Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAFEC70C842211F09154CBC0DAE4EC9C.roa
File: DAFEC70C842211F09154CBC0DAE4EC9C.roa (raw, json)
Hash identifier: j3wiUW4Cjq2hslYCsRWo1tEWwqt7ebF0uSoQIZj2ERc=
Subject key identifier: 7A:C6:CF:D9:1D:C8:9B:97:01:0A:96:8A:62:6C:E8:8B:7A:CA:A1:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAFEC70C842211F09154CBC0DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 15:22:49 +0000
ROA not before: Thu 28 Aug 2025 15:22:44 +0000
ROA not after: Wed 01 Oct 2025 15:22:44 +0000
asID: 62240
IP address blocks: 154.85.26.0/24 maxlen: 24
154.85.97.0/24 maxlen: 24
154.85.99.0/24 maxlen: 24
154.90.1.0/24 maxlen: 24
154.90.129.0/24 maxlen: 24
154.90.130.0/24 maxlen: 24
154.90.131.0/24 maxlen: 24
154.90.142.0/24 maxlen: 24
154.90.143.0/24 maxlen: 24
154.90.172.0/24 maxlen: 24
154.90.173.0/24 maxlen: 24
154.94.34.0/24 maxlen: 24
154.94.39.0/24 maxlen: 24
154.94.42.0/24 maxlen: 24
154.94.45.0/24 maxlen: 24
154.94.57.0/24 maxlen: 24
154.94.58.0/24 maxlen: 24
154.94.61.0/24 maxlen: 24
154.94.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104944 (0x199f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 15:22:44 2025 GMT
Not After : Oct 1 15:22:44 2025 GMT
Subject: CN=68b07449-0093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:a4:f9:e0:33:89:80:82:83:58:51:d3:8c:
b7:cb:e1:32:fe:e0:c8:48:e4:29:ce:22:3a:01:6e:
88:bb:a1:50:de:ae:fb:fb:1c:1f:8f:3f:c8:d6:8d:
65:5c:02:f9:4f:92:df:32:d6:95:f8:6c:cc:84:2e:
6d:c6:0a:61:f2:d0:6d:c3:fd:5a:33:80:94:d9:87:
8b:20:ff:45:e0:64:26:31:85:18:61:bd:5b:ee:fa:
eb:35:70:fa:17:8c:ba:d6:91:ef:50:7e:b4:dc:74:
23:ce:47:f1:3d:f5:05:96:4c:40:3f:e8:3f:d0:a2:
e3:1e:b4:65:40:5d:56:dc:45:d9:8d:e7:0b:51:f7:
d9:08:31:db:8c:9e:52:79:23:60:04:b6:73:f2:8a:
f3:e0:b9:10:84:d9:b2:17:f2:c8:cb:a6:09:10:a0:
80:0d:b3:61:55:77:1e:79:17:31:2c:c0:7a:fe:e1:
15:8d:25:0f:e5:41:98:60:89:6b:19:b8:3c:b9:66:
27:f5:53:62:06:e9:06:75:7c:a8:21:92:2e:db:69:
81:84:b2:d7:bd:cc:36:91:61:95:c0:fd:f5:06:0c:
1a:ba:f8:32:41:12:5f:fe:4c:c9:97:f3:d3:75:a8:
66:89:fd:47:4c:d6:bb:99:af:d9:cb:64:3d:91:3d:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C6:CF:D9:1D:C8:9B:97:01:0A:96:8A:62:6C:E8:8B:7A:CA:A1:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAFEC70C842211F09154CBC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.26.0/24
154.85.97.0/24
154.85.99.0/24
154.90.1.0/24
154.90.129.0-154.90.131.255
154.90.142.0/23
154.90.172.0/23
154.94.34.0/24
154.94.39.0/24
154.94.42.0/24
154.94.45.0/24
154.94.57.0-154.94.58.255
154.94.61.0-154.94.62.255
Signature Algorithm: sha256WithRSAEncryption
19:fc:e9:3f:97:31:7d:5d:ed:0d:e1:c6:b2:be:94:cd:95:9f:
af:6e:f6:08:c4:d0:e3:ef:4e:61:19:25:bb:38:b8:d9:5e:9f:
1f:db:b8:3a:f1:80:d2:ab:4b:a4:9b:b2:f2:1d:a9:4c:ef:40:
c6:72:a6:8f:cd:ec:3b:47:88:33:32:da:71:67:21:e2:6d:31:
91:53:61:ef:4e:e5:d5:28:a9:69:01:0b:8d:62:c7:0e:34:d7:
fb:24:aa:04:6f:38:78:4c:46:b6:78:ef:67:a0:22:f1:82:ce:
c6:7a:19:e8:76:f0:39:70:ed:21:de:2d:b1:8e:fb:c5:94:42:
54:d7:22:e8:61:86:08:93:be:26:8f:3a:9f:49:11:d1:b8:c8:
fd:4d:6c:8f:5f:a6:e8:e8:e9:11:0f:72:84:54:ed:07:aa:6b:
a7:b2:70:34:20:6d:e9:ec:c2:df:d3:e2:0b:11:b3:68:c3:af:
d8:74:97:04:b9:7a:de:8f:56:21:4b:e3:95:27:3a:b7:95:82:
5f:b4:0d:b6:28:3c:1c:e5:f2:e7:54:57:c4:b3:e7:2e:88:9c:
58:d4:ae:5e:76:b9:db:2f:5e:91:5a:26:87:04:29:1d:74:35:
39:5c:48:86:36:2e:d4:ac:95:e1:d4:d9:14:6e:84:3e:5b:c6:
01:f6:ad:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:23 2025 by rpki-client