Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC4F60807E5811F0AC224E7BDAE4EC9C.roa
File: FC4F60807E5811F0AC224E7BDAE4EC9C.roa (raw, json)
Hash identifier: f6X4gHuy1OzRiunP/67ag4wmsalpPGQwaVvEm1UEZR0=
Subject key identifier: 9A:FE:5A:00:5C:E3:18:77:54:65:0C:59:EB:72:2C:EB:44:0D:2C:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0192BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC4F60807E5811F0AC224E7BDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 06:35:11 +0000
ROA not before: Thu 21 Aug 2025 06:35:03 +0000
ROA not after: Sat 01 Nov 2025 06:35:03 +0000
asID: 149014
IP address blocks: 154.223.181.0/24 maxlen: 24
154.223.190.0/24 maxlen: 24
154.223.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103100 (0x192bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 06:35:03 2025 GMT
Not After : Nov 1 06:35:03 2025 GMT
Subject: CN=68a6be1f-e6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:f5:44:11:a5:d9:b8:52:a3:9f:0a:07:6e:
b5:69:a2:04:5c:cc:bf:20:7f:15:94:d1:1f:3a:5c:
77:36:b0:8c:70:77:33:ef:b6:11:49:c2:27:92:c6:
bb:1a:db:bc:09:81:6a:3a:cf:ac:e7:2c:47:ed:57:
f0:b5:2f:da:45:18:fd:60:9b:8f:89:69:c5:e4:f4:
18:b5:90:1d:de:c7:65:06:b3:5a:47:b3:87:1d:1a:
14:65:b9:ee:2f:de:09:f4:a3:12:5a:c3:7c:d2:9d:
0b:34:42:b7:54:6b:ea:d8:dd:7e:4d:7b:de:29:ff:
9d:a2:ab:72:73:04:43:ab:9c:78:6f:06:5b:de:ce:
66:a0:1f:50:7c:da:9a:46:5c:4d:dd:70:6a:bd:21:
67:39:ed:b5:9e:90:62:0e:0c:82:cd:3c:9b:99:40:
68:cd:25:fb:2a:76:9c:0e:5d:dd:c8:5b:b6:30:d6:
50:2f:b2:3e:cb:30:bc:41:64:78:9d:54:93:9b:07:
28:40:00:f8:f5:d1:93:50:e3:70:fd:a3:95:4a:c5:
a8:0b:e9:ae:0d:17:db:57:1a:ac:48:7c:16:15:6e:
2d:24:43:57:75:20:b5:af:de:9d:3d:99:15:a6:49:
5c:ad:8f:0c:14:9e:4e:34:49:fc:39:6e:fe:e1:14:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FE:5A:00:5C:E3:18:77:54:65:0C:59:EB:72:2C:EB:44:0D:2C:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC4F60807E5811F0AC224E7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.181.0/24
154.223.190.0/23
Signature Algorithm: sha256WithRSAEncryption
01:6b:a2:ff:73:33:98:2d:93:45:e1:34:26:d5:c0:75:69:c1:
41:63:0c:b5:9c:10:c6:ec:ac:ba:b1:46:89:a0:5c:6e:61:1a:
ad:83:25:2e:75:28:db:9d:51:16:c3:3c:a4:4e:9c:c3:aa:42:
d7:9d:47:51:e0:d8:5d:91:62:a9:e9:d4:22:6e:76:b0:de:0c:
f9:6a:97:a3:37:31:0a:f2:08:ee:65:75:65:71:bc:78:d2:38:
80:c8:1e:fa:6a:bd:d5:6f:dd:af:21:94:4e:bd:43:5c:43:fc:
7d:cf:4d:9a:50:c9:d9:c3:59:0e:52:b1:84:37:36:2e:e3:29:
ca:08:97:e5:e5:e4:2f:b0:30:a4:27:57:ce:1a:d7:c2:69:55:
eb:96:59:5e:0b:c4:c4:26:e9:f5:90:b8:7c:e3:8e:67:de:23:
5c:b8:b5:b9:fe:73:c7:f9:71:dc:cf:e4:ce:90:34:5b:5a:4d:
71:f3:a0:bf:4e:70:cd:b2:37:28:ab:cc:ec:2e:fe:b1:76:a3:
ad:34:97:c7:ca:5a:64:cf:88:46:e3:77:00:22:f5:85:0d:a1:
20:2e:eb:6b:40:39:73:5f:0d:dd:ad:22:c6:12:2f:a0:54:3c:
cc:6b:72:af:50:ca:32:cc:94:ea:d1:35:e2:f1:9f:70:f1:df:
e8:c7:64:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:26 2025 by rpki-client