Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F969207C5A8111F0B4601B7FDAE4EC9C.roa
File: F969207C5A8111F0B4601B7FDAE4EC9C.roa (raw, json)
Hash identifier: pGwKzaucyy6flsZQZMMjryuU2FIjDzlZFZw0iQCaa8E=
Subject key identifier: F8:F1:4D:76:55:2C:1B:B0:56:80:2A:33:77:D4:53:AB:4C:71:B4:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F969207C5A8111F0B4601B7FDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 15:57:53 +0000
ROA not before: Sun 06 Jul 2025 15:57:48 +0000
ROA not after: Mon 11 Aug 2025 15:57:48 +0000
asID: 401615
IP address blocks: 154.82.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101266 (0x18b92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 15:57:48 2025 GMT
Not After : Aug 11 15:57:48 2025 GMT
Subject: CN=686a9d01-020a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:fa:fe:12:09:a8:eb:75:6c:3a:00:ce:7d:
1d:9a:0b:3d:2d:5b:2b:84:07:23:cd:6c:b7:1a:67:
c9:df:5c:51:9e:f3:93:58:75:b1:3c:82:bc:b2:00:
00:8c:b8:16:ff:9d:47:2e:2b:79:5a:5b:b8:b2:7a:
c3:40:fc:01:b1:7f:a9:8e:dd:9e:00:ab:46:34:ad:
dd:8e:03:cc:45:74:3f:4b:8d:6c:74:2b:b5:e9:71:
01:fc:6b:97:5f:62:ee:a1:91:ae:4e:84:86:de:31:
c3:d7:63:3c:4e:ca:7c:38:45:fa:61:0c:01:8a:a7:
4d:d8:2f:d4:b3:42:26:cf:c2:41:dc:9c:dc:ee:23:
c5:d1:fb:a7:ee:8a:87:38:22:60:5f:b2:2f:ca:69:
3e:d5:66:8e:5d:96:d2:bc:aa:1d:7c:44:5c:a2:bc:
f8:d9:f3:f6:2a:48:6e:e7:1f:8f:83:3a:ce:43:8a:
5a:d5:19:bb:42:a3:aa:f5:78:9f:47:75:af:6b:0b:
57:d8:c2:d2:26:7e:ad:1f:3f:76:44:1c:42:f2:03:
c7:1b:7a:b7:3a:0c:09:1b:2e:de:50:6f:b6:2b:95:
01:3c:47:84:d2:6c:c7:05:6f:f5:6a:26:b6:1b:b8:
f7:82:18:31:21:85:6e:0d:e9:bb:01:e2:90:80:75:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F1:4D:76:55:2C:1B:B0:56:80:2A:33:77:D4:53:AB:4C:71:B4:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F969207C5A8111F0B4601B7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/23
Signature Algorithm: sha256WithRSAEncryption
07:22:69:7e:44:53:9a:dc:9c:62:5e:a6:f8:9d:83:70:6e:e4:
24:11:c5:47:7b:51:97:0a:86:4e:d8:b4:46:03:1a:67:73:9b:
22:0b:d9:1b:9a:30:41:e5:94:9b:fd:38:b6:d2:5c:7b:ff:8d:
47:46:75:e8:cf:54:c0:19:8d:45:1e:14:4e:f9:f0:be:58:07:
2f:c4:e8:0f:72:d4:27:c8:29:5f:f7:6d:8a:2d:c3:e5:85:78:
1b:f3:51:04:29:78:2b:61:57:28:a7:62:3c:d4:e8:f4:cf:b3:
26:04:03:70:fa:57:ce:74:63:93:d7:aa:82:3b:78:b8:a4:ff:
80:61:94:c3:ae:a4:3c:64:f7:36:a6:7b:ad:67:37:c2:db:ee:
a8:f6:7a:8b:05:35:74:7b:aa:84:39:73:38:d3:c1:57:f5:f1:
a7:68:bd:63:bc:f7:86:37:68:00:ef:45:14:19:16:5d:6c:51:
d3:fd:36:0f:9f:c2:32:f7:a8:4f:69:12:20:37:e5:c0:95:3b:
99:5a:2c:f4:5b:ab:a3:8b:25:d8:9a:71:bf:dd:0f:d2:e7:a3:
e2:84:7c:e2:54:5c:f6:47:f4:7a:f7:11:36:f6:01:7e:bd:0f:
c1:25:d6:15:24:0b:a3:6a:45:55:02:ea:93:24:e2:33:13:70:
b8:20:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:01 2025 by rpki-client