Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04F0A3048A4B11F095B664E2DAE4EC9C.roa
File: 04F0A3048A4B11F095B664E2DAE4EC9C.roa (raw, json)
Hash identifier: xyOaTQPL0AdgOfhlOT8rsLQHqktiYEtfiewdhoJpC1Y=
Subject key identifier: 21:5B:D6:2E:46:FE:AD:97:75:88:BC:1C:3D:DF:82:ED:B1:B1:3D:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04F0A3048A4B11F095B664E2DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 11:25:26 +0000
ROA not before: Fri 05 Sep 2025 11:25:21 +0000
ROA not after: Fri 05 Dec 2025 11:25:21 +0000
asID: 139490
IP address blocks: 154.209.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106012 (0x19e1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 11:25:21 2025 GMT
Not After : Dec 5 11:25:21 2025 GMT
Subject: CN=68bac8a6-5322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:4e:e6:fb:ed:d2:b2:1f:b1:69:fc:45:7c:
f4:7c:b5:c1:8e:dc:f5:4c:66:ee:74:d1:f5:a2:12:
d5:9e:75:13:b9:69:eb:53:c3:ea:73:80:eb:a3:42:
40:90:62:d1:ea:fe:18:92:3e:8c:95:0e:e3:9a:4d:
4b:b1:c8:02:49:0e:24:d2:ba:81:f6:b5:bc:c3:cb:
ba:eb:b7:49:95:58:dc:66:55:8d:38:9b:3b:a4:0b:
b0:6c:ae:80:5c:b5:b5:8f:a4:47:78:78:c2:5a:dc:
b8:46:12:c1:53:9d:97:17:d5:33:1b:88:ec:9c:65:
e1:17:52:3c:ac:8a:c2:5a:8a:aa:94:8f:27:5b:dc:
e3:a7:d0:51:63:e2:31:23:99:20:cd:e1:05:1f:58:
1c:dd:87:d6:68:9c:f3:92:47:3e:ee:e9:05:e8:e0:
fa:78:e6:f7:64:98:a4:f7:8e:0a:27:d8:7c:9f:d3:
15:d4:98:c8:39:ef:d8:03:c8:72:b5:db:47:0b:be:
28:16:07:80:9a:f1:a3:f8:27:9e:8e:a9:34:2b:29:
c9:a2:c9:60:5e:14:0c:fd:d4:b2:52:20:dd:9f:3c:
f6:de:02:91:77:9b:6d:1f:9b:3e:8d:7c:25:50:28:
42:4f:cd:4f:4e:ee:9c:62:b4:c1:8a:4a:c2:0e:6c:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5B:D6:2E:46:FE:AD:97:75:88:BC:1C:3D:DF:82:ED:B1:B1:3D:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04F0A3048A4B11F095B664E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:a3:75:2b:3d:ed:d3:0c:2b:12:ca:36:c4:70:38:c9:ef:77:
eb:47:94:e1:35:7a:e5:0d:23:51:cd:0d:18:82:bd:c8:c0:33:
70:cf:10:c1:6c:df:0d:3b:7d:f1:80:5d:f6:cc:c1:ad:b7:5f:
11:12:1d:bd:5a:c2:28:02:f1:9a:b0:92:98:18:18:3c:a3:55:
fa:0e:21:95:5a:1b:54:ac:86:39:89:b5:1f:96:7c:ea:d1:d4:
e2:66:8d:ae:d2:b5:8d:d2:9a:8f:9b:2f:1c:85:80:e9:bc:cf:
d9:8c:6a:37:8a:03:49:ee:9e:c7:98:19:92:f3:de:e9:8b:ba:
6a:b5:7c:bb:61:40:9e:e4:59:f2:55:05:4f:92:b2:8f:63:60:
24:6a:89:6e:0f:20:14:17:1d:91:a0:71:db:41:d6:f4:78:2f:
22:88:74:2b:22:95:96:56:e6:26:c6:24:8a:13:24:3a:0d:f2:
52:9a:5f:c0:10:54:5d:37:be:e1:14:ab:f4:34:0f:ad:5a:26:
90:8b:24:ad:6c:f6:6f:8e:d6:9b:c3:e8:c9:d4:3c:4e:33:d6:
f6:78:af:f2:aa:0f:2e:e1:56:2b:01:5e:34:14:6a:82:71:ea:
b6:17:c9:e7:96:b2:30:27:9f:22:b9:fb:eb:1c:f4:73:34:9e:
95:57:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:05:52 2025 by rpki-client