Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D88163BA889E11F086EED57DDAE4EC9C.roa
File: D88163BA889E11F086EED57DDAE4EC9C.roa (raw, json)
Hash identifier: U2ypYfT4lEpp7goziMjeEZDaLi3VQPPTk1SqDECfu7w=
Subject key identifier: 9B:14:76:0D:EE:97:47:39:28:D4:70:4C:DE:0A:96:76:DB:03:90:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D88163BA889E11F086EED57DDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 08:20:27 +0000
ROA not before: Wed 03 Sep 2025 08:20:22 +0000
ROA not after: Fri 17 Jul 2026 08:20:22 +0000
asID: 18013
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105653 (0x19cb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 08:20:22 2025 GMT
Not After : Jul 17 08:20:22 2026 GMT
Subject: CN=68b7fa4b-6655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:5e:ce:3d:84:fc:97:dc:49:09:e3:4a:cc:
7d:6f:15:75:84:83:8d:34:21:c8:87:cd:b4:33:eb:
7e:30:76:eb:04:cc:1b:ff:ba:4d:b0:d4:66:a1:e5:
c7:0a:e1:58:66:54:7b:e7:8b:bf:35:8f:0b:dd:b1:
00:c5:a2:3c:a1:b1:52:d7:f9:8b:25:6b:47:be:3b:
42:fa:81:47:56:b9:5f:62:bb:41:ea:74:a4:32:63:
23:d1:3a:ed:42:e0:72:0e:b2:76:b4:28:6f:51:2a:
42:e6:a1:73:7b:cb:97:5b:ee:ee:ed:f3:54:14:91:
1d:4c:05:e1:f4:03:25:f4:23:15:3a:ac:38:be:73:
cb:df:ca:a2:5b:c0:b5:43:de:05:78:7d:dc:92:a3:
c5:68:35:80:5a:64:97:eb:ee:88:21:b8:c0:a1:61:
c4:c5:7c:9c:65:12:93:a7:34:7c:b8:19:99:7c:c5:
00:83:96:56:4e:2f:19:a7:f9:8c:7e:1c:21:db:91:
e6:70:f2:22:7a:ef:1d:6a:9b:71:be:a9:8e:0a:34:
d1:b7:4a:72:f1:f0:e2:6b:ca:cd:53:c7:89:33:c5:
51:da:ce:34:78:78:6f:f6:dc:5e:4f:b5:9b:4b:d6:
b4:93:17:0e:03:8b:b0:bb:4d:22:2d:63:ae:75:f6:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:14:76:0D:EE:97:47:39:28:D4:70:4C:DE:0A:96:76:DB:03:90:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D88163BA889E11F086EED57DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
154.217.234.0-154.217.239.255
Signature Algorithm: sha256WithRSAEncryption
9e:21:32:bb:2a:89:d0:c2:ee:46:e3:99:14:02:c0:42:d6:6d:
a8:c5:e4:a4:d2:ea:4f:27:e7:b3:bb:dc:ad:3b:59:c4:8c:7d:
d0:19:15:96:80:bd:a8:64:87:a7:a5:3f:4b:77:bd:b6:4c:f7:
29:90:1b:6f:ec:76:03:5d:6b:d4:27:0b:9b:74:25:37:4b:02:
a1:e9:c3:88:f7:d6:36:63:d5:07:bc:12:fa:85:7c:5d:17:a7:
fe:7d:f8:d5:0f:ac:cb:f6:b4:70:61:16:fd:a9:d6:45:ef:d1:
7a:e1:54:71:9d:f8:12:e7:bd:8f:dc:d9:12:39:ce:75:4b:86:
c7:e1:e4:e5:0c:a7:5d:b8:67:62:32:9e:8d:3e:3e:2c:51:73:
cb:af:54:76:6b:58:63:63:bc:9f:64:1f:ff:4e:c6:f6:12:d5:
7f:af:dd:cc:15:d9:65:3b:da:97:d4:2c:03:be:6a:e5:58:a6:
c4:4f:46:dd:56:cc:51:5b:b8:f1:57:9f:7b:af:6a:68:21:b0:
ec:96:c2:d4:4d:36:a7:2f:4d:3d:14:50:70:64:98:75:90:4e:
5f:ee:a6:ed:1b:af:04:1a:bd:78:52:d6:1e:a5:61:d5:12:fe:
ad:bd:79:62:ae:af:be:cc:3e:65:a1:cd:62:e4:e5:5d:d2:7f:
01:ae:b3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:44 2025 by rpki-client