Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/462F16CE72AA11F0BA58ADBDDAE4EC9C.roa
File: 462F16CE72AA11F0BA58ADBDDAE4EC9C.roa (raw, json)
Hash identifier: Sn0ISDQP9MuuH8w2PYlO/+LRDi5Eh487XtHqNrnYiXE=
Subject key identifier: 9A:05:0F:DF:92:B7:9B:A9:C5:3E:BA:5E:4C:9B:C8:73:22:15:5D:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/462F16CE72AA11F0BA58ADBDDAE4EC9C.roa
Signing time: Wed 06 Aug 2025 09:46:50 +0000
ROA not before: Wed 06 Aug 2025 09:46:45 +0000
ROA not after: Sat 06 Sep 2025 09:46:45 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
154.212.139.0/24 maxlen: 24
154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102582 (0x190b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 09:46:45 2025 GMT
Not After : Sep 6 09:46:45 2025 GMT
Subject: CN=6893248a-5779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:93:2d:10:78:b4:65:1d:53:d3:d7:e8:44:d3:
0b:f9:17:f1:7c:5f:7b:68:e2:4d:5a:c6:e5:01:be:
59:6d:15:3e:05:f1:33:1b:cd:ad:a0:e2:94:66:8e:
ea:0a:97:77:dc:54:88:0b:ec:9c:ac:0d:95:4a:7c:
1f:bb:b4:9b:0c:bd:0b:1a:b3:a0:14:09:67:52:f9:
e8:a6:d9:51:46:ff:98:ed:b0:63:02:c9:8f:4e:7e:
3f:bd:81:4c:39:49:d5:2c:16:e1:67:82:47:3c:02:
3e:a6:6e:b6:d6:e7:ba:91:ff:01:2c:3c:43:c1:b0:
1f:dc:fa:5e:5c:6c:73:b5:6d:04:84:88:11:80:a1:
22:cd:92:2b:b2:7e:ac:31:1e:b5:17:ad:25:c2:77:
5e:5a:b7:5c:74:c9:b8:6a:a1:89:8e:97:16:6a:cf:
cd:f1:d8:c5:37:1e:a3:e4:91:44:54:bb:2f:d2:ae:
8b:a1:d2:fc:be:4b:e0:5a:df:6a:91:ba:6f:2a:c4:
3b:a5:d6:2d:31:df:98:90:51:1d:44:2e:e8:7e:18:
98:c1:62:82:31:96:26:2c:d3:07:f5:9f:c7:5b:98:
96:f2:27:57:5d:ea:af:e0:4b:f4:56:5c:af:04:bf:
d4:d4:8b:11:00:08:be:fb:2e:21:90:3e:7a:0c:79:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:05:0F:DF:92:B7:9B:A9:C5:3E:BA:5E:4C:9B:C8:73:22:15:5D:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/462F16CE72AA11F0BA58ADBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
154.197.116.0/24
154.197.124.0/24
154.212.139.0/24
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5f:7f:43:3f:32:7c:dd:ff:f4:c6:66:5b:1e:7c:c3:1f:d6:
46:6c:93:f5:21:3a:c0:53:cc:25:e6:35:e5:9f:e7:fa:93:7f:
3a:2d:f9:67:12:b7:f7:cb:97:51:d2:55:aa:3b:f7:b9:b1:e7:
bd:15:bc:8a:fb:8b:9d:d3:14:39:14:69:6c:57:38:a4:e1:25:
e7:25:9a:ba:27:28:fb:56:ec:56:d1:dd:b3:2b:82:3e:8a:c9:
3d:ec:3d:04:53:11:6a:de:1c:89:bf:fe:b6:69:8c:3c:d5:71:
2c:27:65:b7:07:f6:87:d8:4f:53:17:55:91:4e:f6:32:a3:8c:
64:84:3a:36:5e:7d:34:5c:56:3c:34:b1:84:30:25:7c:a8:a6:
16:cf:22:51:b3:24:f0:28:16:a1:9e:45:0f:eb:83:f1:21:df:
ff:67:45:c2:93:c4:eb:4b:da:98:24:40:cf:d9:cd:7f:b6:cb:
5f:9b:6b:31:50:f5:77:5b:db:b9:df:b1:20:12:b1:22:92:26:
d8:4a:97:46:b0:e4:a5:52:43:db:1d:74:58:3d:5c:7d:79:84:
e4:d1:6e:a3:10:fa:5c:8f:cb:44:d9:1b:c2:ff:6a:88:c3:1e:
ac:c9:10:e8:7a:09:4b:d3:46:97:46:e1:59:ab:12:8d:7e:e7:
08:bd:4f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:49 2025 by rpki-client