Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2FC1AB4566C11F094A22BF0DAE4EC9C.roa
File: F2FC1AB4566C11F094A22BF0DAE4EC9C.roa (raw, json)
Hash identifier: jIwfaSzr40MWXjjrtlNCa9OuwPfjob/etkM8H68hFLw=
Subject key identifier: 7E:11:13:FD:7E:EF:7A:4E:25:53:9C:EC:41:BD:F3:4E:1D:86:25:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2FC1AB4566C11F094A22BF0DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 11:17:19 +0000
ROA not before: Tue 01 Jul 2025 11:17:13 +0000
ROA not after: Sat 09 Aug 2025 11:17:13 +0000
asID: 200373
IP address blocks: 154.82.150.0/24 maxlen: 24
154.82.168.0/22 maxlen: 24
154.86.112.0/24 maxlen: 24
154.86.113.0/24 maxlen: 24
154.86.114.0/24 maxlen: 24
154.91.171.0/24 maxlen: 24
154.94.12.0/24 maxlen: 24
154.94.13.0/24 maxlen: 24
154.94.14.0/24 maxlen: 24
154.94.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100770 (0x189a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 11:17:13 2025 GMT
Not After : Aug 9 11:17:13 2025 GMT
Subject: CN=6863c3bf-dfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fb:a1:b8:f2:88:d2:a4:0e:40:36:49:ee:67:
59:b3:97:63:86:bf:1a:92:43:5f:78:ec:26:7b:a5:
99:47:b2:1b:c1:fd:5d:01:eb:0b:d2:df:d0:57:18:
51:98:b8:99:5e:45:15:b9:aa:c4:fa:36:f5:96:27:
c0:43:c9:8c:2f:5a:75:0b:95:cc:ce:4d:b7:e2:5b:
ab:d3:1b:a4:18:ac:09:9d:30:84:cb:fe:9a:a8:6a:
a1:a1:7e:e8:70:b4:a0:b7:6c:39:2d:b9:86:c8:28:
02:33:34:39:ed:93:29:b6:4d:78:3a:9e:8c:3b:14:
39:e6:ec:53:e3:1b:f4:54:85:27:df:11:f2:13:89:
74:81:93:7a:36:91:61:e5:0c:f7:e0:18:ef:9a:27:
63:4a:5a:b7:5e:29:b0:78:ca:e8:31:6f:55:90:d0:
d0:50:3e:6c:9a:bf:7a:da:f8:38:cd:ba:a8:e7:bc:
00:8b:67:ce:2f:25:65:f9:27:d4:6a:fc:51:a8:da:
0d:04:e3:50:b3:88:80:51:76:9c:f7:03:25:54:8a:
7c:8c:69:10:c2:b6:42:4e:da:9f:74:d4:98:8c:3b:
27:66:c5:49:83:09:01:aa:c6:75:23:19:71:3d:93:
20:63:05:da:be:f7:f2:2a:c0:7d:4b:3b:68:ed:3d:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:11:13:FD:7E:EF:7A:4E:25:53:9C:EC:41:BD:F3:4E:1D:86:25:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2FC1AB4566C11F094A22BF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.150.0/24
154.82.168.0/22
154.86.112.0-154.86.114.255
154.91.171.0/24
154.94.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:c8:09:11:d1:ba:68:d6:74:d2:4e:03:7c:26:18:0f:cd:d0:
c7:3c:83:bb:55:42:a3:00:83:cb:7a:84:98:27:fd:b0:ba:04:
55:17:c5:ac:6b:19:0e:21:58:c6:a2:c0:63:df:be:e8:0e:57:
41:be:03:64:82:86:25:c7:63:28:be:be:3e:af:82:e0:96:2c:
e8:fb:9f:64:1d:2e:53:27:f7:b6:f3:31:34:51:19:ee:7c:74:
59:23:29:8a:09:bc:5f:57:51:09:7e:30:79:1b:55:dd:6a:d3:
28:27:f4:b8:3d:6e:9e:ef:3c:c8:3d:9f:bb:94:8f:d4:71:53:
71:c6:03:5d:67:3e:fd:23:9f:71:1b:c3:86:30:6d:a1:29:2d:
11:be:24:48:ee:2e:7f:c0:6c:b6:1e:b2:02:9e:5a:ff:cc:b0:
e9:af:ca:53:f6:04:c6:a1:31:28:e7:33:24:95:9b:b3:99:33:
dd:16:0d:19:3b:2d:97:90:e0:5c:e1:b4:5f:14:25:68:a3:5b:
b6:85:68:96:14:b5:ed:09:26:b4:2a:25:87:e4:7b:3e:1b:9d:
3d:44:8a:22:38:b8:cc:f3:de:37:e5:1d:39:fe:5d:52:18:ee:
3b:b6:55:95:82:c4:15:42:15:f2:66:4a:b0:38:eb:dc:6c:2c:
8c:10:99:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:07:23 2025 by rpki-client