Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB04071E66B711F08ED394EDDAE4EC9C.roa
File: CB04071E66B711F08ED394EDDAE4EC9C.roa (raw, json)
Hash identifier: jS74gC43jDRwXCBZWlNXGePgXyT72Q3i1ww0rP64FjQ=
Subject key identifier: A1:CC:A7:F6:E1:13:20:5C:DD:D9:DE:F0:C8:84:7D:EF:E3:12:06:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB04071E66B711F08ED394EDDAE4EC9C.roa
Signing time: Tue 22 Jul 2025 04:53:22 +0000
ROA not before: Tue 22 Jul 2025 04:53:18 +0000
ROA not after: Wed 16 Sep 2026 04:53:18 +0000
asID: 63199
IP address blocks: 154.196.4.0/22 maxlen: 24
154.223.129.0/24 maxlen: 24
154.223.130.0/23 maxlen: 24
154.223.132.0/24 maxlen: 24
154.223.134.0/23 maxlen: 24
154.223.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102051 (0x18ea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 04:53:18 2025 GMT
Not After : Sep 16 04:53:18 2026 GMT
Subject: CN=687f1942-19d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:05:1d:33:09:ca:bd:bc:5f:b0:ba:bb:db:
78:5a:7e:f6:a2:0c:2f:58:04:41:16:a2:6b:4d:49:
7c:68:7e:91:37:ff:2b:72:c6:05:2c:b0:ad:2f:d7:
5e:fc:1d:37:96:38:07:83:96:fa:d4:54:4e:d3:a3:
33:f8:20:05:5f:9f:48:d6:5a:06:b1:5e:1f:ee:0d:
92:3b:a2:88:75:4f:da:e7:f3:ec:06:78:4e:b4:38:
0c:2e:15:ef:3d:68:aa:db:5c:99:13:8f:4e:69:66:
18:2b:32:61:a7:38:a5:c6:fc:1b:5a:b9:36:ad:cc:
9c:62:3a:2d:69:26:c9:99:80:5a:6f:dc:ed:d5:33:
28:0e:da:85:3f:ab:34:42:95:49:99:a2:d7:f4:11:
15:96:03:f6:62:36:85:db:e9:be:eb:9b:d1:0f:0d:
02:71:ad:be:46:8f:03:ef:de:0d:e6:b8:10:85:34:
bf:99:b9:e7:c6:3b:22:c2:f0:34:9e:0b:6e:d9:72:
62:e4:29:1d:13:0b:0c:38:f2:8b:50:99:cd:cb:0b:
c3:dc:57:d2:05:6b:8a:af:af:a6:82:39:a4:65:ed:
35:8e:dd:dc:4c:b8:27:e1:5a:38:47:0f:70:6b:15:
ac:f6:c3:3b:4a:e4:a2:92:c1:c6:a7:18:58:1f:e7:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CC:A7:F6:E1:13:20:5C:DD:D9:DE:F0:C8:84:7D:EF:E3:12:06:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB04071E66B711F08ED394EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.4.0/22
154.223.129.0-154.223.132.255
154.223.134.0-154.223.136.255
Signature Algorithm: sha256WithRSAEncryption
36:e9:33:56:82:82:e1:82:67:83:e1:f9:00:47:11:ac:20:15:
7a:c3:33:ad:b9:d8:bc:b0:36:94:6c:fc:3d:80:10:b3:4c:dc:
31:3b:48:b6:30:9b:0a:cf:dc:7e:61:94:f8:9c:8c:d7:bc:81:
2a:68:6a:b8:8a:c0:df:1d:f1:7a:7e:fa:8d:4c:bb:93:0b:92:
b5:a9:92:c5:b8:78:af:d2:54:98:9c:72:b6:53:67:6e:1c:43:
c8:c2:00:22:96:b7:73:97:49:77:66:f1:7d:eb:81:a7:58:ea:
ab:e2:ab:0a:b2:ee:6c:39:4d:6b:c0:c6:e1:e4:22:4b:ac:16:
80:2e:f4:40:eb:00:48:20:3f:b0:1f:60:86:22:e6:ec:cb:e5:
15:2a:90:a6:b7:08:ed:b0:aa:64:24:74:85:76:53:d8:79:19:
1f:d5:ce:6b:1e:77:14:99:88:67:e9:86:ea:5c:d7:61:cb:29:
70:45:e0:20:eb:ec:3a:26:13:76:68:4d:e4:81:c0:c1:5c:19:
63:c0:a1:f4:7d:a9:c7:11:5e:2d:fb:fc:8e:5b:b2:6e:09:28:
a0:33:3d:76:43:a9:7d:f9:06:54:9b:0a:cf:0d:a4:d0:ee:7b:
e2:66:63:fd:ec:17:15:22:68:bf:3f:b1:14:c9:b9:78:06:18:
45:e2:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:03:50 2025 by rpki-client