Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/576FF9748C8311F0BCDD32C8DAE4EC9C.roa
File: 576FF9748C8311F0BCDD32C8DAE4EC9C.roa (raw, json)
Hash identifier: GlBwJj/9zHesP4KLXH6db7jXiIeVTRPyM7qQaJRoPcc=
Subject key identifier: E9:79:F5:30:14:B3:5E:F8:A9:41:BA:02:A1:33:27:DE:08:9A:AE:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/576FF9748C8311F0BCDD32C8DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 07:13:39 +0000
ROA not before: Mon 08 Sep 2025 07:13:34 +0000
ROA not after: Tue 16 Sep 2025 07:13:34 +0000
asID: 272011
IP address blocks: 154.88.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 16 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106141 (0x19e9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 07:13:34 2025 GMT
Not After : Sep 16 07:13:34 2025 GMT
Subject: CN=68be8223-3057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:34:f5:d5:3d:7b:40:c3:19:36:61:23:f4:
e6:07:10:03:bf:81:ac:e4:49:18:6a:0e:b5:ac:17:
c3:7f:32:a2:cc:d9:79:19:47:a6:e5:76:60:d9:65:
32:36:c6:59:b6:95:52:ea:63:83:ae:88:ff:d4:1f:
6a:f9:d0:6a:00:97:76:c0:f5:5a:ed:36:17:5c:bf:
73:61:dd:56:4e:5f:0d:3e:c3:2a:00:1a:69:3c:28:
c3:29:c6:16:12:6b:90:41:5c:2c:b8:07:8d:b2:dd:
9e:45:cd:68:7c:4e:a4:08:ee:08:b1:3f:5a:bf:96:
cf:70:b1:06:c2:ad:6b:39:53:7c:7d:35:93:f6:62:
bd:9e:77:52:01:a7:71:61:8d:39:e7:7f:4c:ac:25:
ae:ee:ee:31:65:77:08:f3:28:28:66:86:55:3a:89:
b3:47:69:63:9b:ba:94:8a:87:47:9f:12:de:54:cb:
74:1d:fc:af:0c:ad:bb:a9:05:e5:62:2e:a3:4a:79:
01:5b:9f:80:4a:f0:23:c1:f7:1f:90:74:a1:94:de:
18:0c:76:a4:8e:78:a0:e1:42:bf:99:48:ff:90:23:
0e:aa:bb:72:53:08:77:69:e9:c6:f9:81:8a:2d:86:
23:d0:cd:13:15:92:3f:d3:e8:54:8a:45:d9:09:24:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:79:F5:30:14:B3:5E:F8:A9:41:BA:02:A1:33:27:DE:08:9A:AE:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/576FF9748C8311F0BCDD32C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:03:2b:ef:fb:65:f7:9e:39:db:90:01:68:5c:b5:29:1f:78:
72:8a:77:d9:6a:1e:0a:8d:6a:56:33:0d:67:19:61:96:77:ab:
54:f1:55:26:29:16:62:9b:6c:57:69:ec:e4:5a:95:71:cb:dc:
89:ea:09:2e:62:11:49:d1:53:c6:0d:5a:b7:cd:85:65:37:b1:
db:e1:7d:b8:01:c9:9f:c4:5a:ac:c7:9a:fc:ec:4f:79:f9:aa:
39:9c:9c:81:eb:44:f2:40:0b:f8:6a:85:f0:5e:fa:f4:39:e4:
26:f5:ec:fa:c2:a1:9e:40:0f:0d:db:c8:a3:75:9e:65:4b:db:
62:14:3b:77:9c:b2:c4:30:e2:a6:62:9e:a5:6a:dd:04:90:99:
c0:a0:ba:8d:d8:99:8e:75:72:a6:16:f5:f5:3f:a4:df:3c:cc:
c1:0a:82:4a:2a:0f:82:a9:3e:cd:23:21:c2:76:77:99:d8:15:
db:e2:f0:c4:d0:4f:f4:e5:12:59:49:6e:5b:bf:95:87:a9:6b:
f5:d7:5e:58:8d:2f:1f:89:f2:91:4d:6f:00:ec:df:0c:dd:42:
09:26:69:f5:4a:6a:90:6b:b1:f9:6c:c1:30:0d:94:0e:96:2e:
44:fe:11:fa:2f:96:d6:10:2e:f8:be:51:04:1d:70:83:82:57:
a7:34:ce:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 13:52:53 2025 by rpki-client