Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDC92EFC79AC11F08DA2ADF2DAE4EC9C.roa
File: EDC92EFC79AC11F08DA2ADF2DAE4EC9C.roa (raw, json)
Hash identifier: WcQkawhF48+Hw7hr6FUBTdxpj4NVDKYFUtbwlX7QLdQ=
Subject key identifier: D7:D9:DC:F6:CE:0A:FD:2A:68:D4:B2:EB:D5:C6:9D:80:F1:12:51:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDC92EFC79AC11F08DA2ADF2DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 07:53:28 +0000
ROA not before: Fri 15 Aug 2025 07:53:23 +0000
ROA not after: Sat 15 Nov 2025 07:53:23 +0000
asID: 9294
IP address blocks: 154.196.96.0/19 maxlen: 24
154.199.192.0/20 maxlen: 24
154.204.16.0/20 maxlen: 24
154.205.32.0/20 maxlen: 24
154.206.224.0/20 maxlen: 24
154.208.176.0/20 maxlen: 24
154.210.32.0/19 maxlen: 24
154.210.64.0/19 maxlen: 24
154.210.240.0/20 maxlen: 24
154.220.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102848 (0x191c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 07:53:23 2025 GMT
Not After : Nov 15 07:53:23 2025 GMT
Subject: CN=689ee778-61d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:d9:84:af:c8:2a:17:f5:43:e3:fb:69:da:
93:35:76:77:0c:2f:00:69:68:ed:ec:07:70:a2:4a:
ef:10:76:c8:f1:e2:68:b8:a8:9c:b7:5f:85:ca:e2:
c9:d0:77:e3:c7:68:36:64:e5:f3:4e:f8:47:e1:00:
a1:15:77:6e:a3:63:3f:0c:1a:cb:d8:7f:05:9d:7c:
fe:a8:53:29:a5:a7:3a:22:14:9b:8c:b0:a0:07:47:
49:a1:ff:6a:b2:c6:dd:1a:a7:86:90:6b:e1:ce:08:
49:de:6e:4a:b6:8a:03:86:b9:00:f9:2e:76:f4:f7:
db:de:d5:e5:7c:a3:2a:e4:6c:a3:3c:1f:e3:2e:37:
b2:90:2b:e7:5d:95:bd:fb:c3:db:da:0c:2e:68:79:
83:e9:7d:0b:e5:59:ba:d5:5d:78:39:87:35:10:94:
38:32:95:46:50:63:29:6e:9d:2e:e6:2a:56:07:e5:
f4:c2:6e:37:e7:fd:6c:75:21:47:1c:ef:8a:ec:cd:
9b:46:9d:4a:1e:87:cb:31:82:f1:9b:83:4f:16:23:
02:f3:02:ad:74:36:a7:fe:a3:e2:4c:1c:c9:e8:79:
bd:18:b4:71:1b:a6:10:75:b1:1d:a2:ef:4d:07:1d:
4b:67:df:67:c0:8a:00:d5:8a:01:3a:b9:c9:07:ec:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D9:DC:F6:CE:0A:FD:2A:68:D4:B2:EB:D5:C6:9D:80:F1:12:51:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDC92EFC79AC11F08DA2ADF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.96.0/19
154.199.192.0/20
154.204.16.0/20
154.205.32.0/20
154.206.224.0/20
154.208.176.0/20
154.210.32.0-154.210.95.255
154.210.240.0/20
154.220.224.0/19
Signature Algorithm: sha256WithRSAEncryption
99:ea:03:13:2a:49:a0:1e:a9:3c:cd:c7:67:6a:d4:a0:33:06:
06:c5:84:4e:79:ac:d6:f4:25:cc:b9:74:c5:c8:cc:4a:99:3c:
34:c1:d7:d7:f2:f3:98:60:36:b9:12:d3:17:5d:c7:47:22:f8:
b7:35:4b:b8:ee:4b:a6:19:08:b5:65:0a:2b:1b:b1:3a:78:62:
16:c1:d2:a1:f0:88:93:b5:13:ab:ff:c5:a1:07:05:43:6a:a9:
46:ea:0f:fd:e2:5f:b2:30:53:b5:70:2e:9d:17:7c:6f:4b:b7:
6b:1e:d6:51:fd:cc:f9:8c:4e:13:4e:d8:f2:9c:88:8c:57:fd:
5a:84:7e:50:4e:25:ff:55:39:db:44:c8:85:b4:3d:7f:d0:53:
15:91:e4:fe:0a:1c:f7:ad:fa:0d:92:ea:56:18:a0:82:ee:c8:
5d:99:6d:38:78:53:86:0e:91:77:a3:73:64:52:e7:ce:b7:6f:
d0:f4:8d:f1:71:83:e6:88:01:c8:09:88:d2:b7:b3:b7:7b:40:
7d:9a:74:e3:92:c4:db:6d:42:a9:61:9f:2b:f4:40:23:d8:40:
27:48:2c:25:ab:6d:82:66:26:bb:ed:f9:6a:98:81:d3:58:6c:
26:ba:17:60:33:16:37:9d:55:e9:dd:fe:58:d5:3b:93:4c:8b:
75:72:f9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:55 2025 by rpki-client