Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/912D56165D6C11F08F02378BDAE4EC9C.roa
File: 912D56165D6C11F08F02378BDAE4EC9C.roa (raw, json)
Hash identifier: ccIs8M+b1h2qvlgZ24kDq1NXsw87byCctFEIwTPBdtE=
Subject key identifier: 41:E8:18:89:28:E4:AC:88:CB:36:B5:C0:54:1D:66:8D:95:6B:7E:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/912D56165D6C11F08F02378BDAE4EC9C.roa
Signing time: Thu 10 Jul 2025 09:02:13 +0000
ROA not before: Thu 10 Jul 2025 09:02:08 +0000
ROA not after: Mon 10 Aug 2026 09:02:08 +0000
asID: 984
IP address blocks: 154.222.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101671 (0x18d27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 09:02:08 2025 GMT
Not After : Aug 10 09:02:08 2026 GMT
Subject: CN=686f8195-4017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:ea:7e:5e:f5:33:42:28:7c:31:77:44:70:
5e:b7:fe:4f:f8:53:ad:7d:04:32:f1:2f:cb:28:5c:
0b:5d:6c:6c:3f:bc:1c:a4:eb:44:03:36:2d:00:2f:
30:4a:13:f8:2c:23:be:8e:55:08:77:88:66:8c:5b:
bb:a4:7b:6d:a8:a9:43:33:e0:e5:3c:35:44:46:73:
f9:58:a1:55:3b:c3:1b:2e:74:5b:3c:e7:f6:43:33:
3c:65:f5:7b:37:58:eb:ac:f6:67:d9:c3:e7:48:7a:
87:6e:c4:a6:2e:d9:9e:66:2a:2d:ed:de:2e:27:56:
1f:67:10:63:19:40:e6:f4:ca:64:c3:00:98:35:3d:
1c:26:80:4d:f0:6d:5e:3e:5d:68:99:ad:f2:74:97:
26:f1:d0:89:af:aa:df:1f:a6:94:3b:9b:fd:29:78:
78:ab:6f:4f:1b:f2:78:ab:a5:8b:24:63:4f:68:ac:
5e:ef:5c:cd:7f:2b:ab:3f:f8:61:31:23:e4:fd:27:
82:e5:84:86:22:fc:ad:0e:38:38:ce:97:06:dd:09:
53:9e:4d:04:67:30:9d:cc:1a:26:d1:1c:5f:d0:19:
ab:20:33:89:e5:ac:ae:92:25:6c:fd:37:22:7e:f4:
8d:29:a7:63:76:a5:0e:1c:f0:c4:25:5f:93:76:91:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:18:89:28:E4:AC:88:CB:36:B5:C0:54:1D:66:8D:95:6B:7E:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/912D56165D6C11F08F02378BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.69.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ea:ad:15:5b:b4:84:b9:cb:f0:53:c6:4b:a5:9d:d1:6c:0a:
59:c2:02:f3:b8:a7:01:03:a8:87:fe:1e:b7:b2:fb:04:f6:f5:
85:96:37:9f:4b:a2:e0:2b:03:60:5b:6b:53:4c:44:dc:59:8e:
29:cf:06:ae:43:49:31:7f:f5:d5:f7:0b:87:11:19:ae:ee:bd:
5f:4a:78:e4:c4:38:39:ad:0e:f8:a4:1a:0f:d0:27:83:51:3c:
9b:61:83:08:53:e0:e6:05:32:68:3d:ba:a0:70:46:8e:bb:75:
da:1f:b1:2c:6c:e1:b3:72:f4:48:f4:e7:1f:e6:ca:a2:30:90:
16:32:82:bf:16:72:8b:ec:05:b5:66:80:59:5a:ed:25:f4:e0:
ce:7b:00:de:dd:4a:1e:2f:b2:a9:7c:22:0f:5b:04:c2:62:dd:
60:cf:ff:af:f0:2a:cf:7b:b3:4a:4d:ae:21:84:43:d7:16:f5:
65:5c:58:5f:6e:05:7d:18:95:40:0c:3d:b8:52:1b:7b:87:b9:
39:97:72:66:cc:93:86:9d:f4:70:2a:81:cb:fc:0d:c5:01:f6:
a7:4b:61:c3:4e:76:9c:eb:65:ba:87:3f:c9:7c:c6:b2:e8:8b:
31:fe:07:40:dd:55:b3:44:9f:8b:84:4a:4e:45:7c:2e:e2:9c:
05:8d:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:07 2025 by rpki-client