Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2D2E52A88B911F0960AA2ABDAE4EC9C.roa
File: F2D2E52A88B911F0960AA2ABDAE4EC9C.roa (raw, json)
Hash identifier: WVeriEwtECjL2f19OMG5hBPeFIb1GomUxmCWgt/YCQA=
Subject key identifier: E1:BD:B6:A5:C3:46:B4:2A:82:94:1E:0C:BA:56:57:BA:6E:F8:C1:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2D2E52A88B911F0960AA2ABDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 11:34:28 +0000
ROA not before: Wed 03 Sep 2025 11:34:23 +0000
ROA not after: Fri 10 Oct 2025 11:34:23 +0000
asID: 203020
IP address blocks: 154.217.84.0/24 maxlen: 24
154.217.86.0/24 maxlen: 24
154.217.88.0/24 maxlen: 24
154.217.89.0/24 maxlen: 24
154.217.90.0/24 maxlen: 24
154.217.91.0/24 maxlen: 24
154.217.92.0/24 maxlen: 24
154.217.93.0/24 maxlen: 24
154.217.94.0/24 maxlen: 24
154.217.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105724 (0x19cfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 11:34:23 2025 GMT
Not After : Oct 10 11:34:23 2025 GMT
Subject: CN=68b827c3-d18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:8f:0c:5f:ce:91:8e:e5:c0:ea:9c:87:a9:
d2:7d:bc:f3:bd:b6:c3:1f:9e:01:ae:0b:d4:4a:50:
fc:29:ea:13:9c:21:b6:7b:06:a2:cb:2b:1a:c3:cb:
ec:59:8b:e2:27:40:1b:06:8f:5f:34:b2:5c:4c:ad:
7b:57:0d:9d:51:31:91:ba:89:e1:60:46:91:a8:6c:
38:ed:db:45:99:87:bb:93:44:df:79:1d:a6:29:fd:
84:5c:4d:d7:8a:37:de:0a:59:7a:c1:64:7b:34:bc:
1f:b0:10:0e:d9:60:c0:60:5c:67:dc:c0:28:1a:82:
80:a2:21:ff:74:a6:83:0d:c6:2b:63:95:32:44:69:
a4:50:da:9e:f3:57:8e:db:ca:cf:48:6a:ae:24:2b:
fa:60:a0:69:5e:88:cf:e5:27:07:45:b1:e9:b6:fd:
8e:1d:c2:cc:57:b1:47:9c:4e:da:a3:dd:da:7b:be:
d3:57:30:2b:0a:f8:c1:82:2a:69:0f:53:b0:9f:0d:
15:a3:de:eb:06:ad:2b:66:61:66:7b:7d:b8:fe:03:
4d:bd:e3:d3:e6:8b:31:2c:3b:0d:7d:39:10:2a:5f:
ac:05:5b:c6:c5:08:40:36:c8:69:59:82:cd:2a:18:
5e:c5:1a:05:31:6a:41:cf:0d:bd:d3:34:11:04:c5:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BD:B6:A5:C3:46:B4:2A:82:94:1E:0C:BA:56:57:BA:6E:F8:C1:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2D2E52A88B911F0960AA2ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.84.0/24
154.217.86.0/24
154.217.88.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:fe:fb:94:d5:f7:6a:42:9d:b1:44:79:7a:8c:ca:cb:9a:8e:
a4:c6:83:66:7b:dc:bb:56:48:ce:47:94:de:43:89:19:e6:c9:
19:a8:a8:06:4a:a7:a0:72:30:c4:f2:fe:7e:04:e6:53:53:31:
1e:50:d8:99:61:0f:fd:d4:29:62:7d:9a:f9:1e:d0:5f:27:81:
c4:ba:03:29:66:e5:dc:38:1f:0f:4a:db:1b:21:dc:e3:e5:2d:
60:43:ff:a1:e6:ba:1c:5a:9e:fe:e5:15:0f:2e:0c:5c:e6:f4:
8c:20:93:f7:43:2a:e4:cc:9c:74:a2:9c:59:6e:72:b4:04:a5:
d4:9d:1e:63:e4:01:54:d7:2a:60:c2:21:1b:16:82:9a:38:17:
fc:65:1d:35:35:6f:9a:ed:d7:44:38:3b:3b:6b:78:98:f7:b6:
ac:f4:27:92:fe:24:f1:1c:e4:41:5d:7b:83:54:9b:de:cd:76:
a5:0b:7b:2a:a5:cd:84:f1:8e:be:c6:e3:24:fd:30:98:d1:41:
35:98:28:be:bf:07:c5:ad:89:74:3a:09:ee:b9:0d:7e:e4:12:
58:cf:2a:ae:cd:42:98:52:b5:db:e6:68:0c:24:1e:2f:bc:0d:
88:e3:0b:c0:d6:97:35:6e:43:7a:78:0b:8b:8d:5c:48:8a:1b:
a7:72:83:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:31 2025 by rpki-client