Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98748262514311F0BD3849D6DAE4EC9C.roa
File: 98748262514311F0BD3849D6DAE4EC9C.roa (raw, json)
Hash identifier: Sns5DHxzzTlYkxqWXU5rIoQ1WRqCokZTGWFggnqvkaY=
Subject key identifier: AE:4F:2A:6A:60:CB:F5:09:49:8B:AC:16:49:9A:B0:87:0D:30:5B:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98748262514311F0BD3849D6DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 21:38:41 +0000
ROA not before: Tue 24 Jun 2025 21:38:37 +0000
ROA not after: Wed 03 Sep 2025 21:38:37 +0000
asID: 63139
IP address blocks: 154.94.111.0/24 maxlen: 24
154.94.112.0/24 maxlen: 24
154.94.113.0/24 maxlen: 24
154.94.114.0/24 maxlen: 24
154.94.115.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.117.0/24 maxlen: 24
154.94.118.0/24 maxlen: 24
154.94.119.0/24 maxlen: 24
154.94.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100552 (0x188c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 21:38:37 2025 GMT
Not After : Sep 3 21:38:37 2025 GMT
Subject: CN=685b1ae1-b806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:ba:db:a0:f8:89:3d:f4:91:1f:25:75:b8:
ef:88:20:2f:ff:55:5d:6e:00:90:19:20:10:de:d1:
c3:f0:12:09:18:ef:00:08:51:9d:b5:92:b9:65:2d:
0e:9d:ac:c5:1c:23:8d:00:c9:d0:c7:3e:6b:53:27:
52:1e:e4:af:61:f4:12:26:00:d7:7c:87:a1:50:80:
eb:b1:36:8a:17:05:5b:c3:fe:e2:59:ec:9c:5e:cd:
58:dc:cb:cb:03:9b:cb:d5:87:fd:bd:7e:95:ec:9b:
8e:95:c4:d5:95:a7:fa:dd:76:ae:9c:95:bf:82:ee:
b0:4a:22:6a:a5:8f:ab:dd:0a:0a:1a:ff:02:e5:f9:
9c:a2:53:ef:14:75:fd:d4:fc:fe:2e:e6:d6:c1:4b:
74:50:ea:65:5b:85:cf:f4:ef:bf:e0:50:c1:54:e0:
01:c2:5c:aa:b5:91:c1:7e:25:6c:18:16:8d:ed:e6:
9b:32:d1:a1:59:d0:c7:37:8e:27:de:aa:e7:c4:f5:
f1:0a:78:d3:7f:e6:22:62:4d:f5:7e:e1:6a:30:80:
17:8d:31:a8:8f:2f:15:a9:65:bc:f6:47:a3:57:ed:
3a:bb:5d:a8:87:28:4d:c9:2a:43:c2:7b:91:cb:e2:
92:d7:6c:75:2c:20:3f:95:24:32:b1:d4:dd:9b:15:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4F:2A:6A:60:CB:F5:09:49:8B:AC:16:49:9A:B0:87:0D:30:5B:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98748262514311F0BD3849D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.111.0-154.94.120.255
Signature Algorithm: sha256WithRSAEncryption
76:35:f6:b9:46:f6:31:71:4d:d2:b2:fa:10:ba:7a:7e:62:cc:
b3:ec:04:84:c5:71:4b:29:82:9f:58:e0:2c:cc:f9:02:ce:1f:
75:5e:aa:cf:74:72:88:8c:74:16:0c:61:75:f7:8a:32:4c:4f:
f5:35:40:70:2e:79:f2:37:56:b5:47:49:9b:94:b2:b4:45:fc:
43:ca:2c:72:25:b4:f4:36:09:6d:90:f9:5f:73:58:4f:9d:bb:
4e:70:87:a5:3d:14:ec:63:f8:62:0d:d9:ee:fd:3e:08:64:1e:
16:97:0f:60:2f:cb:03:c4:27:e1:58:cc:9b:b8:b4:50:6b:88:
b7:c8:38:31:16:c8:f3:bc:ce:87:86:da:38:60:67:72:0f:72:
c5:a8:7d:b8:e2:9e:9c:30:43:3e:37:0b:f8:34:8d:a1:77:28:
d8:29:a2:a6:34:b6:82:8c:44:d6:fd:c7:e5:80:7c:0b:08:65:
50:5e:2b:69:3f:ed:ae:dd:fa:e3:d2:49:51:4d:f6:ba:9c:83:
0d:83:81:03:65:5c:45:3d:86:4f:0a:0b:5a:a2:88:3e:a9:dc:
11:7f:9b:89:b9:df:43:0b:4f:f2:ed:6a:2a:4f:5d:92:84:5d:
c2:2e:d2:06:a6:c5:aa:d3:e0:ab:91:6a:90:db:fe:75:63:fc:
90:83:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:48:42 2025 by rpki-client