Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A351E40837511F091A4ACCADAE4EC9C.roa
File: 4A351E40837511F091A4ACCADAE4EC9C.roa (raw, json)
Hash identifier: vuBKqwSIJ9/I/PKgVhL5Lp1QtQ6WwnocTsZU0cLFDGk=
Subject key identifier: AA:D8:C1:00:90:93:35:F8:D1:6C:A5:3B:E0:D8:1B:00:06:5B:54:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A351E40837511F091A4ACCADAE4EC9C.roa
Signing time: Wed 27 Aug 2025 18:40:23 +0000
ROA not before: Wed 27 Aug 2025 18:40:18 +0000
ROA not after: Sun 26 Oct 2025 18:40:18 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104689 (0x198f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 18:40:18 2025 GMT
Not After : Oct 26 18:40:18 2025 GMT
Subject: CN=68af5117-5f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:50:65:34:8d:44:43:cc:fa:b0:38:09:87:
d2:78:87:71:86:5e:99:34:cb:50:8e:37:23:89:70:
2c:50:8f:91:71:fc:cc:a5:c3:88:cd:df:cb:8e:43:
28:4d:d3:52:69:fe:86:ac:fe:48:a7:6b:12:96:b9:
d9:51:8c:0c:3e:78:ad:8b:38:1a:19:af:d3:03:4c:
4b:52:e8:9a:5d:a5:9b:55:9c:43:8e:ef:c2:84:75:
31:11:0f:70:cd:a4:e9:aa:f9:86:66:65:3b:3a:53:
61:e7:76:9c:72:04:c0:81:a7:78:d6:a3:c0:57:6d:
9b:57:44:9c:ae:ea:ef:4c:da:f1:2f:63:7b:fc:f9:
c9:6e:55:96:3d:ab:ab:98:72:40:f3:9a:9c:b3:b2:
4a:f5:63:5a:1f:50:3d:06:99:de:24:69:cb:35:c1:
67:34:49:a7:88:e4:61:55:21:f8:8f:1a:3a:11:b2:
fe:58:79:f3:0f:ce:79:dd:70:3f:85:19:d6:4a:c3:
e4:54:5b:10:83:cb:59:7c:85:16:d3:64:43:69:f7:
b6:45:5a:f2:86:77:c1:ca:31:7e:3b:65:28:22:cb:
65:31:a0:5e:a2:4f:63:48:0c:8b:26:e3:22:c2:fa:
07:0a:f3:48:81:1f:03:b5:91:2a:98:b5:d4:61:0e:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D8:C1:00:90:93:35:F8:D1:6C:A5:3B:E0:D8:1B:00:06:5B:54:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A351E40837511F091A4ACCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ba:e1:f0:68:1f:35:07:f4:fc:c0:fb:39:da:54:34:6c:38:
16:7b:c9:cb:7f:73:53:14:39:a1:fb:9d:59:21:6f:ad:5a:d3:
f2:35:bc:ea:6b:04:2a:a4:16:d3:f4:73:03:cf:24:20:2f:e7:
7b:ce:c7:d5:81:40:88:6d:53:23:5e:ac:a5:ed:1b:3b:d6:ce:
45:43:11:85:21:28:bb:f3:5e:f2:c6:46:1b:49:f7:6f:db:44:
c9:f9:74:f3:43:9f:40:bc:d3:62:8b:c5:96:cb:67:55:1a:60:
02:d5:27:ea:7a:cf:45:ea:92:55:ff:92:d0:42:e7:73:20:ac:
99:01:17:8b:2e:08:34:7f:a2:b7:a7:61:7f:c0:e8:f2:9c:7d:
a1:7d:9e:31:40:23:77:e6:5e:94:0d:88:4c:59:d1:73:fa:c3:
0f:ea:f1:4a:be:de:0a:9d:25:1f:17:85:73:ef:a2:29:61:5c:
0a:38:2d:74:96:4d:a4:99:a5:8d:df:ea:d8:0a:0c:80:03:67:
97:c0:13:3e:a4:f2:7f:44:07:82:18:f0:37:e0:ac:09:07:a4:
f2:99:42:2d:02:a5:47:0c:0a:4c:56:a4:dd:ae:22:c7:37:62:
ef:0e:40:97:a9:da:8f:f3:d8:94:5e:c6:8f:d9:6e:43:c9:70:
6c:93:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:31 2025 by rpki-client