Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63FAE1DA689411F0B2C16D8CDAE4EC9C.roa
File: 63FAE1DA689411F0B2C16D8CDAE4EC9C.roa (raw, json)
Hash identifier: kidV3F1TbLRfeQXv5HNW1UbulYRS4ehc54w0PagHXjQ=
Subject key identifier: 3C:3A:49:A8:4E:C2:50:2B:D9:31:44:B1:7E:92:A3:D6:4A:17:7F:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63FAE1DA689411F0B2C16D8CDAE4EC9C.roa
Signing time: Thu 24 Jul 2025 13:44:59 +0000
ROA not before: Thu 24 Jul 2025 13:44:28 +0000
ROA not after: Fri 05 Sep 2025 13:44:28 +0000
asID: 202656
IP address blocks: 154.218.30.0/24 maxlen: 24
154.219.16.0/24 maxlen: 24
154.219.24.0/24 maxlen: 24
154.219.28.0/24 maxlen: 24
154.219.207.0/24 maxlen: 24
154.219.211.0/24 maxlen: 24
154.219.222.0/24 maxlen: 24
154.219.230.0/24 maxlen: 24
154.219.232.0/24 maxlen: 24
154.219.245.0/24 maxlen: 24
154.219.246.0/24 maxlen: 24
154.219.247.0/24 maxlen: 24
154.219.250.0/24 maxlen: 24
154.219.251.0/24 maxlen: 24
154.219.252.0/24 maxlen: 24
154.219.253.0/24 maxlen: 24
154.219.254.0/24 maxlen: 24
154.219.255.0/24 maxlen: 24
154.221.60.0/24 maxlen: 24
154.222.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102276 (0x18f84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 13:44:28 2025 GMT
Not After : Sep 5 13:44:28 2025 GMT
Subject: CN=688238db-1bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:99:d9:e8:9f:4f:ee:1e:d6:08:bb:f5:5b:
25:ca:0d:0f:0e:f5:5d:b0:61:bb:dd:da:10:4b:ce:
4c:6a:da:5b:6b:88:dd:f1:4c:d1:45:c4:5e:01:bb:
77:d3:4d:28:ef:6e:21:3d:7f:69:7e:bf:80:64:f6:
e6:9b:ed:d2:10:d0:b2:38:65:a6:3f:87:0b:00:02:
51:46:9e:51:57:2c:e0:97:63:50:7f:9d:97:87:dc:
4a:5f:82:d0:64:43:bc:36:24:27:d3:64:d3:f7:d5:
1e:fb:22:59:9b:05:12:ff:39:e7:ec:57:d3:4b:e5:
96:01:44:58:1e:45:ac:5c:ac:22:7b:51:bf:14:2e:
66:e4:27:ee:8a:0f:3a:78:00:e6:5f:40:fe:2f:7d:
85:62:d9:00:a0:25:61:16:ba:b7:73:4d:18:6f:85:
65:6b:df:82:f5:cd:a6:86:d5:42:25:b0:6a:77:e3:
37:34:38:54:03:75:2c:f0:03:4a:2f:e8:1c:c2:f7:
f9:91:ad:b8:da:c1:25:33:98:80:71:e8:18:92:5e:
5b:69:00:95:00:90:9f:fd:47:bb:80:b4:e3:ce:a5:
bb:eb:4e:93:5a:1d:b0:f6:7d:a4:ef:0f:1d:32:a6:
fd:7f:79:de:15:fe:eb:a9:7f:bb:9a:08:ae:8c:71:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3A:49:A8:4E:C2:50:2B:D9:31:44:B1:7E:92:A3:D6:4A:17:7F:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63FAE1DA689411F0B2C16D8CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.30.0/24
154.219.16.0/24
154.219.24.0/24
154.219.28.0/24
154.219.207.0/24
154.219.211.0/24
154.219.222.0/24
154.219.230.0/24
154.219.232.0/24
154.219.245.0-154.219.247.255
154.219.250.0-154.219.255.255
154.221.60.0/24
154.222.192.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d2:11:17:0d:e4:e5:a9:c5:b9:50:03:24:f1:9c:33:28:ac:
4a:ff:fe:fb:e8:82:92:a5:75:05:7d:00:58:63:46:c8:51:bb:
bc:31:60:91:d6:5e:4b:5e:6c:0a:d1:7c:32:ce:f3:fa:6e:f6:
a9:7f:27:1f:ca:83:1d:41:38:ca:c9:a5:bd:fb:e9:15:88:2a:
fd:8c:bf:32:82:90:c9:5c:5e:78:ed:c9:be:35:62:8f:b8:44:
9d:c2:a1:4f:28:0f:6b:fc:7e:9f:ad:93:a2:f7:2d:ca:e2:b9:
ca:5a:eb:10:19:d9:c5:83:8f:22:94:ba:14:68:a1:d0:bc:4e:
12:f5:ef:c3:25:16:c7:b1:f4:65:d6:38:b7:b1:19:27:32:f8:
9b:84:ed:ef:61:a3:60:8e:61:f5:31:06:a2:ca:cf:4f:2b:3e:
80:9d:70:da:28:a7:c4:47:eb:1f:75:64:d3:48:90:51:2e:65:
57:42:19:af:af:55:e9:46:dd:c6:56:8d:7f:ca:a7:c8:4f:35:
ce:1d:a8:b7:4e:58:79:c2:3d:86:72:1d:1f:50:22:21:2f:4c:
6e:0b:ce:fc:30:81:5e:30:2c:38:73:b6:e3:fd:d2:37:69:89:
ec:a9:77:70:89:f3:6c:e7:c9:59:c7:03:49:a3:57:5f:c0:27:
32:db:ab:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:59:38 2025 by rpki-client