Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC727510623311F08BE6DFF2DAE4EC9C.roa
File: BC727510623311F08BE6DFF2DAE4EC9C.roa (raw, json)
Hash identifier: 7J2Kg9pgZP8OE+z3nJn9rNGne3RJl58kNg/qZgQOJ6M=
Subject key identifier: 73:8A:9A:42:DE:EC:B9:D3:DD:1C:F9:AA:29:9F:A7:06:1B:0D:60:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC727510623311F08BE6DFF2DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 10:58:00 +0000
ROA not before: Wed 16 Jul 2025 10:57:55 +0000
ROA not after: Tue 22 Jul 2025 10:57:55 +0000
asID: 7029
IP address blocks: 154.194.16.0/21 maxlen: 24
154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101883 (0x18dfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 10:57:55 2025 GMT
Not After : Jul 22 10:57:55 2025 GMT
Subject: CN=687785b8-9488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:12:90:17:e0:28:48:de:4a:c0:52:25:1e:
84:da:fe:a5:33:9f:e1:a6:5c:d6:51:91:a3:14:2f:
47:4a:19:bb:b2:a0:59:4c:e9:d6:e1:41:0e:48:63:
32:42:bf:0e:fc:43:d4:fd:c0:1c:18:78:a1:f2:6c:
fb:9e:a5:39:a3:e7:a6:6b:13:99:8e:a9:47:46:ad:
90:c1:ef:80:4c:ec:b1:66:ad:12:7c:13:c0:5f:cd:
f5:19:31:db:98:d3:76:5f:ad:e3:0a:88:36:e2:ec:
b4:2b:08:0a:c1:d3:9f:aa:73:27:ed:90:5d:c1:c3:
f9:f3:83:1b:ce:2e:11:97:04:b4:f0:c6:0a:86:91:
40:6c:81:92:aa:de:7b:78:f0:0d:86:1d:43:9b:6e:
9e:01:17:15:d6:94:d0:74:9c:5c:e1:3a:4d:43:de:
25:72:80:57:56:da:c0:62:51:ae:4a:82:0b:40:e6:
46:87:8f:49:b1:3f:b6:aa:a5:53:db:ec:b1:89:33:
2a:22:65:cf:3d:86:27:2c:b3:4d:ae:27:a8:85:7d:
b5:2c:3b:af:5f:65:1f:c4:6c:9f:3c:ce:2f:76:fd:
5b:64:32:82:68:d0:b4:34:da:c3:b3:24:4b:7d:19:
73:14:b5:2f:c3:41:43:9c:42:2e:a7:2b:20:b7:f5:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:9A:42:DE:EC:B9:D3:DD:1C:F9:AA:29:9F:A7:06:1B:0D:60:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC727510623311F08BE6DFF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0-154.194.27.255
Signature Algorithm: sha256WithRSAEncryption
77:47:a5:5b:ac:54:52:c0:53:dc:26:a4:09:f0:a5:e5:f4:c5:
50:96:62:84:8b:bb:75:d9:82:9c:d9:26:d7:fa:40:b8:75:a6:
32:a8:6a:c9:82:af:ba:54:4d:80:b6:56:56:6a:8e:8c:c6:bf:
6d:98:9d:f4:46:4c:5d:82:6e:9e:05:b2:80:31:ed:4b:22:a1:
4f:0b:23:93:1e:d0:36:45:7b:97:20:d7:21:cf:85:da:34:f1:
46:a6:8a:d2:58:1f:cb:e0:40:32:20:03:22:67:19:43:6a:08:
5c:31:0b:12:b9:d6:63:d3:99:9c:7a:23:00:11:6f:a2:82:12:
8b:e7:52:3f:6c:5a:7b:07:dc:3d:33:d1:71:9c:a2:7b:dd:de:
b9:b9:44:c0:bc:09:63:9c:bb:a7:10:66:21:ab:59:8a:f7:c1:
3e:a0:6b:bb:d7:fb:70:d2:95:1b:f8:31:24:1e:18:d6:b3:6b:
a0:ca:bf:b8:ec:fc:16:2b:6b:25:c3:ca:46:23:27:a9:a0:27:
c6:d5:11:e4:93:e1:34:77:53:6b:1f:00:23:84:2d:c0:88:3f:
d7:b3:0d:f8:22:98:37:bd:2b:1d:8f:ce:33:c6:15:9c:53:80:
5e:47:e7:65:31:a9:e5:53:ae:87:c3:a6:22:38:a8:15:a7:fb:
df:15:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:46 2025 by rpki-client