Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFCC31F8265211F0BC361EE3DAE4EC9C.roa
File: DFCC31F8265211F0BC361EE3DAE4EC9C.roa (raw, json)
Hash identifier: LBm+7q0wPvqT78CtMQXwfJ8h37Tlq5smiST4GX5YXLM=
Subject key identifier: 6A:95:2C:32:0C:87:D3:E3:00:66:BA:A2:4A:53:18:36:E3:B4:8D:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFCC31F8265211F0BC361EE3DAE4EC9C.roa
Signing time: Thu 01 May 2025 06:09:44 +0000
ROA not before: Thu 01 May 2025 06:09:39 +0000
ROA not after: Tue 28 Apr 2026 06:09:39 +0000
asID: 984
IP address blocks: 154.221.162.0/24 maxlen: 24
154.221.163.0/24 maxlen: 24
154.221.164.0/24 maxlen: 24
154.221.165.0/24 maxlen: 24
154.221.166.0/24 maxlen: 24
154.221.167.0/24 maxlen: 24
154.221.168.0/24 maxlen: 24
154.221.169.0/24 maxlen: 24
154.221.170.0/24 maxlen: 24
154.221.171.0/24 maxlen: 24
154.221.172.0/24 maxlen: 24
154.221.173.0/24 maxlen: 24
154.221.174.0/24 maxlen: 24
154.221.175.0/24 maxlen: 24
154.221.176.0/24 maxlen: 24
154.221.177.0/24 maxlen: 24
154.221.178.0/24 maxlen: 24
154.221.179.0/24 maxlen: 24
154.221.180.0/24 maxlen: 24
154.221.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97716 (0x17db4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 06:09:39 2025 GMT
Not After : Apr 28 06:09:39 2026 GMT
Subject: CN=68131027-16c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0a:9b:fd:10:78:5b:8d:37:95:3c:a4:dc:c7:
0d:8a:48:25:2e:12:b5:98:da:b3:65:de:20:aa:09:
e8:40:46:23:2f:df:84:b9:b5:3c:79:0b:9b:ac:ee:
18:97:c5:87:8d:d0:b7:4e:ce:97:98:f0:a1:5e:e6:
4c:b6:5a:be:7e:78:91:42:1a:0a:5f:31:ed:61:09:
d2:8f:e4:cf:96:35:31:f3:32:46:15:a6:1f:91:fe:
b2:f0:6e:e1:38:21:78:ff:58:24:2f:58:09:3c:f3:
ea:8e:a0:84:b1:d0:60:ec:eb:dc:54:26:c3:96:bc:
13:82:60:07:69:ce:ee:a6:96:b8:9b:47:a5:1a:79:
f4:83:24:90:e5:eb:ad:30:94:31:01:1d:ff:26:a6:
5d:36:47:da:de:ae:cb:a5:90:77:30:20:cf:1f:60:
1a:3f:37:0c:60:2c:53:6e:0e:1a:81:a9:98:18:31:
22:be:ad:da:8b:e6:19:5e:3c:26:b2:0f:76:03:67:
c0:6b:ea:2d:5e:4d:3f:14:60:1b:ca:21:fd:3a:24:
bf:53:21:1c:14:3f:90:cf:10:8b:ea:5a:0b:07:da:
e2:3e:85:f7:79:dd:79:0e:a2:d8:2b:b0:35:8e:9a:
3f:be:74:f5:40:27:6b:35:9a:c1:d6:7a:50:bb:ff:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:95:2C:32:0C:87:D3:E3:00:66:BA:A2:4A:53:18:36:E3:B4:8D:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFCC31F8265211F0BC361EE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.162.0-154.221.181.255
Signature Algorithm: sha256WithRSAEncryption
4e:c1:2b:88:6a:c7:65:6d:64:37:b5:09:05:66:42:e6:33:41:
f0:7b:f7:19:05:40:13:8c:74:1d:27:03:2c:e1:be:6f:e6:6d:
dc:c2:1a:4c:37:b9:e2:3c:87:98:fe:66:78:ae:31:81:e2:b4:
16:f5:83:05:f2:79:cc:e9:0d:bf:a4:bc:83:dc:a2:b0:36:bb:
c4:d3:95:77:80:8c:33:fd:a0:d7:44:71:2f:fe:df:e1:68:d0:
c3:52:14:a3:a6:84:d9:9e:4c:02:b5:52:79:8c:56:64:ad:be:
90:33:95:e8:40:f0:36:fc:b1:a6:e8:ae:1c:8b:8b:80:1a:4f:
a5:10:fa:66:d9:b5:f6:f0:4e:4f:dd:78:66:a6:b0:04:67:89:
64:0a:ef:74:6f:a8:e2:a8:25:d5:f3:96:a9:96:79:f4:27:d2:
42:d8:49:53:09:11:0a:06:c6:71:dd:a2:8d:e0:9e:f9:7d:d7:
26:43:af:00:ee:5b:b5:ec:92:db:d5:81:5e:de:62:da:ad:1c:
f6:ec:4c:6e:cf:ae:1a:76:fc:17:bc:5c:d9:0d:19:51:04:3b:
ff:b3:92:2a:03:b0:29:a4:89:8f:e9:28:6b:e9:ab:2e:d2:bf:
0e:52:6c:83:80:0a:d1:38:b8:dc:39:66:61:eb:49:07:02:d0:
c9:f2:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:13:03 2025 by rpki-client