Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A023BE625ABF11F09C03048CDAE4EC9C.roa
File: A023BE625ABF11F09C03048CDAE4EC9C.roa (raw, json)
Hash identifier: CTIfXqJLIA+N8M53Ghb5RfjHTGsv25Qqudv4DMTLXPA=
Subject key identifier: 20:BF:C8:39:E1:77:95:F0:DE:42:82:89:38:45:0F:BF:29:AF:2D:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A023BE625ABF11F09C03048CDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 23:19:13 +0000
ROA not before: Sun 06 Jul 2025 23:19:07 +0000
ROA not after: Thu 04 Sep 2025 23:19:07 +0000
asID: 398993
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101344 (0x18be0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 23:19:07 2025 GMT
Not After : Sep 4 23:19:07 2025 GMT
Subject: CN=686b0470-6af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:db:fc:9d:9e:b3:35:d5:51:74:ca:21:a5:
76:7c:c3:62:d8:d0:37:6d:53:e7:0f:50:9c:21:22:
73:1f:a1:55:82:07:d4:c5:3c:55:12:bc:75:80:3c:
1e:0f:7c:f3:66:f2:08:f6:b8:b4:96:8c:51:6f:42:
fc:40:41:32:c9:56:0a:18:2e:1d:ed:2f:d1:b1:71:
00:17:cc:8f:eb:c5:a8:1f:21:9b:98:76:1b:8e:7a:
fe:d4:77:0d:75:25:5c:ff:b0:79:5e:5d:5b:af:4e:
16:8d:f1:30:4a:5a:67:1d:85:bd:93:8e:17:57:13:
c2:18:b2:61:c1:76:e1:ee:2e:c9:f3:0a:74:82:26:
04:af:ca:21:87:a3:c5:63:84:00:10:2c:84:6b:98:
fc:7c:26:10:20:a9:ff:4f:62:ec:5f:90:75:87:25:
d7:78:39:eb:42:00:27:0e:9b:cf:ed:49:a6:65:4d:
7f:97:6f:5e:18:00:c8:d3:2b:b2:fc:6b:fb:33:9f:
55:62:5a:10:9a:ed:6b:6e:6b:5b:ea:8b:ea:f3:ad:
44:a6:c2:4e:e3:1b:91:39:94:b5:c5:8f:5a:b5:d2:
60:47:65:ab:b0:a3:e4:04:5e:9c:e0:d1:00:e9:fd:
7c:5c:78:79:36:d1:13:40:d8:bf:26:2f:2e:2a:ba:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BF:C8:39:E1:77:95:F0:DE:42:82:89:38:45:0F:BF:29:AF:2D:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A023BE625ABF11F09C03048CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:ca:e0:30:7b:5c:dc:e3:e8:e7:05:5b:93:8e:a6:38:ee:e5:
6d:5a:c9:bf:2f:23:94:76:d3:98:ef:70:a9:f1:dc:fb:a2:b2:
e9:fe:61:22:d9:fb:ea:4f:76:ba:da:91:77:3e:f7:08:29:3f:
a7:58:2e:ca:09:e9:3e:1e:d1:05:fa:ae:af:87:0a:ed:49:9a:
81:aa:82:4b:69:da:10:16:32:70:af:32:59:3d:93:02:60:7a:
b1:d7:cc:7f:55:a3:5d:66:b0:e0:f8:ed:68:25:a7:dd:80:ce:
b4:b7:5b:00:e7:4c:49:80:69:21:4d:40:8a:d8:0f:0d:c0:1b:
1d:c0:1b:8a:66:4a:46:72:1e:41:e7:0f:c9:55:d1:37:ac:6e:
23:80:41:9a:e4:34:f2:45:00:08:14:c2:28:01:a5:3e:28:ca:
a4:12:fa:b2:c6:fa:4e:9e:50:5a:24:dd:e8:e1:c6:46:2d:d2:
b5:ce:d0:53:79:53:fb:e9:c4:4a:74:57:dd:c6:28:fd:dc:13:
db:a2:46:0f:3c:22:04:01:fc:7e:e9:5b:55:e6:c8:3a:73:a8:
40:88:04:e7:20:d7:eb:c1:8e:20:53:49:41:0f:00:1e:be:e5:
67:fa:fe:05:6f:00:54:66:8e:f6:ae:ec:6d:01:a6:f9:61:55:
6d:4a:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:00 2025 by rpki-client