Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1B7C7DC83ED11F0AB894CE9DAE4EC9C.roa
File: D1B7C7DC83ED11F0AB894CE9DAE4EC9C.roa (raw, json)
Hash identifier: WHwpTQTnB+CQqnhoemdv1plSFOSkbSw6jFziag448DM=
Subject key identifier: 46:BE:1B:B2:C0:AB:8D:CF:39:99:FE:26:65:77:4F:7B:C9:A8:64:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01996F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1B7C7DC83ED11F0AB894CE9DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 09:03:10 +0000
ROA not before: Thu 28 Aug 2025 09:03:05 +0000
ROA not after: Thu 04 Dec 2025 09:03:05 +0000
asID: 136744
IP address blocks: 154.196.245.0/24 maxlen: 24
154.211.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104815 (0x1996f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 09:03:05 2025 GMT
Not After : Dec 4 09:03:05 2025 GMT
Subject: CN=68b01b4e-41ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:ff:0e:b2:e4:b7:a4:ca:33:c5:31:93:2d:
32:be:13:1b:38:db:d0:6f:24:cc:e7:98:d8:f6:05:
5d:c3:c9:c2:9f:08:8a:4f:f8:91:48:a1:c2:49:dc:
c4:79:aa:fb:f2:01:3b:b2:0b:9b:43:00:b9:ca:6e:
da:cd:43:ae:e0:4c:df:cf:20:68:ff:6a:d3:94:4f:
30:b4:1c:e4:c6:ca:33:83:38:0c:ee:16:68:f1:48:
10:24:23:d3:9c:16:c8:a2:e8:85:1c:5f:ef:d0:a7:
ea:b0:6a:1d:1e:d2:0a:ec:20:d3:72:32:93:9c:15:
0e:46:2d:93:3b:76:b3:13:07:46:2b:d2:04:e5:a6:
41:0c:91:6f:35:1d:c6:29:ff:74:db:5b:99:6b:f8:
e5:bb:f8:87:43:1c:ef:bf:03:0c:39:9c:8c:1a:86:
73:b6:52:7c:e9:d1:d7:5e:ae:e2:03:67:33:bf:b5:
1d:19:ae:72:d7:d9:42:8f:a4:63:a6:7e:6d:2a:1d:
5e:94:c6:69:ea:b3:ba:be:89:c7:b8:76:57:06:f1:
3a:f6:ee:3b:eb:77:ee:2d:c5:47:e2:e4:0f:b8:25:
44:76:4d:71:92:c8:17:4b:e1:e9:c1:4f:40:f6:95:
30:4b:b4:eb:57:78:85:2b:95:b8:63:75:4c:1c:9c:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:1B:B2:C0:AB:8D:CF:39:99:FE:26:65:77:4F:7B:C9:A8:64:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1B7C7DC83ED11F0AB894CE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.245.0/24
154.211.181.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8d:9d:4c:94:bf:5b:01:21:6a:39:52:4d:fb:5f:d1:a9:e4:
0d:38:44:34:42:53:12:f7:18:cf:b2:34:b9:aa:3c:60:2a:4c:
6e:42:74:bb:72:63:7a:28:56:80:73:45:09:d5:9c:f0:bc:77:
9f:fd:0a:dc:49:a3:b0:9f:fc:7a:47:46:94:61:fb:f5:e4:d5:
74:34:bc:29:72:88:f9:7f:b0:f3:df:52:b5:53:43:2d:da:e9:
04:39:10:1e:f9:65:cd:73:f2:17:15:bb:43:1a:c0:d7:8a:15:
78:5c:33:c7:4f:31:5f:03:ae:7d:2e:6f:04:96:43:44:0b:ac:
af:20:5d:15:a9:62:a4:ae:84:b1:05:4e:49:c3:50:dd:dc:c1:
ab:10:6c:ca:1f:e1:7a:6f:99:97:38:07:df:9d:7a:e9:c9:74:
96:d5:53:dc:d5:6f:60:f0:c7:8a:4d:28:0f:02:32:34:5d:33:
06:1b:51:a9:c7:c2:5a:5f:45:26:07:51:26:4e:d9:c7:f6:4c:
30:51:a7:88:15:07:44:f9:d4:54:9e:81:fc:6d:21:e5:6e:ae:
6c:95:76:c5:b1:9e:94:25:93:e9:51:1a:62:56:cd:e5:f0:d2:
ce:2f:77:1e:70:d9:ad:12:50:a5:43:e7:64:36:3b:8b:26:76:
3d:7d:2e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:37 2025 by rpki-client