Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F256172C58D311F087E9BE93DAE4EC9C.roa
File: F256172C58D311F087E9BE93DAE4EC9C.roa (raw, json)
Hash identifier: 0fmMgQa4QAbjCdyh6KDinZU0PCv9M5dKYMPupcVVpWA=
Subject key identifier: 11:57:A2:DB:93:D7:AE:23:5F:A7:92:44:E0:B7:02:8B:BA:13:5C:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F256172C58D311F087E9BE93DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 12:39:38 +0000
ROA not before: Fri 04 Jul 2025 12:39:33 +0000
ROA not after: Mon 11 Aug 2025 12:39:33 +0000
asID: 401615
IP address blocks: 154.82.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100952 (0x18a58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 12:39:33 2025 GMT
Not After : Aug 11 12:39:33 2025 GMT
Subject: CN=6867cb8a-43c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:ed:0d:d0:55:89:bd:db:09:c8:04:81:b6:
68:5d:37:de:8c:f1:84:d2:1f:f7:00:35:72:d1:1c:
08:8b:7a:52:fe:33:0b:27:0d:05:43:07:31:0d:c5:
f2:15:c1:9b:9e:9f:a1:90:d4:df:97:75:0b:4d:18:
35:79:a8:d7:c2:5a:b8:0d:aa:4d:97:7f:3d:6a:57:
c8:7d:72:f1:67:f4:6e:56:05:54:aa:d4:6a:3b:a0:
41:a2:b5:27:93:89:1f:e7:de:8b:75:5e:fc:fb:30:
45:d0:d1:74:c5:de:16:1c:9f:40:be:f0:7b:17:01:
6a:e3:8b:92:12:db:12:79:a4:7c:cb:29:88:f4:e1:
63:f3:45:cb:5c:57:d2:fd:00:50:87:61:a1:55:ed:
71:53:6e:61:b6:33:0a:f6:26:ae:8b:9d:19:60:14:
e3:c5:c9:ac:1f:83:80:47:a7:dc:80:83:29:9e:37:
65:fb:05:ed:8a:56:e1:66:e9:84:5e:03:a0:29:23:
5a:3b:b8:52:6b:6a:04:7f:00:d3:d9:f8:75:b1:4f:
14:d6:9c:47:e7:5f:e6:cc:cb:a7:41:e6:ec:fd:82:
82:fb:94:68:85:23:84:82:c6:cc:5b:1d:d9:0e:c3:
34:6c:c1:35:73:2b:4d:2a:99:dc:8d:54:a3:6b:04:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:57:A2:DB:93:D7:AE:23:5F:A7:92:44:E0:B7:02:8B:BA:13:5C:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F256172C58D311F087E9BE93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/23
Signature Algorithm: sha256WithRSAEncryption
15:e9:4e:17:e5:ca:c1:3b:12:80:72:bb:98:33:21:fa:0d:b7:
be:53:3e:b4:e9:a7:2e:39:d7:34:a9:61:ea:14:50:05:6f:4a:
cb:a6:b7:c4:19:ad:43:42:a4:ec:f3:91:39:7e:57:b5:7a:a1:
22:98:65:0e:2c:97:79:d0:c3:32:f3:c3:27:71:bb:79:96:27:
93:26:69:cc:3c:a8:d2:53:ea:17:22:c4:20:19:cc:76:43:3f:
d1:41:7d:14:df:9b:83:e1:a7:dd:35:2c:39:1a:46:fa:df:79:
cf:cd:45:07:18:93:0c:4a:08:94:31:26:07:08:46:c3:54:35:
10:ca:6d:85:c9:40:61:b6:48:fa:de:bb:c0:74:4f:31:c9:c9:
d6:1f:c3:1b:19:77:4e:bc:56:62:31:b7:99:4e:62:01:4e:5f:
84:b3:05:77:cb:d3:37:d9:f8:72:49:d5:e5:4c:6e:1f:f9:bb:
a9:ba:0d:18:ba:7a:f8:e2:bd:b0:36:95:5b:bc:3c:b3:ac:2c:
83:d6:d3:f4:8a:28:06:9a:55:06:72:a7:1b:4c:b1:12:6f:1e:
56:23:7a:63:ca:6e:23:8e:f5:5d:dc:7b:fd:7d:e0:43:96:94:
3a:83:34:5f:7b:ee:19:ce:04:60:50:da:23:cf:71:40:8a:f9:
5b:f6:f6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:45 2025 by rpki-client