Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B27592987C1611F09EA279ADDAE4EC9C.roa
File: B27592987C1611F09EA279ADDAE4EC9C.roa (raw, json)
Hash identifier: w9QWW/OO63HT7lhjVaLvi4T+Of+fdhEd8aelTmBF2y8=
Subject key identifier: 54:C3:20:00:6B:62:0E:70:82:DB:2B:E9:A1:29:7D:18:72:33:4B:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019209
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B27592987C1611F09EA279ADDAE4EC9C.roa
Signing time: Mon 18 Aug 2025 09:35:38 +0000
ROA not before: Mon 18 Aug 2025 09:35:30 +0000
ROA not after: Fri 19 Sep 2025 09:35:30 +0000
asID: 9304
IP address blocks: 154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102921 (0x19209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 18 09:35:30 2025 GMT
Not After : Sep 19 09:35:30 2025 GMT
Subject: CN=68a2f3ea-42c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:4f:99:df:6b:ba:93:05:43:cd:31:bd:27:
ce:bf:00:c0:2f:6d:56:e2:dd:b8:03:5a:3d:7e:71:
71:3d:08:8e:79:9b:65:3d:72:42:de:f7:a5:7f:90:
26:aa:8e:d5:aa:90:85:35:c0:76:5c:95:eb:99:0c:
c1:92:82:9c:e1:fa:54:2a:d6:34:9b:77:12:18:d9:
35:cb:1c:f5:d5:14:11:a1:ba:7b:53:4b:de:f0:4f:
f7:b0:15:2c:8a:2b:d5:42:f0:81:fb:e5:d2:df:7b:
a8:b8:46:cd:2e:8b:6c:8f:dd:1f:6b:04:89:4f:79:
d5:ba:79:dd:ff:63:58:42:41:8c:1f:28:a3:b1:94:
4e:ef:03:a8:d6:22:79:41:a9:40:14:bd:4a:2a:59:
8b:8b:71:f2:5c:a4:38:cf:fe:15:66:66:b4:13:d7:
c9:94:8a:1d:24:85:e7:3a:92:94:6f:40:51:44:6b:
0a:f1:6a:cd:d1:eb:af:eb:0b:af:c7:25:d4:be:41:
60:52:10:ac:50:2a:d2:d8:bc:01:11:14:c6:d2:bf:
97:10:74:33:27:42:cc:58:91:01:77:b4:67:d2:9d:
c4:f1:10:7c:bf:21:a5:30:59:c8:95:9b:7b:4e:8a:
c2:4f:38:86:41:e9:f1:c2:81:65:7e:e7:29:bc:7e:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C3:20:00:6B:62:0E:70:82:DB:2B:E9:A1:29:7D:18:72:33:4B:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B27592987C1611F09EA279ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.197.0-154.92.198.255
154.92.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f3:a9:c1:9d:77:33:d1:72:42:ae:0e:e8:b2:31:20:7a:32:
fb:9d:12:38:82:18:b6:f1:45:31:b2:b8:a1:fe:2b:a6:b9:d8:
f1:9b:99:e4:0e:29:a7:94:50:ce:02:47:b6:ea:8b:d3:a4:ae:
35:ad:c6:4d:9e:b1:4b:b0:39:f4:9e:57:d8:b2:15:ed:9d:fc:
82:b2:58:5c:d7:5f:a9:d9:4d:8e:cc:ca:db:86:7d:53:ad:fb:
a3:af:8a:06:6e:fa:f3:6a:c3:62:07:87:56:db:67:fe:2e:20:
51:a7:80:0e:33:3a:2e:09:59:19:dd:c4:f5:43:d9:1e:65:55:
3c:49:9d:d6:9d:61:ec:e4:68:a5:b3:9f:6b:31:c6:e2:29:d9:
a2:ae:d6:ef:da:04:7f:f4:eb:89:23:02:4f:2f:b0:aa:43:b4:
ae:aa:46:9d:39:70:aa:ab:46:97:2c:2e:97:3d:30:8c:eb:fd:
55:24:8d:96:f0:f5:ae:d7:bc:82:a6:4c:32:2d:6e:9c:b0:02:
f6:1e:41:29:9e:2f:4d:d7:52:e1:2b:69:a6:d8:f0:65:9a:38:
d3:f7:89:50:34:f3:23:64:05:7b:7a:92:2e:e7:4f:73:c9:df:
25:31:f6:4b:fc:eb:52:11:54:0e:f9:b7:98:92:13:35:7b:10:
3a:f6:b3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:21:31 2025 by rpki-client