Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1316F74E5B4D11F0B79F94ACDAE4EC9C.roa
File: 1316F74E5B4D11F0B79F94ACDAE4EC9C.roa (raw, json)
Hash identifier: ZOfY6ufqpY2xDrMu6bTFKgU3of3xlXhqPzQer0aLnDc=
Subject key identifier: D7:61:A0:74:87:DB:8F:A2:A9:5A:47:64:4F:67:34:97:4A:CE:12:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1316F74E5B4D11F0B79F94ACDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 16:11:44 +0000
ROA not before: Mon 07 Jul 2025 16:11:39 +0000
ROA not after: Sat 16 Aug 2025 16:11:39 +0000
asID: 40779
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101424 (0x18c30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 16:11:39 2025 GMT
Not After : Aug 16 16:11:39 2025 GMT
Subject: CN=686bf1c0-f926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:ab:f3:90:52:7e:6e:a2:f2:87:22:7e:44:
2c:69:b0:bb:50:e3:df:b2:b0:8c:7a:5e:fa:be:be:
60:62:d7:c6:dc:75:cd:b2:db:ba:26:d9:c8:a9:2a:
b1:72:c4:7e:f9:14:5d:f2:22:d9:38:1b:d3:eb:44:
61:c8:6c:3a:9b:21:e9:fd:90:bf:3b:1f:a5:6a:fd:
19:53:91:58:1b:71:81:2b:00:b9:96:b4:4f:c3:96:
9d:81:7d:f5:dc:5d:31:68:17:b4:5a:30:ed:16:88:
0a:5a:e5:85:ff:bd:5e:f6:cd:1a:ca:8f:b2:c5:68:
b4:60:41:2c:ba:f8:44:63:17:dd:8e:5d:a9:dc:34:
42:a9:eb:6f:c4:91:76:28:46:70:35:84:9e:be:81:
45:fe:26:e6:e1:dc:9d:eb:70:54:20:d3:21:87:f7:
19:84:cf:8e:de:f2:05:c7:ff:04:87:86:a1:4f:b0:
4f:ca:fb:d8:d2:e1:81:88:85:90:90:74:de:dc:9d:
c8:f8:78:d3:b7:63:04:c3:db:b8:b0:c2:d5:51:95:
d2:47:d9:50:a2:e6:3f:77:e7:cf:92:30:af:df:ee:
95:e6:b3:54:dc:1f:db:75:14:9e:f9:f5:7b:04:ce:
01:42:28:5c:8e:2c:d7:b4:ef:3f:bd:08:1a:01:ef:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:A0:74:87:DB:8F:A2:A9:5A:47:64:4F:67:34:97:4A:CE:12:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1316F74E5B4D11F0B79F94ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
11:0b:a9:aa:9c:02:1b:e6:60:7a:a0:77:1c:63:19:03:15:42:
25:c2:c5:74:f5:91:44:58:12:82:5b:e4:93:47:5b:8d:20:ca:
71:e6:b4:f4:65:03:d6:8c:c9:95:64:6f:84:fe:7d:f6:71:33:
3d:a9:7c:0d:f4:20:c8:21:6f:22:a1:90:22:13:a8:05:67:d6:
c5:98:d6:77:91:13:42:0b:26:11:94:24:0e:56:e7:c6:3a:31:
32:49:e4:f3:28:64:9e:1b:fe:66:ca:84:af:97:68:4f:40:34:
fd:65:2f:96:d2:3e:eb:11:f9:8f:29:52:ef:07:71:ae:ed:26:
c9:93:c4:a9:77:22:e6:a7:5a:cc:61:3d:f0:77:03:f4:b0:ae:
c0:9a:39:2b:65:13:1c:3a:f0:80:67:ae:3f:58:57:a3:37:b3:
95:d4:78:65:96:59:87:18:8e:4e:9d:05:b9:bc:e5:f4:a9:2c:
36:6f:e2:40:3d:db:60:fe:8f:8f:e9:cf:f8:5e:4e:2a:7a:22:
d8:23:e9:cc:1f:4e:e8:42:0b:8e:cb:13:c2:cb:6c:91:a6:64:
c6:f7:73:28:a9:df:0d:2d:e1:f5:4d:ab:fc:c9:1e:6c:85:d3:
95:05:5e:ec:31:24:73:c9:2e:c4:71:9d:90:8f:1f:c7:34:10:
1f:10:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:11 2025 by rpki-client