Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FA52A2C608711F088EAF390DAE4EC9C.roa
File: 7FA52A2C608711F088EAF390DAE4EC9C.roa (raw, json)
Hash identifier: m0mrRDmxxTe5x92lqshSg4+1HHjESxv0MCjBh0Ec0k0=
Subject key identifier: 43:DF:4A:73:A1:C8:31:D1:CD:C8:70:64:63:85:6F:2F:4B:2D:32:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FA52A2C608711F088EAF390DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 07:52:33 +0000
ROA not before: Mon 14 Jul 2025 07:52:28 +0000
ROA not after: Sat 16 Aug 2025 07:52:28 +0000
asID: 213702
IP address blocks: 154.194.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101793 (0x18da1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:52:28 2025 GMT
Not After : Aug 16 07:52:28 2025 GMT
Subject: CN=6874b741-2855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:90:4f:2c:0d:55:27:55:0e:db:74:af:41:
fe:9f:b8:33:8b:9f:fb:e6:5c:cf:bf:79:90:bd:9d:
e4:33:cc:ce:a2:66:d0:76:97:4e:f6:ee:fd:bd:e6:
ad:b7:a3:62:0e:93:45:78:25:97:10:db:34:01:ab:
2f:dd:2b:ef:68:c5:bf:ae:fb:3a:4d:22:1b:6f:f7:
5c:ab:95:c7:b8:59:02:8b:91:43:8f:04:a7:e3:f6:
44:b1:22:a0:eb:4a:0c:a2:02:c1:bf:fa:06:21:02:
9e:52:02:1f:f3:75:47:12:00:97:f1:48:6d:07:2d:
dd:21:ea:48:15:7b:74:77:29:bc:2e:ac:83:64:8a:
d3:09:34:33:60:17:73:84:36:50:24:29:4e:4b:8d:
fe:75:26:2f:fe:00:64:14:12:33:e0:c9:13:52:e7:
b5:c3:09:c7:e6:aa:0d:7d:e8:1d:1f:0c:91:56:8a:
2f:d6:21:1a:1c:f3:2b:40:55:e2:b6:98:8b:5e:11:
04:4d:44:d6:7a:73:65:fb:61:6e:02:b3:61:0c:55:
a2:28:9d:b2:7f:3b:08:95:23:1d:9d:4b:d7:f0:88:
c6:b7:39:28:23:c9:8c:a2:03:ba:d1:44:cd:9a:ea:
75:6d:d0:7f:bf:8c:07:9f:db:f3:11:de:21:a9:3f:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DF:4A:73:A1:C8:31:D1:CD:C8:70:64:63:85:6F:2F:4B:2D:32:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FA52A2C608711F088EAF390DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.224.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:3e:8b:cb:7c:99:ce:c6:32:26:6a:3e:1f:27:43:43:61:60:
b3:a8:27:db:e5:3a:d8:a1:27:1d:70:23:08:d7:6a:97:f2:ef:
e0:25:8a:c3:69:77:a6:dc:ff:8b:ac:bd:c9:8a:32:4f:7c:b3:
34:9f:ab:14:2d:8a:69:d0:d4:bc:f5:71:a8:45:90:bf:89:cd:
6b:a3:57:18:3d:58:91:8a:ab:21:90:85:fd:97:70:87:a5:4d:
0c:8c:2c:85:b0:64:31:dd:03:9c:43:50:5c:c0:39:77:09:cb:
c6:d6:55:76:87:2a:df:22:48:d4:cc:e7:11:25:0f:64:cc:37:
8b:0c:9f:d7:85:b4:5c:27:3c:4a:ec:95:26:c5:44:f3:91:07:
6a:cb:59:e3:50:f4:d2:8f:17:b0:e8:0c:79:73:e7:39:37:d3:
0d:b6:bf:d3:20:7f:bf:45:04:21:81:de:7c:de:ae:e3:c4:d1:
ed:89:e6:d3:3c:4a:28:83:d0:cc:3c:0d:b9:fa:8d:69:33:dd:
3c:5b:fd:90:6b:d9:b4:bb:c1:26:06:9e:3c:89:b6:a0:05:05:
68:f2:14:3d:40:ce:31:d8:32:7b:01:63:56:57:3a:de:d8:cb:
17:62:df:d2:dd:71:b9:5b:62:e5:c4:b6:62:ba:ef:1a:02:4e:
25:56:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:10 2025 by rpki-client