Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20F32F92591111F090DA999CDAE4EC9C.roa
File: 20F32F92591111F090DA999CDAE4EC9C.roa (raw, json)
Hash identifier: EHb8ozcFRgGPEiweLkbT30SafhaIe2Ldp1XeiM395k0=
Subject key identifier: D7:0C:0A:61:51:A6:A5:62:CF:43:FA:74:D3:0F:C1:56:B1:2C:5B:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20F32F92591111F090DA999CDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 19:57:35 +0000
ROA not before: Fri 04 Jul 2025 19:57:31 +0000
ROA not after: Sat 13 Sep 2025 19:57:31 +0000
asID: 25818
IP address blocks: 154.91.204.0/22 maxlen: 24
154.91.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101034 (0x18aaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 19:57:31 2025 GMT
Not After : Sep 13 19:57:31 2025 GMT
Subject: CN=6868322f-9d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:c9:2b:6c:fd:51:fc:aa:06:77:d4:7c:bb:
a4:44:a3:75:b3:f4:1e:cd:df:32:73:db:28:c2:65:
c3:4a:a7:e6:3d:64:c0:7a:60:e5:1f:d8:32:ca:03:
73:f2:30:a9:63:52:88:ad:d9:b9:bc:0a:99:9a:21:
00:a7:d0:48:08:03:53:55:e7:9f:7b:dc:dd:f3:20:
f9:6e:54:71:b4:ef:6b:d6:5f:d1:81:1c:f0:75:48:
ea:55:93:42:fb:1d:66:d1:02:28:4d:46:95:ff:83:
dd:40:28:9a:e0:08:00:ed:48:5b:c9:f9:af:f9:42:
3a:90:b4:95:ea:bd:7e:2b:70:09:00:c4:c9:69:62:
af:d5:51:9e:32:6f:a0:07:63:a1:ef:60:eb:81:63:
73:1a:6c:9b:bd:28:2a:19:14:74:00:2c:74:4f:9a:
24:0c:28:39:3d:bd:e5:78:26:0a:1d:49:c1:20:f6:
2f:10:f0:5f:38:c0:98:de:1e:86:97:f5:8b:9d:8b:
00:d2:65:7d:7f:b8:d8:e0:75:d7:38:70:4d:f4:0f:
52:02:8d:29:44:c3:6a:86:c4:2a:c1:f7:97:5e:a6:
43:3d:71:a9:19:c6:f2:71:00:3f:9e:48:ad:4c:49:
bd:47:2f:a0:11:d4:a9:7b:56:3d:f5:69:fc:fb:04:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0C:0A:61:51:A6:A5:62:CF:43:FA:74:D3:0F:C1:56:B1:2C:5B:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20F32F92591111F090DA999CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0-154.91.223.255
Signature Algorithm: sha256WithRSAEncryption
62:cc:eb:f1:0a:c8:43:7b:b9:2e:fe:8f:7b:73:be:ae:8e:b1:
8c:3f:0d:23:4f:f2:bf:aa:89:d2:09:14:01:38:dd:8f:27:02:
ab:59:24:6e:e6:d1:bc:01:84:2d:f5:f9:d3:fa:1a:60:ad:6b:
14:4e:b9:ba:c6:f7:3a:70:33:6f:1f:c8:ff:53:80:9b:4f:14:
e8:b1:24:34:47:bf:7a:1c:3e:33:c2:33:7d:f5:ca:3d:6b:14:
72:de:0d:c5:9a:5a:7c:f4:71:14:3d:37:f5:ab:03:2d:e6:7a:
11:92:78:4a:11:8e:10:89:98:60:99:1c:f7:96:0e:42:bb:d6:
9c:68:f0:df:4e:7b:e5:ab:d2:8b:19:15:9b:36:c4:cf:fc:2f:
dd:72:9d:8c:ce:09:69:b2:d8:ee:70:6f:c6:1b:15:c8:72:89:
eb:8a:25:be:69:c0:cd:bf:ba:b4:64:f3:ad:64:82:66:a7:95:
d6:48:1e:d2:5b:70:bd:6e:af:e6:d5:1c:bd:60:00:cd:78:3d:
c4:4b:8a:e5:7b:01:bd:ef:cc:e6:83:20:dd:c0:a9:d7:f5:6d:
3a:97:a4:6b:e9:c0:e8:40:8c:63:10:d0:06:ac:49:b2:06:8e:
25:30:47:bc:93:a6:ea:ce:e8:ff:f0:79:91:e0:61:9f:1e:68:
83:fa:9b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:33:52 2025 by rpki-client