Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD6387A08A3D11F08C57A390DAE4EC9C.roa
File: DD6387A08A3D11F08C57A390DAE4EC9C.roa (raw, json)
Hash identifier: X1s5L9q+MJBMdWt10ouiRSPAhZI63KVBQySgsp3yxRM=
Subject key identifier: 54:46:09:D5:67:7C:AC:91:DA:2E:E3:C7:86:F2:1E:82:9E:72:5A:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD6387A08A3D11F08C57A390DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 09:51:16 +0000
ROA not before: Fri 05 Sep 2025 09:51:11 +0000
ROA not after: Fri 05 Dec 2025 09:51:11 +0000
asID: 18229
IP address blocks: 154.210.145.0/24 maxlen: 24
154.210.146.0/24 maxlen: 24
154.210.147.0/24 maxlen: 24
154.210.148.0/24 maxlen: 24
154.210.149.0/24 maxlen: 24
154.210.150.0/24 maxlen: 24
154.210.151.0/24 maxlen: 24
154.210.152.0/24 maxlen: 24
154.210.153.0/24 maxlen: 24
154.210.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105996 (0x19e0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 09:51:11 2025 GMT
Not After : Dec 5 09:51:11 2025 GMT
Subject: CN=68bab294-280e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:b0:0c:f9:8f:1c:70:81:06:db:88:b8:14:
d0:f6:db:9d:1e:19:95:cd:9a:cf:6b:c2:df:8e:c9:
d9:02:fe:97:11:35:86:5e:25:67:69:84:58:3f:06:
72:db:df:1f:65:75:10:04:8f:4f:ce:88:ac:af:0e:
9f:a4:3f:a9:45:56:55:39:d5:c9:06:56:30:ee:65:
44:f0:c8:60:2f:ec:a8:82:15:07:00:4e:75:50:c8:
97:a1:c1:8d:a8:46:7d:42:a0:21:80:58:5a:ab:36:
c3:fe:5a:63:fd:2f:9e:1d:82:c3:64:4b:11:8c:8a:
3b:94:26:37:d4:b5:c1:11:58:97:d4:a5:e3:8e:7a:
5a:25:bf:21:b2:c9:77:a6:78:c3:34:1b:71:6a:90:
2f:e6:f3:df:3f:1b:fa:3f:e2:f4:62:7e:0c:6c:a3:
ca:4b:d8:12:45:84:2a:a2:4f:d1:21:31:71:9d:16:
89:41:49:17:c9:1f:99:d2:13:22:77:8f:50:8b:3c:
45:ee:59:7b:7c:8f:20:23:b6:55:8b:db:7d:f5:f2:
56:83:a3:3d:47:48:f9:ec:e7:35:23:72:4d:39:fb:
bb:89:76:e4:b1:db:54:06:6c:e6:db:77:1f:f0:35:
c1:d3:b4:39:ba:64:e9:6a:f8:f8:9b:27:29:41:ea:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:46:09:D5:67:7C:AC:91:DA:2E:E3:C7:86:F2:1E:82:9E:72:5A:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD6387A08A3D11F08C57A390DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.145.0-154.210.154.255
Signature Algorithm: sha256WithRSAEncryption
4c:0a:f1:29:28:25:58:d0:cc:4b:67:80:29:94:73:a7:db:e4:
30:1e:c1:30:73:af:0a:d0:f9:4a:a5:0d:ee:df:1a:fe:c8:2b:
52:34:77:45:e3:34:a3:cb:68:8c:64:7b:e0:41:f8:10:bc:ef:
b1:06:c9:76:b6:a6:28:19:94:24:fb:67:ec:8d:d9:f3:60:9c:
96:a1:54:ae:31:89:1c:fd:6b:7c:09:fb:8a:7c:9f:2e:fa:cd:
83:06:e6:20:83:6c:90:08:03:13:f7:d0:53:7c:fa:f7:86:0b:
04:e8:8c:e1:bf:96:f6:17:4e:47:ea:f6:56:d7:0d:11:21:01:
2d:b2:39:52:c6:5e:16:1d:32:e6:4c:7e:d6:b2:b7:94:11:96:
51:d2:45:72:af:e3:24:58:90:52:7d:37:85:17:22:fd:43:a6:
0f:d1:2c:31:84:a9:12:f9:6a:10:d2:ba:f3:f6:73:a0:f8:c9:
95:b4:a8:0d:9c:b2:5c:b1:c8:db:a3:02:8a:33:17:3c:70:53:
d4:bf:a1:66:11:eb:e5:fe:8f:ef:5d:a6:c5:03:7c:80:d3:1b:
04:a7:39:79:2e:f2:c8:d3:fd:b8:70:b7:1d:d9:09:7f:3a:68:
0e:da:6f:2c:db:ec:1f:b3:97:59:6e:cd:b0:03:1e:a3:ea:b3:
70:f8:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:12 2025 by rpki-client