Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC794BD45B4911F0BA4B649ADAE4EC9C.roa
File: FC794BD45B4911F0BA4B649ADAE4EC9C.roa (raw, json)
Hash identifier: XGeLhDYyepwt1V6lSa0QqjmlzAyquLhvdMcr2qlru5Y=
Subject key identifier: 2A:C5:96:A7:63:40:02:CD:46:64:74:68:C9:7B:FF:C5:D3:0C:92:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC794BD45B4911F0BA4B649ADAE4EC9C.roa
Signing time: Mon 07 Jul 2025 15:49:38 +0000
ROA not before: Mon 07 Jul 2025 15:49:33 +0000
ROA not after: Sat 16 Aug 2025 15:49:33 +0000
asID: 137899
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101416 (0x18c28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 15:49:33 2025 GMT
Not After : Aug 16 15:49:33 2025 GMT
Subject: CN=686bec92-06a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:da:5f:e0:8a:99:df:58:a0:28:f3:55:9e:
2f:29:7b:2e:88:39:e6:a3:54:ae:16:2b:c4:6f:80:
4d:fe:65:cf:90:41:18:6c:b6:57:28:ae:4a:fb:d9:
2d:a9:8b:79:34:da:5f:d5:d7:51:96:32:9d:4f:3d:
44:c0:88:d3:aa:ae:3d:2b:66:e0:43:86:c6:87:60:
8e:08:65:89:5a:53:a3:cb:c0:b8:88:7c:76:a9:76:
90:ea:91:0c:6b:dc:bc:b3:26:84:c4:da:5d:59:40:
8e:89:48:ce:90:41:ce:a5:5e:7b:c2:37:0a:8f:cf:
c5:5b:bc:58:9b:3e:2b:5a:11:9a:b8:94:ee:cf:76:
a5:4c:50:0e:b0:27:24:1c:3d:72:56:27:a3:35:47:
56:f5:64:b0:94:80:20:67:3d:e3:a6:01:ef:58:4c:
23:c7:15:c1:36:97:73:9f:d5:74:e5:3a:73:2d:15:
7a:49:a1:d0:e4:60:db:16:5e:be:84:9f:47:65:b4:
d7:4e:58:bf:30:83:58:78:42:14:f4:5b:9a:bc:f0:
80:ea:1e:7a:fa:d5:be:96:f4:99:83:88:1d:87:1a:
a6:52:9d:55:17:6e:20:53:1e:89:38:27:e5:84:6d:
7e:49:b7:4c:55:b0:c8:3e:b0:7b:0e:dd:1a:2a:ce:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C5:96:A7:63:40:02:CD:46:64:74:68:C9:7B:FF:C5:D3:0C:92:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC794BD45B4911F0BA4B649ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:c7:19:46:d1:98:e5:00:26:a5:cd:2a:12:96:3d:23:e8:a7:
24:c9:72:63:41:8b:c6:02:df:f2:26:0a:36:2b:63:05:75:d7:
cd:e6:93:b0:5b:fe:48:c0:bb:82:1b:f3:4a:5e:53:6b:a3:e9:
6c:bb:f5:47:70:03:1c:12:b1:ec:b9:27:09:82:7e:75:40:a1:
e1:59:de:17:49:14:2a:ce:d2:44:84:9f:11:6e:57:b3:e4:5c:
2d:2b:83:d1:4d:08:2b:31:36:56:7f:f0:3f:ef:f7:68:e0:56:
48:e6:5a:e1:26:3a:7f:8d:47:19:11:4a:c2:b1:90:f4:34:7d:
1d:f1:b4:ca:a4:86:5d:51:20:8e:37:a0:6f:bd:60:3a:30:09:
fc:89:8a:1a:dd:df:b8:ae:24:59:6e:83:82:a0:b6:66:51:cc:
01:1b:33:2e:53:34:96:b9:87:8a:8d:dd:e3:ab:a1:d2:a0:dc:
31:57:dc:95:5b:12:0e:ca:3c:46:5b:2d:b4:a3:1a:f7:a2:22:
61:aa:4a:c3:ff:1d:ef:1e:58:41:0e:83:a3:0f:cf:6d:78:6c:
ae:bc:e5:aa:48:ae:8f:cf:e6:e4:9a:c4:80:1d:af:c5:79:88:
c2:a5:4b:3f:78:de:71:b7:86:f9:d4:a5:c3:4b:99:d8:e2:76:
08:d5:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:46 2025 by rpki-client