Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE69385A7F3311F0AB842798DAE4EC9C.roa
File: BE69385A7F3311F0AB842798DAE4EC9C.roa (raw, json)
Hash identifier: RAfVo7sZNdJg0K+/3Ly71yn/aNyZuSYCSdD+wLWGiHg=
Subject key identifier: 99:2E:4D:7D:C8:12:0C:49:7F:5B:15:B4:DD:7E:67:C7:6B:B0:EE:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019457
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE69385A7F3311F0AB842798DAE4EC9C.roa
Signing time: Fri 22 Aug 2025 08:41:07 +0000
ROA not before: Fri 22 Aug 2025 08:41:01 +0000
ROA not after: Tue 02 Sep 2025 08:41:01 +0000
asID: 136907
IP address blocks: 154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103511 (0x19457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 22 08:41:01 2025 GMT
Not After : Sep 2 08:41:01 2025 GMT
Subject: CN=68a82d23-5e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:84:0c:a5:f5:5b:35:3d:95:76:5e:d4:74:
79:d7:6b:c1:23:28:ea:c5:c6:d4:45:fb:75:74:15:
44:64:96:e6:30:6b:a5:73:c9:32:fd:d9:cc:69:7a:
57:24:d3:58:0f:80:6c:9a:90:e7:4a:dd:05:11:d3:
02:55:19:5f:28:05:79:2d:63:28:8a:90:37:32:eb:
39:fc:07:51:28:15:02:c9:97:1c:e0:f8:3f:4f:8f:
37:8b:01:82:4e:ca:23:74:3c:14:1d:e9:d4:bc:82:
a8:3d:84:76:ed:fb:17:42:e8:20:13:dd:fa:df:46:
c2:c9:b0:da:e1:1b:c7:92:06:23:86:3d:fe:d4:ee:
22:72:a3:72:1f:36:de:d5:de:d4:89:25:95:d4:a0:
61:76:19:c0:f6:02:9e:64:82:e9:2c:79:3b:dc:47:
cc:9a:90:c5:9e:1d:a7:d4:7c:46:78:80:43:e8:03:
b8:5e:52:8b:22:6d:e8:d4:bb:df:4d:e4:89:db:ba:
e6:00:22:ba:f5:c2:31:55:f6:1c:f8:b9:68:13:b4:
12:3a:bf:52:23:98:01:c4:85:5b:65:dc:bf:4b:03:
7b:79:7a:9e:1e:18:4e:82:6f:c7:a8:8e:6e:80:4e:
c3:cb:ae:e6:6b:fd:c9:19:a5:7d:b6:aa:1e:f3:65:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2E:4D:7D:C8:12:0C:49:7F:5B:15:B4:DD:7E:67:C7:6B:B0:EE:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE69385A7F3311F0AB842798DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.104.0-154.95.121.255
Signature Algorithm: sha256WithRSAEncryption
86:4f:87:fc:0f:ad:d1:3d:1d:63:46:6a:d3:74:1c:62:a5:80:
04:2b:3d:73:c4:57:29:82:9e:b6:5c:8c:76:ea:af:5a:ea:86:
84:3c:97:9c:57:20:5a:51:2e:b9:a4:68:4f:41:c1:4f:28:08:
de:57:f1:24:93:1b:a3:bf:d1:b7:10:1d:c4:5b:14:6d:c3:d0:
5a:11:94:14:a4:93:4f:d3:2e:04:e1:12:e4:71:23:b1:f7:5d:
ea:c7:5f:00:5e:e5:53:08:ee:0f:bb:2a:db:4c:ab:a6:ba:bc:
68:56:4e:bb:c2:00:47:94:96:37:70:3e:db:b5:60:23:f6:82:
44:47:d2:45:a3:d0:c5:9b:ee:48:4d:f7:dc:d9:be:c7:94:86:
98:8e:77:40:10:7f:a8:2a:f7:4d:4a:be:c1:49:1a:d2:18:a8:
fd:f9:44:46:89:91:ae:b3:c4:4d:7d:ee:5f:1b:bd:b2:26:02:
e3:43:f1:30:c0:3b:07:b1:ae:fb:6f:aa:e9:0a:7f:9e:fe:6b:
c8:ba:38:3b:0d:14:ae:f4:82:ef:78:21:46:00:bd:23:04:bc:
ac:74:1d:e5:5a:b1:a3:b8:d7:41:78:9b:86:b9:54:8f:df:70:
9b:1c:d3:42:60:3d:09:fe:43:20:11:ae:24:e0:35:cb:3d:02:
d1:81:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:23 2025 by rpki-client