Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F11ABB708D2A11F0918AEC82DAE4EC9C.roa
File: F11ABB708D2A11F0918AEC82DAE4EC9C.roa (raw, json)
Hash identifier: 8Kl8N2Trs+6uDhVwdHfmT454YxmMO444mpgAzSY9SUg=
Subject key identifier: B8:A2:D8:3C:67:A2:AF:D3:E4:E3:D4:BA:B5:71:1A:7F:C5:5B:6F:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019EFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F11ABB708D2A11F0918AEC82DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 03:13:23 +0000
ROA not before: Tue 09 Sep 2025 03:13:17 +0000
ROA not after: Mon 01 May 2028 03:13:17 +0000
asID: 17561
IP address blocks: 154.205.184.0/24 maxlen: 24
154.205.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106237 (0x19efd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 9 03:13:17 2025 GMT
Not After : May 1 03:13:17 2028 GMT
Subject: CN=68bf9b52-4a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:45:8f:5e:ee:a4:5a:ec:be:89:1c:47:f4:
a9:23:8f:54:81:b1:6b:39:9b:30:75:1d:90:0e:03:
a9:94:c2:7d:cd:40:88:95:72:41:89:6f:36:f1:62:
a2:36:80:49:31:78:fa:72:85:ad:18:eb:07:ed:b8:
70:1b:39:32:79:9f:97:4d:a5:23:7e:bf:ed:16:b8:
a5:94:56:9d:57:28:62:46:a2:aa:ec:ad:5f:06:ad:
a2:39:c3:3f:9f:29:a4:64:f1:1c:7e:96:72:f7:a8:
de:24:62:3b:31:8b:ed:8e:d0:0c:45:03:fa:d0:8c:
ad:b6:3a:3e:39:83:25:92:a6:9f:c2:15:1b:8c:71:
4d:89:64:c4:46:70:88:ab:81:37:e7:18:71:c1:4a:
59:e4:a8:88:21:3d:3c:52:2d:e9:9a:22:87:a5:06:
24:e2:db:f1:77:45:3f:2b:26:62:30:26:b1:0c:ab:
84:e7:f7:e5:22:b1:87:79:91:33:8b:0a:ce:0d:bf:
59:8b:81:a9:ff:17:19:9f:ef:9e:e9:9a:aa:51:47:
88:13:7a:e1:a3:30:ca:48:41:69:9b:e1:41:f6:2c:
b0:12:9c:a7:e7:a1:15:d1:41:70:45:fe:13:5d:a2:
bc:bd:0e:f4:04:d9:c7:9d:32:82:33:02:9d:8b:ae:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A2:D8:3C:67:A2:AF:D3:E4:E3:D4:BA:B5:71:1A:7F:C5:5B:6F:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F11ABB708D2A11F0918AEC82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.184.0/23
Signature Algorithm: sha256WithRSAEncryption
55:6a:19:75:9e:bd:d2:87:62:69:ef:a4:54:f8:a1:29:84:67:
9b:87:9f:94:85:ef:16:56:37:aa:5d:2a:f1:e3:75:01:fd:18:
97:0e:cc:8f:30:03:7c:17:c6:fc:b5:bc:c9:a6:a6:05:6e:69:
00:2c:95:a0:46:02:2a:98:ab:9e:d5:15:a0:8d:84:32:ad:74:
ed:75:ba:ab:82:05:e3:bc:4b:6a:41:1e:4a:dd:5a:b0:ae:7b:
58:1c:24:62:00:8c:56:47:c9:c7:d8:41:16:5a:a0:37:be:d0:
78:32:6b:b5:6b:73:ac:68:3e:d7:d0:fa:51:fe:a0:7a:f8:d8:
bc:fb:1b:41:56:23:24:8d:86:ff:28:07:b5:e7:d0:6b:bc:c3:
98:2f:fd:4d:b6:5d:29:6b:d1:0e:b8:21:e8:ed:61:69:68:dd:
42:31:0a:dd:d7:ba:e1:71:de:7d:65:82:69:26:7a:29:20:fe:
1b:09:bc:ff:32:dc:c8:3f:50:69:f4:13:f5:3c:9f:68:b4:33:
21:0d:0f:6f:f2:e1:b7:cf:e8:16:6a:b8:ee:e6:5f:90:03:11:
d4:ce:b4:fd:39:fc:d5:2e:6f:17:03:a7:57:cc:a2:7b:83:7b:
2b:63:d7:d7:dc:05:67:a0:ce:19:30:45:f6:c9:f7:74:9c:9b:
44:d4:a3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:31 2025 by rpki-client