Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E137E418840F11F0B5E0B9C6DAE4EC9C.roa
File: E137E418840F11F0B5E0B9C6DAE4EC9C.roa (raw, json)
Hash identifier: 4aWgRlHl75jlF+QH3h7KPs5uJu3sqcGWzAOwP3VBzZE=
Subject key identifier: 4B:10:42:7A:18:B9:8D:02:E5:AE:F2:C4:B5:C9:C5:01:52:77:FC:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E137E418840F11F0B5E0B9C6DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 13:06:59 +0000
ROA not before: Thu 28 Aug 2025 13:06:54 +0000
ROA not after: Tue 30 Sep 2025 13:06:54 +0000
asID: 62240
IP address blocks: 154.194.82.0/24 maxlen: 24
154.195.116.0/24 maxlen: 24
154.195.117.0/24 maxlen: 24
154.195.118.0/24 maxlen: 24
154.195.152.0/24 maxlen: 24
154.195.153.0/24 maxlen: 24
154.195.154.0/24 maxlen: 24
154.195.155.0/24 maxlen: 24
154.195.156.0/24 maxlen: 24
154.195.157.0/24 maxlen: 24
154.195.158.0/24 maxlen: 24
154.195.159.0/24 maxlen: 24
154.195.160.0/24 maxlen: 24
154.195.161.0/24 maxlen: 24
154.195.162.0/24 maxlen: 24
154.195.163.0/24 maxlen: 24
154.195.164.0/24 maxlen: 24
154.195.165.0/24 maxlen: 24
154.195.166.0/24 maxlen: 24
154.195.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104896 (0x199c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 13:06:54 2025 GMT
Not After : Sep 30 13:06:54 2025 GMT
Subject: CN=68b05473-767f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:03:fe:e1:6b:f2:4c:20:f5:4d:2b:8b:f3:
53:6b:62:b1:d5:58:07:86:40:af:12:28:c1:50:15:
d2:2b:b4:82:04:7e:d2:e5:3e:65:ba:9e:a0:fe:03:
fe:6c:88:7d:e4:0b:db:a5:dd:df:da:11:08:b4:76:
83:6e:50:b9:df:4b:5b:f8:a1:19:c6:22:3c:f0:a4:
55:38:61:fe:a2:27:59:5d:2f:10:a0:d9:d8:dd:71:
9c:68:f3:2f:af:b5:3b:5b:2b:46:eb:c6:ae:f0:aa:
f0:e0:d1:8d:2e:65:bd:8a:aa:43:32:ca:70:ab:7b:
d3:22:41:e8:0a:65:4b:7d:01:f5:b0:9a:70:59:c7:
d9:f7:81:71:af:c3:4a:31:cf:fa:12:fa:fd:83:86:
0c:ae:2a:b9:2d:9c:7f:26:00:a5:1d:78:c9:48:82:
0b:6d:10:07:ff:54:01:bc:30:1a:7f:05:e6:5b:49:
dd:70:1f:8d:57:36:c5:6d:d7:55:13:20:69:41:7c:
ab:6e:1c:ff:26:7b:84:f2:5c:b6:05:74:c7:ed:17:
e7:9c:1b:1d:25:36:0a:e9:8f:32:de:20:74:ac:16:
4e:53:25:77:ae:64:88:8a:59:33:b9:2c:9f:e4:3b:
34:66:18:13:a3:c3:3d:45:09:ff:87:37:2e:c5:da:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:10:42:7A:18:B9:8D:02:E5:AE:F2:C4:B5:C9:C5:01:52:77:FC:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E137E418840F11F0B5E0B9C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.82.0/24
154.195.116.0-154.195.118.255
154.195.152.0-154.195.167.255
Signature Algorithm: sha256WithRSAEncryption
ad:ea:b3:5f:a4:70:47:a3:d2:8f:4f:27:e2:c7:39:57:63:6d:
a4:a1:b3:94:96:34:f5:08:3d:13:41:fa:34:f0:68:ac:2a:04:
2c:76:45:7d:9b:5b:35:49:d3:53:0d:db:96:5e:dc:a5:b5:22:
36:2a:7a:7b:15:9c:4e:45:21:53:84:a3:9f:eb:60:30:ce:b0:
94:3b:29:d8:f2:4d:a1:ab:fb:78:db:ff:c1:81:29:d7:e9:b4:
47:d7:20:bb:9f:81:95:47:99:bb:ee:91:23:b8:c9:bc:0f:d0:
74:cb:1f:63:f0:70:0c:9a:13:a3:9f:fe:e7:ad:fa:e8:f5:a5:
e7:fc:d7:73:47:0b:22:0e:28:72:3c:8b:a7:81:29:4b:23:46:
ec:30:ca:57:82:14:e8:71:a4:d9:a5:23:f1:f0:f7:c5:d1:5c:
58:03:50:be:21:7d:e9:8e:9a:ec:be:2d:e3:b8:34:82:da:db:
74:48:e4:71:5f:a8:50:c5:cc:97:3c:b4:e3:45:02:6a:78:5c:
bf:b3:01:a3:92:fb:30:2c:1e:50:f5:5d:94:3b:8b:cf:e9:82:
33:de:6b:5e:1b:e8:b0:c4:de:c4:42:bf:91:a6:e9:61:1f:bd:
d3:6d:e2:82:7d:dc:d2:be:3c:87:28:50:ac:cf:8f:b5:ed:04:
61:46:57:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:37 2025 by rpki-client