
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A1725E2706211F0B91CADDFDAE4EC9C.roa
File: 8A1725E2706211F0B91CADDFDAE4EC9C.roa (raw, json)
Hash identifier: M+At3SeEfQsLglabGOfDTksS89MA7csqzxQkoOn3PIQ=
Subject key identifier: 68:B4:8D:62:70:22:64:D1:B6:67:3D:4D:E1:D1:65:9C:CE:73:7F:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019095
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A1725E2706211F0B91CADDFDAE4EC9C.roa
Signing time: Sun 03 Aug 2025 12:08:18 +0000
ROA not before: Sun 03 Aug 2025 12:08:13 +0000
ROA not after: Wed 10 Sep 2025 12:08:13 +0000
asID: 150698
IP address blocks: 154.197.72.0/24 maxlen: 24
154.197.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 04:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102549 (0x19095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 12:08:13 2025 GMT
Not After : Sep 10 12:08:13 2025 GMT
Subject: CN=688f5132-9d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:7a:86:3a:a4:65:ae:bc:15:45:6f:73:50:
9d:74:88:a8:a1:f5:60:6b:ce:a4:a2:5d:15:39:66:
9e:cc:7b:e2:e4:d6:14:4d:2e:4d:00:ad:45:65:48:
b5:72:90:25:08:4e:fc:6d:49:a3:49:74:08:99:78:
2e:d7:17:75:f1:14:14:4e:6e:5e:41:7f:26:be:95:
71:b8:8c:b8:04:0c:80:bb:b8:15:8b:a2:42:3d:8e:
55:52:23:80:6b:ca:22:54:83:4e:f5:50:70:c8:2f:
2b:98:bf:2e:dd:f0:1f:57:0e:bf:df:93:0e:00:b4:
ae:45:cb:20:15:8a:63:de:01:bd:0b:33:67:74:30:
74:65:47:51:7c:d5:9b:ad:18:e0:a2:2a:4d:37:8f:
91:f1:c2:94:bd:4e:98:db:84:23:46:40:81:02:06:
ef:9d:49:f3:b9:6c:5d:9b:f8:18:f8:55:d4:62:25:
c5:27:97:6b:c2:7c:4a:9e:24:c7:de:76:96:32:ac:
a3:3f:30:5b:59:c4:c8:de:4b:cd:ec:3c:9a:40:8c:
de:64:0b:01:e9:fd:0a:35:e8:a7:6d:1e:43:37:d9:
a4:9a:56:17:5d:6c:ee:9f:a9:21:8b:44:1b:85:c0:
e7:7d:d1:75:65:bb:20:30:e9:d3:d1:36:ef:10:2e:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B4:8D:62:70:22:64:D1:B6:67:3D:4D:E1:D1:65:9C:CE:73:7F:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A1725E2706211F0B91CADDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.72.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:b2:61:17:fa:1c:89:c4:f4:6e:d3:05:8d:f1:fe:6f:af:6f:
b4:e5:a0:8a:1c:e8:83:83:64:5b:7a:f2:85:1e:c2:27:c8:f2:
99:6c:c4:f2:fd:c0:09:5f:8d:1d:9d:5f:12:04:a5:d4:bd:50:
41:bb:55:a6:74:f0:0e:f8:2d:e1:aa:ed:2c:be:3f:3e:92:75:
cf:70:4f:cd:e0:9e:ac:67:94:c8:54:9f:9a:53:13:35:20:a2:
8b:52:d2:45:f2:25:35:ed:75:9c:85:0a:5f:71:0a:bf:c2:1e:
11:08:c0:ca:2d:5c:6d:f8:b7:9d:8d:19:ff:84:5a:02:a0:41:
5d:d5:b0:8c:78:b8:d5:54:8d:95:97:96:47:9f:0d:ec:5d:50:
56:ba:8a:d6:00:c2:0d:53:9f:be:f3:1a:be:5f:b5:de:52:3c:
28:be:02:19:b8:db:06:47:be:87:26:2b:7d:f7:db:e0:c4:33:
6e:74:4a:c6:0e:58:20:8d:1a:eb:98:f7:7e:09:5a:0e:b8:fd:
7d:34:d3:f5:50:7e:ec:b6:20:00:66:f9:79:86:4b:08:d4:0c:
7b:47:35:46:3b:66:b6:73:96:2e:15:ba:9f:19:02:09:d3:a9:
f5:e9:ba:26:52:bd:4b:e4:c9:5d:f6:5d:1a:89:a9:e3:b7:36:
13:70:7d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:33:21 2025 by rpki-client