Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0E31F08622511F0A305D29BDAE4EC9C.roa
File: D0E31F08622511F0A305D29BDAE4EC9C.roa (raw, json)
Hash identifier: q9EadNDEuQ60f/rSPr7D4VJluP4KfQoG3Z1KUGt9VIk=
Subject key identifier: AB:16:BD:B0:FB:B8:CF:D5:22:86:69:AE:F8:9D:EA:5E:90:8D:43:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0E31F08622511F0A305D29BDAE4EC9C.roa
Signing time: Wed 16 Jul 2025 09:18:21 +0000
ROA not before: Wed 16 Jul 2025 09:18:16 +0000
ROA not after: Sat 25 Jul 2026 09:18:16 +0000
asID: 139056
IP address blocks: 154.214.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101867 (0x18deb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 09:18:16 2025 GMT
Not After : Jul 25 09:18:16 2026 GMT
Subject: CN=68776e5d-d55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:42:03:75:60:28:b0:7b:9f:44:38:51:7e:
fe:df:e7:2a:3d:b2:eb:cf:78:d2:1d:fd:4e:fd:05:
e5:91:c5:56:47:3d:dc:c2:dd:20:a6:c7:c3:04:19:
6f:89:2d:33:8b:e7:5e:dd:18:52:bb:90:a5:b3:80:
81:dc:ad:c5:26:e1:d5:89:61:6c:d7:14:6a:04:c6:
c9:29:df:af:25:c5:a4:f9:e9:48:99:74:43:05:36:
62:40:60:50:2e:bb:a1:d6:88:b5:4e:7a:f5:65:04:
28:13:21:55:33:21:8c:88:cb:1c:d1:92:df:65:bb:
69:f1:0d:89:54:c9:49:1b:a3:34:ad:d1:1a:13:1e:
31:ee:33:b6:0f:d0:85:3d:3b:ef:1b:56:35:95:35:
04:f2:d2:23:bb:94:26:0a:3e:1a:13:fe:9a:8f:4e:
ca:aa:d5:9b:f8:04:8d:e3:dc:9c:7b:a1:ba:40:c9:
63:ab:d9:90:43:a7:8a:09:fd:e6:0b:2d:0d:47:69:
8b:e0:4d:b1:a6:ae:07:fe:56:e6:cb:c8:b1:f2:34:
23:03:1c:90:dc:6b:e9:42:89:f2:d0:8a:33:5f:66:
df:c7:97:e5:aa:cd:b6:db:01:bf:80:b4:6c:2f:89:
d5:7a:6f:d1:42:33:45:fc:80:81:c6:7c:48:2a:ba:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:16:BD:B0:FB:B8:CF:D5:22:86:69:AE:F8:9D:EA:5E:90:8D:43:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0E31F08622511F0A305D29BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.2.0/23
Signature Algorithm: sha256WithRSAEncryption
af:a6:79:fa:31:84:6b:81:aa:0e:40:cf:a4:0d:de:50:67:ee:
3b:a7:3b:35:df:3a:56:87:52:f7:87:2a:db:2a:57:1d:8b:c5:
bd:71:fc:da:db:dc:15:2e:54:06:0f:79:ba:1d:ee:f0:71:5f:
e8:29:bd:47:24:ea:7d:d7:20:f4:0c:a1:9a:1f:f2:ce:64:cd:
c0:50:55:cb:d0:32:70:de:99:7e:76:7d:39:21:73:56:0b:96:
fc:21:19:4d:c3:33:e3:4b:ab:5a:71:58:4a:ae:80:b4:65:24:
12:ee:4a:f0:fc:7f:57:9b:ea:55:eb:56:f1:65:43:84:0c:36:
ad:64:6e:d4:78:db:95:3a:03:9a:f8:4d:ed:3c:b7:8e:20:48:
b7:f4:d9:6e:7d:d7:fa:ca:09:6c:7d:7a:5e:61:e7:c9:66:da:
67:54:71:7a:27:0b:e9:9f:2b:95:2a:7a:5f:3f:ed:a3:86:29:
9d:04:5e:12:69:f1:9a:ae:1d:68:6e:a6:5b:72:ec:a4:00:28:
e0:f8:88:eb:17:e6:4a:ef:7d:60:41:f3:27:c2:1f:0c:a0:35:
30:c5:3b:2e:68:36:b9:25:3d:ca:8e:58:92:2b:3c:be:75:50:
0e:d4:35:a6:54:ed:c8:7b:dc:1d:e1:b6:be:4e:e4:a0:95:56:
02:de:78:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:43 2025 by rpki-client