Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C91FBA04833D11F0A9A99BE4DAE4EC9C.roa
File: C91FBA04833D11F0A9A99BE4DAE4EC9C.roa (raw, json)
Hash identifier: 0A9NMj6ws+kvlaEncIx3d2cKjqyfXyG8NSOW6OUwTDs=
Subject key identifier: EC:5C:35:A9:00:4A:0C:A3:93:A3:E6:32:61:42:22:62:C6:73:06:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019878
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C91FBA04833D11F0A9A99BE4DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 12:03:04 +0000
ROA not before: Wed 27 Aug 2025 12:02:59 +0000
ROA not after: Fri 10 Oct 2025 12:02:59 +0000
asID: 138915
IP address blocks: 154.95.64.0/24 maxlen: 24
154.95.65.0/24 maxlen: 24
154.95.66.0/23 maxlen: 24
154.95.66.0/24 maxlen: 24
154.95.67.0/24 maxlen: 24
154.95.68.0/24 maxlen: 24
154.95.70.0/23 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104568 (0x19878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 12:02:59 2025 GMT
Not After : Oct 10 12:02:59 2025 GMT
Subject: CN=68aef3f8-bfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:4f:d9:fc:fe:42:e8:e7:60:eb:2f:3c:e6:
ed:e6:3c:83:d4:ad:69:da:c5:56:0a:77:3a:c2:4a:
6d:e0:1b:30:a1:da:8f:20:45:c3:89:48:16:4d:cb:
30:f6:ba:2a:e4:90:50:49:4a:34:ec:19:b8:98:d4:
7e:2f:56:87:d2:f7:a2:6c:57:2b:01:d3:27:2b:b6:
51:30:55:b8:d4:3e:72:14:e9:cf:ca:2e:f4:3e:d2:
43:48:02:d8:f4:43:f0:b3:18:38:bf:c7:2f:13:91:
44:4f:1d:d3:c6:11:b0:1a:8e:89:50:e8:79:53:1e:
0e:55:89:38:1b:da:1a:2c:e0:c8:c3:b7:98:4e:b6:
37:e0:45:ec:2d:38:2f:49:e0:54:8e:2d:a7:17:ad:
4b:f4:c3:92:06:a3:87:9d:8d:33:72:4c:0a:b4:9e:
a7:0b:63:f6:e4:60:23:5f:02:aa:82:96:1f:71:d1:
65:70:f7:c1:5d:e3:90:96:15:cb:f5:ad:62:58:90:
3e:70:be:6f:39:d6:2b:60:5f:b9:03:c0:bf:66:97:
28:be:c4:bc:da:ed:6f:c0:9d:23:83:f4:18:c2:b2:
f3:a9:0c:9a:07:9f:5b:8e:6f:2d:56:d4:2e:71:fe:
d9:b7:55:b3:71:2b:2f:05:a5:00:4e:96:69:69:ef:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5C:35:A9:00:4A:0C:A3:93:A3:E6:32:61:42:22:62:C6:73:06:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C91FBA04833D11F0A9A99BE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.64.0-154.95.68.255
154.95.70.0/23
154.95.104.0/21
154.95.116.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:ad:d0:f8:01:ea:3c:26:ce:60:91:cc:40:72:52:4a:cf:18:
5a:d3:65:5a:f4:c6:a1:61:80:7e:92:14:6e:54:b6:dd:ed:65:
4f:94:5d:68:66:42:29:31:ce:9f:a7:41:34:ef:5a:ed:f7:9c:
e3:3d:cb:91:d4:be:08:f8:c1:c6:08:fb:62:52:09:7f:98:43:
c7:15:26:e3:1a:17:b9:1f:8f:37:61:b5:e8:9a:e6:7c:7c:97:
d2:7d:d1:06:84:26:f9:aa:e3:56:fe:94:a9:ba:d5:19:07:b6:
96:e4:aa:d7:9d:31:0a:15:e5:29:10:5b:dd:2c:ad:d1:54:7e:
aa:33:cc:6d:b2:d2:f4:9b:18:f6:30:4a:00:0d:e6:c3:b8:97:
c5:79:e7:f6:70:6f:30:52:00:78:fe:5e:1a:e0:1a:56:33:36:
57:16:dc:49:1f:7b:64:f7:01:c1:0b:71:0d:45:11:82:4b:d0:
3d:49:40:30:ba:46:9f:bf:ca:f0:7c:ac:1a:ca:ae:78:3b:4d:
7f:86:30:cf:d6:c3:da:b0:f7:71:b8:bb:34:d2:a0:70:60:9b:
e6:df:ef:2b:75:6c:f4:86:9a:99:68:b9:01:dd:c2:64:4b:84:
bc:ad:c5:ac:38:55:f5:6a:13:2d:b5:3e:c9:57:45:dd:b0:1a:
0b:55:c3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:28 2025 by rpki-client