Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FD8552084AE11F0A01760D5DAE4EC9C.roa
File: 0FD8552084AE11F0A01760D5DAE4EC9C.roa (raw, json)
Hash identifier: sIkcBamMxhN/tzKdw9F2YSsKnwcPY9ydbfexW+dE8Q0=
Subject key identifier: 11:2B:58:5C:87:38:31:C3:AB:94:A1:B3:7D:08:FC:40:05:97:49:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FD8552084AE11F0A01760D5DAE4EC9C.roa
Signing time: Fri 29 Aug 2025 07:59:18 +0000
ROA not before: Fri 29 Aug 2025 07:59:13 +0000
ROA not after: Sun 05 Oct 2025 07:59:13 +0000
asID: 151407
IP address blocks: 154.88.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105026 (0x19a42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 29 07:59:13 2025 GMT
Not After : Oct 5 07:59:13 2025 GMT
Subject: CN=68b15dd6-101e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:6f:af:c2:ac:13:36:97:0a:ef:7e:a1:24:
36:41:91:b5:ec:8e:d5:9b:ec:f1:8c:d6:de:43:47:
28:cb:f9:53:9a:bc:49:49:2d:e3:a6:62:55:8c:10:
ec:50:85:bf:89:5a:21:22:7f:22:13:04:da:03:84:
8f:c8:20:67:f2:03:2e:cc:b3:6e:2f:5a:d5:67:76:
27:3d:cf:a8:85:fe:09:eb:2f:b8:56:8f:6d:66:92:
a2:3e:fb:06:9b:63:c5:52:c6:a4:56:3e:15:3f:7c:
0f:a4:7a:57:55:bc:ac:84:73:11:ca:14:7d:d1:d0:
fd:c7:ee:5d:16:66:d7:99:99:98:da:ac:b3:10:9c:
bf:b4:ad:d4:89:ab:53:2b:6a:7f:62:9a:55:7b:a1:
7b:0e:9d:ea:c3:98:70:58:76:2b:3f:29:1b:1a:09:
6e:50:60:8a:2c:21:d5:30:f6:92:8c:45:45:c2:7a:
94:03:a5:ea:b0:15:5a:af:72:eb:00:e2:cd:16:f3:
16:9f:02:34:72:3f:1e:bb:c8:12:dd:28:4f:4d:9f:
02:27:b8:bd:c7:31:1e:f0:69:fa:04:d2:67:2e:5b:
1b:ac:f5:ac:f5:db:c4:a9:75:1d:09:fd:6f:b6:17:
b5:ad:e0:b1:97:a8:be:eb:8d:ab:56:da:01:68:20:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:58:5C:87:38:31:C3:AB:94:A1:B3:7D:08:FC:40:05:97:49:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FD8552084AE11F0A01760D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.64.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:11:2b:76:e7:b6:da:ab:4b:8c:4e:00:22:9c:eb:65:c0:04:
dd:ef:e6:08:bf:23:2e:59:fe:80:52:e4:55:cf:73:a9:49:ad:
54:19:15:2e:3f:5f:59:e6:db:f9:5e:11:83:61:05:3a:2a:46:
70:ac:9b:23:b8:3f:e8:f3:41:8d:8f:36:fb:b0:a5:34:f8:1f:
ae:f1:a0:64:e8:c1:67:0f:95:e1:f3:49:8c:c0:12:90:84:a6:
a4:bc:f9:20:4d:05:17:be:19:17:38:da:d6:9a:29:40:fd:05:
48:da:f1:8e:7c:e3:04:79:64:e9:1c:5a:d4:e6:8f:6e:bf:b8:
5f:bc:cb:29:36:94:f8:b2:79:02:b1:66:96:0d:64:93:7a:c0:
24:f1:2c:68:25:f7:ec:be:b0:4f:bf:79:63:3f:99:98:c7:1a:
ab:a4:3e:74:2e:a3:05:70:4c:eb:64:a4:97:6a:48:32:57:7f:
69:1d:c2:ce:00:f4:a8:04:a6:36:80:53:44:53:82:3f:a7:4b:
02:f9:eb:43:7f:96:ab:73:92:87:b5:51:62:ed:dd:50:88:1d:
b4:55:7b:ec:56:60:63:1e:2d:ed:cd:35:51:95:3f:4e:f3:fe:
07:ad:2f:af:87:f6:55:bb:b8:88:10:8f:23:92:22:77:96:f4:
e0:50:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:41:45 2025 by rpki-client