Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB843B24619A11F08052B788DAE4EC9C.roa
File: AB843B24619A11F08052B788DAE4EC9C.roa (raw, json)
Hash identifier: yg87r/8jhHKPHhGGPK6mGHs1x94Zwq9N4U2pYFg6RxA=
Subject key identifier: 56:37:0F:CF:AD:55:BC:F8:66:19:C0:00:90:45:17:49:B6:67:7D:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB843B24619A11F08052B788DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 16:42:18 +0000
ROA not before: Tue 15 Jul 2025 16:42:13 +0000
ROA not after: Sat 11 Jul 2026 16:42:13 +0000
asID: 152179
IP address blocks: 154.91.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101862 (0x18de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 16:42:13 2025 GMT
Not After : Jul 11 16:42:13 2026 GMT
Subject: CN=687684ea-e666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:27:ff:e4:59:c0:c0:95:0c:fd:8f:19:82:
5c:00:ab:c7:9f:57:12:2e:c1:ae:30:01:d5:0f:d3:
8b:4e:a2:c7:16:1a:77:42:cb:a8:f6:83:5d:53:7d:
a2:8a:da:00:4f:fe:00:d3:fe:58:10:72:6f:bf:e9:
a2:3b:95:c7:3d:79:16:a9:c4:d8:95:f9:0a:ce:14:
16:cd:65:b0:0c:6d:bc:d3:06:29:7f:82:00:6a:8a:
86:08:35:3c:79:d3:ac:db:b2:d6:71:66:8f:9c:84:
88:d3:16:a4:25:78:95:23:c8:d7:7d:5d:8f:f5:e3:
40:02:8e:62:d0:ec:05:20:ae:fa:79:8b:c9:40:b7:
66:0e:73:59:85:7d:af:6a:69:df:d5:74:5d:8f:82:
d2:28:c5:a6:f5:ea:39:3a:0b:0d:1b:6f:be:09:0c:
21:f5:04:d3:e5:a9:62:a6:3e:34:d2:6a:75:01:b3:
f6:4f:b7:4c:70:22:1a:6e:11:fe:a5:29:4b:45:63:
ee:98:9c:e0:5f:e7:52:40:55:ec:42:fe:f1:5a:66:
c5:d8:72:c1:99:c0:06:e9:dc:1e:77:c0:ab:1b:42:
e6:14:d0:7c:d3:fa:8a:59:e8:2b:21:03:a3:ea:05:
c6:46:37:b8:35:96:f3:d7:03:78:1e:66:78:af:66:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:37:0F:CF:AD:55:BC:F8:66:19:C0:00:90:45:17:49:B6:67:7D:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB843B24619A11F08052B788DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.201.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ba:8a:01:b9:bc:82:89:5a:7f:a0:fe:ec:ad:62:61:7c:f6:
52:92:34:1f:51:d2:d0:3c:e9:50:b5:85:45:96:dc:68:d5:84:
23:7b:b8:7c:fb:e4:21:af:02:0f:bb:02:9f:65:70:0b:3d:d7:
fd:c0:9f:1c:e0:bd:54:cd:6b:af:a7:a3:c9:be:55:10:fe:7b:
c1:6c:1d:4b:d6:12:b8:43:ba:95:92:69:b3:ef:1e:2f:e8:d8:
27:06:84:c9:c5:c5:4e:e9:92:41:4d:b6:49:2d:9b:ab:ac:3c:
cf:30:dd:e8:9c:ed:77:d9:04:44:e9:41:cd:d5:47:da:de:88:
87:bd:27:99:a0:a6:e2:b3:a7:69:e6:e1:43:e2:a3:a1:8e:cc:
7c:06:1a:07:2c:33:5f:81:99:ba:4a:2a:6c:f5:72:9f:c2:3d:
aa:bf:97:74:fa:09:e2:58:ff:b0:f5:55:8f:86:53:69:05:63:
37:0f:c7:90:64:c4:99:f0:16:2e:00:af:a3:05:8a:42:84:bf:
39:1f:d2:7e:76:0f:13:1d:af:65:2e:fe:75:9f:71:2b:71:6e:
f1:08:30:e0:ea:95:8e:55:cf:85:27:0c:0a:b8:b0:2f:2c:d0:
90:cc:b2:7c:75:cb:a5:28:b3:63:d4:be:c0:2c:06:d9:69:a3:
9a:a8:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:53 2025 by rpki-client