Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2FE90F48CE311F09EA0B1AFDAE4EC9C.roa
File: D2FE90F48CE311F09EA0B1AFDAE4EC9C.roa (raw, json)
Hash identifier: yRay26VVL9YX+LxuM/BXYxssLGVwPc336Icg0jqnemQ=
Subject key identifier: 42:6D:63:51:E5:5A:69:59:9D:53:90:5E:D4:5E:3C:E9:2E:2C:96:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019EDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2FE90F48CE311F09EA0B1AFDAE4EC9C.roa
Signing time: Mon 08 Sep 2025 18:44:18 +0000
ROA not before: Mon 08 Sep 2025 18:44:12 +0000
ROA not after: Fri 28 Apr 2028 18:44:12 +0000
asID: 17561
IP address blocks: 154.95.42.0/24 maxlen: 24
154.95.43.0/24 maxlen: 24
154.95.44.0/24 maxlen: 24
154.95.45.0/24 maxlen: 24
154.95.46.0/24 maxlen: 24
154.95.47.0/24 maxlen: 24
154.95.56.0/24 maxlen: 24
154.95.57.0/24 maxlen: 24
154.95.58.0/24 maxlen: 24
154.95.59.0/24 maxlen: 24
154.95.60.0/24 maxlen: 24
154.95.61.0/24 maxlen: 24
154.95.62.0/24 maxlen: 24
154.95.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106205 (0x19edd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 18:44:12 2025 GMT
Not After : Apr 28 18:44:12 2028 GMT
Subject: CN=68bf2402-e162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:16:2b:84:15:9a:1a:db:3a:8f:b2:92:3b:
34:5b:b3:27:70:ef:65:2c:00:8a:d2:0c:28:9c:fd:
48:fe:8c:ec:a0:19:5f:7c:50:d6:f4:30:20:db:22:
12:63:15:c2:b9:e1:c0:b1:9d:d5:1c:5a:ec:70:b6:
5b:ca:f4:f4:19:b6:f7:43:c4:a0:a8:be:cb:b8:38:
fc:ee:78:13:e9:dc:f2:87:59:61:a4:3c:1f:19:55:
1f:d0:51:71:13:cd:2f:9b:ff:5b:b7:9c:fe:79:57:
e4:26:af:bc:1d:96:d3:87:86:e9:9b:28:ce:b2:ab:
1c:44:eb:e2:4a:86:e7:2a:aa:f6:5b:e6:3b:0c:8b:
3d:68:55:d4:9e:1a:78:6e:54:3f:49:10:5b:32:e9:
5b:55:e6:68:d0:c6:e3:28:89:92:ba:e8:59:df:91:
1c:ac:91:39:ac:4c:55:23:95:a8:64:50:74:f9:5c:
4a:b7:e6:af:8a:bd:4f:1a:24:71:cf:4c:b4:7a:72:
09:2a:f3:63:e6:8f:50:b4:15:32:f9:4c:b7:a8:08:
87:53:3d:00:63:84:b1:31:08:58:d2:2d:e9:d7:fc:
7c:d9:bc:17:32:53:02:cc:c4:3c:ba:2d:19:c8:c2:
ed:6e:45:35:0c:34:49:42:65:c3:4c:e4:e0:32:ee:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:63:51:E5:5A:69:59:9D:53:90:5E:D4:5E:3C:E9:2E:2C:96:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2FE90F48CE311F09EA0B1AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.42.0-154.95.47.255
154.95.56.0/21
Signature Algorithm: sha256WithRSAEncryption
14:5e:df:fe:c3:43:de:2f:d3:58:7b:ef:88:29:fb:ea:10:cf:
b5:24:01:0c:ff:c3:7c:35:ff:83:aa:dd:c8:2c:49:ee:f7:49:
d7:a9:05:74:37:cc:36:21:52:dd:bd:a8:24:2c:8a:a1:2b:c8:
42:17:79:80:83:da:3d:ae:eb:b3:a3:89:b9:b8:1c:ec:2e:bb:
a7:77:91:04:2e:48:f8:dd:e7:3b:f6:2c:e9:3e:da:13:5f:9a:
5c:1d:ef:21:4f:db:57:c9:d2:19:78:b3:4f:05:fe:90:9b:61:
9e:87:c7:51:01:ab:bf:1e:88:b6:30:65:dd:f3:c0:a2:a9:b2:
e0:c3:b6:bf:0a:86:6b:5a:a2:f8:16:a6:b7:be:6c:d7:b4:16:
33:bd:0c:48:79:ee:bb:8d:60:8c:8f:bd:a4:41:67:7c:8d:21:
bb:79:02:6e:e5:72:da:64:f4:e5:c6:05:ca:0d:2e:d9:e0:bc:
94:c6:c0:a2:c9:1a:0b:b6:ca:18:b8:6b:11:8a:e8:18:e7:c2:
12:31:d7:da:1c:8d:3d:16:a3:8b:63:22:a8:2f:4c:28:65:ed:
ad:f9:c0:59:60:6e:62:6a:b7:6a:b7:67:e4:c8:7e:ae:0f:75:
6c:eb:f5:73:53:42:cf:1a:cc:18:9f:a4:b3:dc:d5:59:71:8a:
9a:2c:87:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:03 2025 by rpki-client