Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AF54F345B8011F0AD5255F6DAE4EC9C.roa
File: 9AF54F345B8011F0AD5255F6DAE4EC9C.roa (raw, json)
Hash identifier: /idYeyXQSFWW33XGqiZxxbYKd8IDM6TNPFs0Vjql+dk=
Subject key identifier: 5C:85:C6:D8:21:CE:9A:E9:06:87:F0:51:C0:2D:AB:40:ED:82:9F:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AF54F345B8011F0AD5255F6DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 22:20:37 +0000
ROA not before: Mon 07 Jul 2025 22:20:31 +0000
ROA not after: Mon 08 Sep 2025 22:20:31 +0000
asID: 214808
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101492 (0x18c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 22:20:31 2025 GMT
Not After : Sep 8 22:20:31 2025 GMT
Subject: CN=686c4835-43b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:e7:3e:1f:1e:b8:34:cb:e7:8b:9a:0e:c4:
6f:2b:e3:64:7b:ba:9a:64:92:ae:1b:ed:50:4f:83:
f2:25:f3:b0:44:ac:38:16:f7:0e:03:82:6d:05:af:
e6:1c:cc:1f:d8:ac:2e:9e:42:9e:8d:e2:84:ca:6f:
d9:1f:94:02:4c:50:76:5f:54:03:97:cb:cd:b0:fe:
34:ab:ff:70:1c:6e:3b:4d:85:a9:48:8e:54:a9:0d:
54:da:7f:0b:c0:0d:4c:75:58:c4:5e:32:98:b4:8c:
23:94:76:6e:f1:44:ce:d6:43:4d:09:fc:e2:d2:99:
a2:95:0f:64:16:6c:fb:e3:8d:78:31:35:77:5d:18:
a3:0f:9f:7c:1b:a0:29:4a:9d:e2:c0:d5:8e:ce:d0:
6d:7e:b0:c5:82:5d:98:49:0c:65:d8:6e:8c:45:02:
cb:67:d6:a6:b9:1a:97:dd:c4:a7:27:e4:e7:3d:71:
8f:ee:b7:de:ba:b9:b6:3d:35:f2:5c:76:1e:72:97:
50:19:b9:7b:74:5d:30:e3:04:48:ca:01:77:48:4d:
18:0f:ee:3c:98:22:ae:a4:16:f4:90:00:32:e8:1e:
7c:e3:11:a6:26:33:0c:08:1f:5d:cb:61:61:c2:c2:
a3:2c:51:28:da:ce:ed:96:59:c3:59:39:c9:a8:aa:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:85:C6:D8:21:CE:9A:E9:06:87:F0:51:C0:2D:AB:40:ED:82:9F:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AF54F345B8011F0AD5255F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
84:7a:6f:1e:2f:aa:67:ef:2e:e5:b8:df:79:e5:63:c1:69:03:
7c:ad:35:71:82:1a:b2:02:de:b5:7d:6f:7d:1e:3f:9a:81:05:
14:8f:81:14:96:cb:e2:63:32:02:54:f5:d2:3d:16:9a:4a:81:
ef:9b:50:a7:71:79:18:c3:f3:9f:06:02:02:ac:10:9e:59:8b:
40:23:4b:5e:c2:2c:50:38:54:58:4f:89:69:5f:38:be:c9:38:
c6:80:fb:c6:f2:a2:48:ae:ef:db:6a:09:f1:ed:f1:eb:04:f6:
db:9a:c3:e0:18:01:07:a9:14:8f:64:77:11:ac:18:d5:b4:6e:
39:73:8a:f6:aa:f3:91:19:56:69:45:ae:87:4b:fe:e0:03:3c:
cc:49:cf:60:03:81:23:1d:e5:cb:f0:97:dd:fb:90:1c:b6:db:
df:bb:63:dc:25:c0:87:56:1c:07:3c:1f:b3:a2:f1:55:e1:ec:
a2:78:25:68:2b:ba:33:56:45:62:b8:63:f7:cb:2d:93:e1:97:
90:b8:ea:d5:ff:08:21:89:f7:e5:44:e2:08:f7:f4:16:37:af:
11:1d:d1:4c:6f:14:d3:b4:d3:43:c0:3e:0c:80:76:3f:23:56:
85:0b:ef:dd:55:4e:1c:83:80:0b:c9:26:99:60:07:7b:02:43:
55:df:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:09 2025 by rpki-client