Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB17981288C911F08890A791DAE4EC9C.roa
File: DB17981288C911F08890A791DAE4EC9C.roa (raw, json)
Hash identifier: hNlFWug1iP1jxkOTGSpyFuVwZYmdT8FJgqlSSDa2fwk=
Subject key identifier: 95:65:AF:A6:CD:47:09:99:FB:83:37:DC:8B:C2:D2:FB:86:EC:01:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB17981288C911F08890A791DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 13:28:20 +0000
ROA not before: Wed 03 Sep 2025 13:28:15 +0000
ROA not after: Fri 10 Oct 2025 13:28:15 +0000
asID: 141159
IP address blocks: 154.94.224.0/24 maxlen: 24
154.94.225.0/24 maxlen: 24
154.94.228.0/22 maxlen: 24
154.94.228.0/24 maxlen: 24
154.94.229.0/24 maxlen: 24
154.94.230.0/24 maxlen: 24
154.94.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105761 (0x19d21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 13:28:15 2025 GMT
Not After : Oct 10 13:28:15 2025 GMT
Subject: CN=68b84274-e5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:ee:9a:39:10:74:2a:a8:c8:fe:c1:88:95:
ed:f4:27:ba:93:57:6a:3c:a2:8e:28:cd:ab:4a:30:
84:f6:c4:6d:f1:c2:5a:c9:b1:90:18:06:74:81:6b:
be:2c:40:13:da:9c:6f:cb:d8:e1:69:1c:d9:78:43:
08:3b:46:72:7d:22:30:38:23:2b:88:33:7a:2f:5b:
f7:14:61:d0:9a:d6:2c:b0:81:e6:87:35:cc:98:08:
65:7c:ba:bf:cc:6f:37:10:35:55:f4:d9:eb:8e:5f:
e7:f2:ff:fc:f3:79:c7:cf:bc:d7:3d:c5:c5:5c:dd:
67:05:51:19:cf:9f:35:ee:24:a6:ae:61:5d:77:d1:
ab:aa:b2:76:a4:04:2e:3b:b0:b8:16:fc:29:3f:cd:
78:1d:eb:b5:9a:a2:48:ac:4c:57:e6:8f:07:66:76:
ab:e7:95:49:68:3d:58:13:f9:49:e8:1b:bb:6a:60:
09:6a:aa:0b:51:16:56:86:e2:17:c4:56:68:a3:36:
45:25:c1:2e:68:ae:75:10:eb:f0:11:1d:a7:7e:4a:
c5:1f:da:20:9a:68:c7:81:e2:2d:5a:fd:32:29:f6:
ad:57:e6:b3:6a:1a:82:46:20:4a:03:e2:33:7e:e4:
63:a5:66:38:79:1a:ec:6a:ec:b4:59:27:5f:89:c1:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:AF:A6:CD:47:09:99:FB:83:37:DC:8B:C2:D2:FB:86:EC:01:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB17981288C911F08890A791DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/23
154.94.228.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:79:58:c8:c2:ff:59:83:7d:b3:8d:7f:ba:f5:e9:01:2f:f7:
d8:99:bc:4b:97:e9:e4:7e:c8:c3:ca:0e:6c:4d:0e:c3:50:c9:
6d:9d:30:b4:fb:0f:0d:d3:28:fd:cf:ce:e5:ee:10:b3:3c:05:
64:81:11:ee:b3:aa:ed:f2:43:e0:c4:63:07:42:22:20:36:8b:
d7:28:e1:92:bc:e5:4d:b9:9b:30:1e:f7:b8:77:01:6f:80:e0:
a3:51:0e:f8:47:bf:fc:08:f3:85:4e:f1:2e:50:8c:31:e1:f8:
55:83:8a:c8:98:5d:d7:e9:e5:c0:a7:ad:01:fd:7e:d8:24:c2:
bf:29:b3:f9:a2:5d:96:48:30:6c:e2:8c:f0:7e:3d:06:7d:bc:
3e:19:05:e8:28:dd:4d:9d:53:60:10:87:f6:2a:aa:87:d9:fc:
9d:96:8c:13:b9:48:63:be:89:cb:84:35:e9:7f:50:75:64:e9:
5e:1a:ad:39:47:e0:a0:4e:7c:b1:6f:9f:46:e4:85:69:9f:1c:
75:1e:63:7f:ca:94:d6:8a:af:46:40:90:03:e6:a1:34:3f:ab:
45:ea:b4:96:ed:e9:8f:f4:2d:40:c9:f1:f3:5f:8b:7e:63:40:
80:7b:6d:2e:1c:77:6f:ec:2e:aa:85:cf:89:4e:57:d8:26:dc:
5c:04:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:41:47 2025 by rpki-client