Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01B095545B7611F09EFB81B3DAE4EC9C.roa
File: 01B095545B7611F09EFB81B3DAE4EC9C.roa (raw, json)
Hash identifier: 0v2M1s1gWJ139+VVuSVfzxjWu3dZrsYJrsroOOFbYUQ=
Subject key identifier: 8E:AE:58:20:0B:40:D0:57:E7:34:86:CE:D4:4D:B9:65:A5:BB:E4:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01B095545B7611F09EFB81B3DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 21:04:45 +0000
ROA not before: Mon 07 Jul 2025 21:04:40 +0000
ROA not after: Thu 04 Sep 2025 21:04:40 +0000
asID: 398823
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101482 (0x18c6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 21:04:40 2025 GMT
Not After : Sep 4 21:04:40 2025 GMT
Subject: CN=686c366d-9984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:44:85:51:ed:28:a4:30:7f:e6:85:e1:3e:
a1:6d:4f:42:58:37:b7:61:a5:db:c6:7d:7d:ad:e9:
4e:03:7f:cf:5c:66:d0:07:f5:51:f6:48:3b:ac:63:
94:40:8b:56:e6:43:c0:a0:9c:08:25:f0:46:5c:11:
5b:99:dd:fc:c0:47:2a:78:dc:d5:ba:4f:a1:74:88:
97:e5:75:de:cb:f9:21:4c:79:31:d8:d8:ee:dd:cd:
48:dd:98:f9:7d:00:43:5e:bf:37:d7:b5:de:b9:02:
cd:36:34:ad:cb:f8:8a:83:6c:d1:d2:0f:84:bb:6c:
ad:ff:af:33:3f:c9:93:6f:18:0e:31:11:1a:b4:73:
dc:1b:3e:d1:6a:71:10:aa:3d:be:27:b7:9b:0e:3d:
b4:fd:20:ac:fa:03:e7:b3:5c:d6:f4:77:55:10:d6:
b6:d6:63:5a:b4:fe:b4:84:96:2e:24:ef:a9:bb:02:
20:d8:53:7c:3b:7f:4d:5d:cc:33:b5:c3:79:10:93:
88:b7:1c:8f:8b:fb:6f:dc:bc:8b:88:8f:4a:cb:d0:
9f:da:80:bd:56:13:8d:2d:2c:7a:bb:90:c6:94:e2:
de:8d:1c:92:13:b3:1b:e4:58:92:08:61:78:bb:90:
f4:9f:de:10:d6:8e:7c:21:50:65:bd:a6:3f:09:58:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AE:58:20:0B:40:D0:57:E7:34:86:CE:D4:4D:B9:65:A5:BB:E4:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01B095545B7611F09EFB81B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
19:fe:92:22:28:3e:54:b4:1d:2e:37:01:32:7d:62:a9:45:65:
70:cb:11:dd:b4:81:3c:19:8a:d4:6b:87:0b:61:46:db:d7:d9:
1c:91:9c:57:e0:de:73:39:e5:ad:5d:12:44:86:c7:63:f7:5c:
b3:14:8c:bd:bf:06:ce:c2:6e:76:c8:03:61:29:5e:b8:90:09:
e8:0f:5b:d7:cf:97:c6:76:37:06:3e:12:56:c7:6a:a3:98:d7:
61:b4:22:a4:e6:38:76:6b:52:b7:3f:c5:0b:b1:df:54:3b:d7:
4d:7b:fc:6f:98:ac:a7:33:4f:ec:ca:86:b3:95:ab:d3:2b:b7:
b0:76:2b:31:01:c2:9a:45:e9:9b:9e:0c:1e:06:35:60:e4:25:
8f:63:27:7a:7d:7a:a7:c2:fb:47:82:8b:16:fa:b4:61:f5:d9:
2d:bc:3f:f4:a4:6a:2e:a1:db:a4:1f:16:18:84:59:de:48:02:
73:b9:b3:ae:18:14:35:a0:af:39:ef:6e:e1:f6:fb:aa:d7:14:
0d:64:19:1b:58:f2:4d:82:a8:3a:22:ae:d7:22:d3:2c:69:54:
3e:84:8d:0f:c9:da:78:27:a3:46:ce:0e:46:56:6a:0d:47:3f:
61:a3:d1:2e:6b:b2:a5:ee:11:1f:03:7f:93:ba:39:d1:e8:b0:
a9:70:3a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:44 2025 by rpki-client