Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20ACBA8A921411F0B29D7D8BDAE4EC9C.roa
File: 20ACBA8A921411F0B29D7D8BDAE4EC9C.roa (raw, json)
Hash identifier: evzdbP3JrqrXVE0QEDaXTmEF3e4H7W97cyZscSeu8XA=
Subject key identifier: 56:66:57:01:DE:B2:10:84:E4:18:5C:4B:17:5C:45:D8:4F:6D:40:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20ACBA8A921411F0B29D7D8BDAE4EC9C.roa
Signing time: Mon 15 Sep 2025 09:12:40 +0000
ROA not before: Mon 15 Sep 2025 09:12:35 +0000
ROA not after: Sat 25 Oct 2025 09:12:35 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106422 (0x19fb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 09:12:35 2025 GMT
Not After : Oct 25 09:12:35 2025 GMT
Subject: CN=68c7d888-47e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:de:c6:cb:f1:f4:e3:4b:f4:38:f2:e6:ed:
82:15:15:a4:21:8f:97:ed:2b:05:46:72:15:93:13:
96:6d:7b:09:54:12:bf:e8:4c:6e:34:a0:b4:47:77:
99:b7:0d:8c:45:19:52:9d:8c:54:f2:89:a7:50:0c:
1e:ba:e8:0a:a0:a2:22:a7:aa:21:76:32:75:ac:08:
2e:78:55:e3:4c:b1:48:2a:f3:49:6a:78:c9:f0:30:
c8:64:ff:69:cc:4d:80:aa:d8:0b:9d:4a:f5:1e:70:
f3:98:43:aa:1e:78:eb:8f:fb:28:83:0e:a4:9e:46:
f5:75:47:81:c8:a9:ac:a6:b2:76:56:9a:aa:5e:23:
eb:76:47:54:55:99:5b:97:6a:fa:aa:c3:4c:97:b3:
9d:bd:cf:2d:a6:e2:f6:98:99:91:b6:98:0a:68:a8:
06:91:c1:05:cf:47:93:0c:87:7c:c1:56:0a:cf:ed:
09:3c:2f:78:bc:7c:c4:71:d9:cd:06:d7:2e:1b:0a:
3c:ce:c3:da:7f:d8:5f:25:ee:80:9c:78:33:b1:d0:
08:62:b7:72:7d:e1:4c:fc:7e:87:e4:d5:76:ba:8e:
ca:d3:0c:8a:44:1c:9c:36:c2:26:3d:5b:b2:38:fd:
2b:37:de:c7:b4:bc:29:9c:7b:27:89:ed:02:67:90:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:66:57:01:DE:B2:10:84:E4:18:5C:4B:17:5C:45:D8:4F:6D:40:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20ACBA8A921411F0B29D7D8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
62:90:7f:0e:d7:c6:a8:87:05:58:c9:df:0f:49:01:9f:a0:d3:
e1:27:aa:d0:1e:09:c1:d2:78:8b:ba:10:14:c9:87:78:26:0a:
89:e3:55:d5:d5:93:40:32:c7:a2:b0:7b:53:aa:3b:79:2c:a4:
93:63:e3:f8:83:26:4d:94:b5:12:3c:2e:e1:fc:6b:98:7d:0a:
29:9d:df:fa:f6:96:33:0f:6d:2a:c6:85:0e:22:3d:19:f2:c0:
59:66:68:9e:36:e0:10:c0:7d:29:06:6d:7d:23:a6:0e:77:2b:
68:76:54:f0:77:87:67:42:3e:57:fa:88:f6:86:64:f2:ee:87:
a6:23:6c:c6:5d:cb:e3:19:ca:46:87:eb:0c:98:36:9a:0b:1c:
ec:24:95:b8:77:28:d5:c2:3c:1f:47:31:bb:77:87:df:67:63:
0f:9b:8d:81:1c:7a:86:78:e3:7a:af:95:40:e8:e3:6a:63:e9:
6a:15:d4:fb:73:46:33:20:41:47:57:9c:b3:95:0b:ca:13:f0:
bc:4e:45:e1:b8:1a:b0:eb:38:71:95:da:0c:29:39:2a:e8:83:
5f:c3:32:66:9c:de:bc:74:27:a4:52:e4:ed:9f:ee:ae:5d:44:
8d:67:b8:a3:34:be:98:3c:85:f3:01:39:4b:b4:0a:1b:76:7d:
a4:41:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:12:30 2025 by rpki-client