Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/650722A2833611F0B05D8BB5DAE4EC9C.roa
File: 650722A2833611F0B05D8BB5DAE4EC9C.roa (raw, json)
Hash identifier: sXVKijpGSMSGHJ5/iCmTghEmrA4PwGarLDnM/Qwd07c=
Subject key identifier: 40:24:A6:F6:C7:E3:8C:D0:3F:EB:F8:CC:DF:4D:FB:02:8A:8F:AF:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019873
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/650722A2833611F0B05D8BB5DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 11:10:10 +0000
ROA not before: Wed 27 Aug 2025 11:10:05 +0000
ROA not after: Fri 03 Oct 2025 11:10:05 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104563 (0x19873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 11:10:05 2025 GMT
Not After : Oct 3 11:10:05 2025 GMT
Subject: CN=68aee792-4913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:b4:fd:ff:09:08:44:d9:2f:ec:e2:65:c2:
5b:88:f3:97:1e:46:1f:d4:92:52:0f:c0:a6:90:cc:
5b:3a:3d:88:7b:fb:3a:b0:11:06:5e:09:ef:7e:1d:
e0:cb:55:b7:4e:92:ec:c1:c6:70:ac:63:05:3f:3b:
5c:ef:b9:32:33:1b:92:e2:79:f9:c7:cb:91:8b:76:
86:45:b2:42:88:2e:0f:ee:70:6c:24:31:dd:9a:8f:
c8:eb:de:30:48:c2:43:b7:7f:27:71:f5:40:3b:fb:
73:ff:c4:8b:a2:a1:bb:d3:e7:8c:14:6e:98:5f:73:
e8:64:71:eb:a6:7e:fa:f4:40:0c:01:27:49:8b:fc:
aa:19:85:b7:67:ec:35:e4:ff:9f:f0:20:83:1d:b5:
04:88:1f:04:72:19:ca:c8:14:ca:5b:08:9c:a7:b4:
9b:5b:41:5c:35:14:f3:b5:62:2c:b3:24:03:85:7f:
7a:af:4e:ce:00:65:e8:6f:84:b1:ef:18:ff:30:bd:
eb:39:92:c4:c9:73:af:bf:64:2a:07:4c:2b:fc:cf:
ee:2d:8f:8d:02:b6:a9:8b:88:6e:c0:37:c5:c4:fa:
9f:69:f8:3d:ce:2f:fd:73:b5:a3:78:82:1e:84:a1:
4e:b7:ef:98:85:c4:0b:14:8a:0f:16:8f:3d:59:74:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:24:A6:F6:C7:E3:8C:D0:3F:EB:F8:CC:DF:4D:FB:02:8A:8F:AF:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/650722A2833611F0B05D8BB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:68:c2:df:10:c6:8a:75:9b:a3:9b:86:b9:ab:c5:a3:e7:6e:
c8:29:ae:1a:96:8c:61:1b:6d:0e:54:c4:55:a5:0b:f7:3e:53:
24:ce:2f:cc:1e:87:ce:db:e1:fe:eb:9e:6f:70:78:91:be:40:
f7:5a:76:6e:63:eb:91:63:a4:9c:28:e5:3d:b1:e0:31:8b:41:
b4:22:ef:8f:53:e5:bf:23:d6:c2:5f:bf:c8:10:37:b1:b0:a5:
29:bc:0f:81:97:bf:b5:de:4a:51:4a:73:50:28:64:37:51:d8:
66:06:ca:47:55:23:65:86:bc:ec:5b:49:ca:da:20:84:62:fd:
ed:3b:9b:38:28:3c:fb:1a:26:35:94:67:3e:c3:b0:a3:db:26:
f0:ab:50:70:81:c4:36:98:fb:0f:66:28:17:5d:09:1f:81:7d:
91:4d:e7:14:11:d1:c9:68:18:fd:fd:4f:6c:7a:81:99:61:ae:
83:1c:63:54:ef:f8:67:b3:95:5f:af:33:73:18:57:26:c0:5d:
62:75:8a:ca:18:59:2d:8a:31:21:68:45:a6:e0:95:35:25:e3:
c1:dd:55:c4:aa:88:15:a1:3b:87:fb:02:60:25:37:a3:4a:e2:
a8:fc:cb:67:12:24:a4:1a:34:a8:73:8b:fe:12:33:ec:56:a0:
dd:ce:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:42 2025 by rpki-client