Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BFE2A54826611F0ABD065E3DAE4EC9C.roa
File: 6BFE2A54826611F0ABD065E3DAE4EC9C.roa (raw, json)
Hash identifier: 6jTQ9UVXGw4w1mjtTpSt0b3RfK1QlQi9v69Ds2ixgsw=
Subject key identifier: 5F:75:1C:4F:59:E8:AD:FF:71:9E:56:6E:CF:8B:37:AA:D4:48:FC:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0197BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BFE2A54826611F0ABD065E3DAE4EC9C.roa
Signing time: Tue 26 Aug 2025 10:21:26 +0000
ROA not before: Tue 26 Aug 2025 10:21:21 +0000
ROA not after: Tue 30 Sep 2025 10:21:21 +0000
asID: 20326
IP address blocks: 154.94.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104381 (0x197bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 10:21:21 2025 GMT
Not After : Sep 30 10:21:21 2025 GMT
Subject: CN=68ad8aa6-0b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:aa:ba:b1:6b:39:82:39:b5:7e:c7:c8:f7:
81:b7:54:74:b1:59:85:f2:62:8c:7b:4d:65:63:1b:
7b:08:15:ae:86:93:0a:dc:20:c6:b9:5a:fe:51:a9:
38:da:c5:d3:4e:23:b2:a3:d6:7c:15:b9:f2:22:2b:
35:7f:f7:72:15:13:d6:5d:fd:6c:4b:53:74:46:91:
e0:cc:e1:09:b6:27:22:eb:c2:fc:a3:41:53:f0:9b:
f4:10:78:d1:68:d0:ba:0e:74:49:19:19:e6:78:61:
64:25:86:a6:81:c9:4a:f1:09:90:aa:55:cb:4b:ee:
45:13:36:40:66:7d:b1:37:18:a0:05:cd:0c:5c:e6:
d6:02:32:9a:b5:51:98:7d:22:94:38:e4:32:80:d6:
4c:1e:66:f0:4e:71:e5:39:71:41:de:6d:13:ac:fd:
14:31:08:1f:42:e4:b6:01:1e:f3:5e:21:18:2d:42:
bb:67:b8:c4:4f:ff:f4:ca:82:75:fb:bf:7a:c5:0c:
47:a9:d5:87:77:fb:00:68:02:b9:b9:0b:85:fd:83:
47:0b:76:bf:96:bf:d2:5c:c2:d2:80:3e:3c:86:78:
18:26:63:c4:c6:72:a9:00:a4:1b:85:9e:2f:d9:fd:
11:3d:e1:f4:d1:81:dc:c0:a8:36:88:cf:b4:85:7d:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:75:1C:4F:59:E8:AD:FF:71:9E:56:6E:CF:8B:37:AA:D4:48:FC:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BFE2A54826611F0ABD065E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:5d:72:7a:d3:92:69:fa:99:25:76:5a:a1:37:eb:bf:7c:a6:
9d:03:1a:f1:52:c0:f2:4d:91:33:31:ff:d6:ed:df:86:06:f2:
bf:3b:a4:36:53:b6:21:21:9d:22:f4:f2:97:0c:fa:41:e0:03:
69:bd:46:b8:15:12:25:6d:33:8c:ff:7c:4f:87:39:d1:db:d6:
57:26:ee:cf:9a:5e:61:34:08:59:f9:e8:f3:21:b8:a0:8e:61:
f1:77:d6:2b:1e:4d:1d:1f:39:28:77:b1:9f:7e:9d:9b:ca:34:
80:ec:5b:d1:0a:98:d1:eb:c3:34:5b:13:e7:2f:d2:84:b2:c5:
de:9f:e3:d9:85:6d:2c:6b:b2:44:2e:7d:51:61:8b:68:09:a9:
81:b3:fc:da:03:b5:b7:4f:14:ab:be:57:77:2d:24:a0:77:23:
68:3e:60:dd:6d:ad:f7:64:d8:b0:b4:2c:a3:2c:df:89:9b:31:
74:2c:fa:5f:ed:bf:47:a1:db:11:aa:d6:58:c2:5d:63:c8:b3:
2b:24:32:a0:ba:30:f4:57:84:49:92:b3:a1:86:6d:8e:4f:95:
6b:95:c4:ed:0f:4c:ca:aa:de:00:96:d1:ee:f2:c2:b4:10:19:
42:d0:c9:d0:65:29:1c:02:f0:1d:74:77:36:c3:5b:c1:0f:2e:
6f:f3:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:25 2025 by rpki-client