Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2679C1A9DDC11F0AE6623D8DAE4EC9C.roa
File: F2679C1A9DDC11F0AE6623D8DAE4EC9C.roa (raw, json)
Hash identifier: tehWFt+INB/XN14jmOuFtlHICs7uD2H3qdnw6Z95zwg=
Subject key identifier: C4:5C:2F:92:DD:A3:36:D3:2B:5E:15:31:40:29:90:03:A9:B6:E8:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2679C1A9DDC11F0AE6623D8DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 09:07:54 +0000
ROA not before: Tue 30 Sep 2025 09:07:48 +0000
ROA not after: Sat 15 Nov 2025 09:07:48 +0000
asID: 138915
IP address blocks: 154.203.133.0/24 maxlen: 24
154.203.134.0/24 maxlen: 24
154.203.135.0/24 maxlen: 24
154.203.138.0/24 maxlen: 24
154.203.139.0/24 maxlen: 24
154.203.140.0/24 maxlen: 24
154.203.141.0/24 maxlen: 24
154.203.142.0/24 maxlen: 24
154.203.146.0/24 maxlen: 24
154.203.147.0/24 maxlen: 24
154.203.153.0/24 maxlen: 24
154.203.154.0/23 maxlen: 24
154.203.156.0/24 maxlen: 24
154.203.157.0/24 maxlen: 24
154.203.158.0/24 maxlen: 24
154.203.159.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
154.223.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106950 (0x1a1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 09:07:48 2025 GMT
Not After : Nov 15 09:07:48 2025 GMT
Subject: CN=68db9dea-ec1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:f8:75:a9:9b:82:da:cb:c1:8f:89:09:6e:
93:7a:00:9b:c0:89:f0:1e:f2:c4:5b:f0:bc:51:ea:
4d:36:7d:87:ac:83:cc:ee:20:32:f3:e4:6f:a6:6f:
be:1c:91:c1:26:78:b0:22:3e:20:25:4c:22:71:5a:
e7:85:3b:f1:06:34:8a:cd:93:ee:ae:3c:56:0d:e2:
41:97:e6:0a:51:c6:c8:0f:2c:31:89:33:a3:36:a0:
4a:a6:0d:84:31:c6:30:c5:8c:29:76:cd:37:33:4d:
f7:df:6a:04:a0:a9:63:da:2a:b3:f3:7c:c6:27:c5:
24:2d:29:b2:77:5a:18:4f:f8:16:b1:95:3d:00:be:
03:cc:67:bd:e3:12:30:b5:77:de:fa:da:d3:62:52:
70:f6:7d:a2:59:47:ea:9c:7d:c6:a5:32:79:82:65:
71:80:78:42:7f:42:7a:fb:fa:80:9c:12:8d:16:94:
6f:bb:0d:15:69:78:1e:3c:bf:a3:85:7f:a5:2e:9c:
c1:c5:56:fd:93:2d:a3:64:2e:c1:47:3e:c7:59:b2:
e7:b1:b7:0c:8c:b7:66:9a:8d:e6:66:e0:74:8d:02:
43:c8:d4:f1:88:95:fc:30:6b:e0:61:76:19:88:1c:
54:7c:a8:93:48:6c:5b:9c:b8:86:9a:1c:fe:ab:a9:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5C:2F:92:DD:A3:36:D3:2B:5E:15:31:40:29:90:03:A9:B6:E8:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2679C1A9DDC11F0AE6623D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.133.0-154.203.135.255
154.203.138.0-154.203.142.255
154.203.146.0/23
154.203.153.0-154.203.159.255
154.203.164.0/24
154.203.166.0/24
154.203.169.0/24
154.223.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:62:84:23:a2:ec:dd:0e:02:62:dc:86:50:da:b7:71:bb:04:
76:f9:34:e8:fc:5e:55:92:bd:12:8e:3e:86:32:3a:9f:a8:78:
09:f4:f7:bb:70:53:7b:5b:0b:21:f9:7f:15:e9:97:72:27:85:
f8:d4:8b:83:d7:ba:33:38:be:56:b0:f2:ff:6d:0e:b1:61:9c:
f8:68:57:fd:2d:15:6e:ae:24:19:c5:37:98:85:46:62:68:25:
78:65:46:46:5c:93:48:a1:7f:f4:e9:7d:73:88:3b:0f:1e:cb:
2a:26:27:4b:bc:b6:a9:dc:bf:d5:e5:c5:75:e2:ec:b3:d0:f1:
04:8d:34:11:e3:ce:10:3d:64:bf:b5:94:f9:82:b7:f2:5a:57:
1d:11:e1:73:25:1f:c1:56:cb:c6:b8:3b:d3:ac:2f:bd:d1:22:
b5:58:11:9e:47:54:60:1a:22:45:a3:da:70:a0:05:5d:f9:aa:
c4:c9:5c:a6:d3:df:44:03:0d:b0:d0:27:a1:86:88:6c:fb:3c:
dc:90:ed:72:88:84:7e:7c:0d:ae:9c:7e:99:19:ff:e6:5b:66:
f4:74:5d:7a:03:18:9e:97:d3:c4:6e:42:d5:f3:e5:86:43:a8:
30:2f:dd:a5:b4:9f:10:6b:23:69:6d:fd:a1:78:7e:43:52:1b:
0d:82:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:57 2025 by rpki-client