2:28:d5:b3:a7:d8:4c:e4:06:89:34:c6:
cb:c9:e4:02:f6:e1:e7:62:27:67:04:30:76:95:7d:
22:4b:85:98:92:e4:79:2e:87:df:4c:79:1d:71:39:
6f:a8:3d:fd:5d:89:c8:51:16:ec:51:05:98:ff:1d:
0a:d4:3c:3f:1a:a0:5e:0c:20:23:73:01:b4:77:1f:
3c:6a:a7:d4:cb:e3:4c:cc:63:9b:98:51:b1:1f:4f:
dc:83:67:19:ab:76:d7:92:2f:0e:56:36:35:17:15:
f7:bc:24:0b:3e:d9:b3:aa:19:e0:62:88:3d:cc:f4:
de:3c:af:92:b4:63:5d:48:88:37:aa:2a:80:20:58:
0b:80:a2:ee:4d:96:03:ab:ad:26:7c:53:46:a1:e4:
26:c2:fc:c1:e3:c0:ff:ef:a0:02:a0:43:9a:97:0a:
b5:9b:6b:9c:78:e8:6d:f9:39:47:fa:f3:c3:68:0c:
be:55:63:8f:14:6c:9f:2b:51:aa:3a:76:71:28:bb:
32:ae:2e:9b:35:f1:5a:0f:25:39:37:4e:9f:4d:89:
b5:22:b3:4e:31:e4:43:cf:50:90:ea:0e:06:28:c6:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:17:AE:21:9F:1B:4C:DC:B1:89:B2:0E:0B:5E:93:F3:A4:98:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C880161287CE11F08924A9BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.77.0-154.91.96.255
Signature Algorithm: sha256WithRSAEncryption
66:52:a6:f2:ca:5c:20:13:b4:a8:89:d2:51:d6:0f:42:fd:a0:
e7:ef:a5:2e:7a:b0:a3:d2:22:df:e7:de:61:e7:a4:b7:67:fd:
42:94:41:fe:77:df:15:5c:1a:4f:33:00:7d:16:f7:0f:0b:fd:
8b:64:00:05:3f:6e:bf:78:d8:23:c3:d1:df:6f:eb:a2:11:24:
ba:b3:5a:ca:c3:3f:41:a8:f8:73:de:98:b0:28:4c:4b:9a:31:
8d:12:13:34:e9:97:4e:e5:61:4c:af:59:09:a0:16:c6:ff:97:
50:4b:82:0c:5e:b8:a8:1b:5a:9d:d8:50:a9:1d:cc:fa:fb:f6:
98:b2:3f:fa:b2:98:fd:76:73:6a:04:af:8d:2f:ba:70:8f:5a:
74:ce:ad:0f:c6:b8:da:63:48:b2:57:1b:ab:d7:ef:1b:54:b1:
80:04:14:82:75:b1:30:6d:e8:e6:6c:4b:b5:9b:c8:b4:d6:6b:
51:99:06:af:77:c8:82:9e:a8:84:8e:e1:e1:df:c4:87:bb:da:
2a:b2:b6:5a:7d:42:38:6a:20:2b:35:e0:01:4b:05:eb:3a:1d:
16:ba:2a:89:4d:e8:bf:81:60:23:80:92:d7:31:a0:de:67:d2:
3a:4a:cc:d2:66:24:27:0a:eb:d8:c8:25:99:22:ec:9c:f8:b2:
2d:7a:53:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:27 2025 by rpki-client