Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80EE1C20870811F0928BC8ADDAE4EC9C.roa
File: 80EE1C20870811F0928BC8ADDAE4EC9C.roa (raw, json)
Hash identifier: zmI1qnezZtHerrJyOCuYoHx2P7vt1LzR89mKeLtBE60=
Subject key identifier: D6:4F:CC:DB:FE:20:8D:9D:C1:D2:5C:13:17:80:2D:5C:F2:88:64:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B37
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80EE1C20870811F0928BC8ADDAE4EC9C.roa
Signing time: Mon 01 Sep 2025 07:51:44 +0000
ROA not before: Mon 01 Sep 2025 07:51:37 +0000
ROA not after: Tue 07 Oct 2025 07:51:37 +0000
asID: 57043
IP address blocks: 154.193.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105271 (0x19b37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 07:51:37 2025 GMT
Not After : Oct 7 07:51:37 2025 GMT
Subject: CN=68b55090-3525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:3f:83:72:37:26:21:80:00:8a:dd:54:d4:
b0:1f:44:5d:27:0b:55:9f:5e:24:5b:10:f2:ff:70:
7a:38:05:6b:6a:db:c2:0e:db:73:d9:d1:ca:5a:1b:
cf:16:50:26:18:d7:14:92:4e:d1:b0:d3:8d:cf:f6:
e7:7f:c2:2f:44:0d:e6:bc:55:4c:ca:18:64:74:88:
e6:13:12:fa:71:33:6e:8b:e3:0b:df:98:ec:ca:90:
3b:f4:97:77:36:b2:6e:86:b9:53:76:35:e5:11:74:
3a:cd:99:ea:35:84:a1:46:1d:3e:e7:07:1a:9b:a2:
69:b6:d3:35:46:35:fd:a9:cc:8c:47:8f:1a:ca:03:
30:72:32:2f:ea:38:4f:b2:5f:f1:f3:23:8e:00:bc:
42:7e:85:65:3c:ee:20:be:b8:09:69:2f:3a:05:a4:
96:a4:97:88:ce:6e:0a:71:99:e0:13:9c:4e:10:77:
c9:53:0a:d9:9c:7d:08:41:3f:e7:6d:aa:27:1d:fb:
c6:51:61:d1:e1:a6:80:06:a4:51:4b:47:e3:84:99:
01:b6:d0:f2:bf:72:e6:36:2a:cc:4a:fd:55:62:4b:
24:df:71:e7:c5:83:13:4e:e0:e0:83:4d:b3:5a:39:
2d:2b:11:99:1c:49:91:9d:2a:0d:00:bf:6c:bb:b8:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:CC:DB:FE:20:8D:9D:C1:D2:5C:13:17:80:2D:5C:F2:88:64:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80EE1C20870811F0928BC8ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.160.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:8a:27:f3:db:e3:3c:aa:9f:88:1c:14:90:38:4b:f6:6c:ab:
d2:60:9b:03:27:e4:ff:e6:a1:27:d7:a8:e7:c5:13:c4:74:8a:
56:17:c2:15:55:76:8f:62:88:fe:1d:b6:b0:78:ae:84:a1:4c:
ea:99:74:90:23:ed:bb:1e:8f:f0:09:59:6e:bd:0a:2f:cb:61:
f5:b2:a8:36:ff:f2:4b:31:ca:a4:3b:ee:ba:d7:13:ea:65:24:
54:2a:82:7f:af:95:4c:17:31:ab:04:69:dc:f4:2a:2f:55:a3:
2a:a6:ea:1c:8b:da:9b:79:0d:59:d1:23:d2:b4:b5:4e:86:93:
35:39:a5:31:ab:70:4f:c7:19:0a:51:01:4c:ac:3a:a3:b1:fd:
80:98:ef:0a:e0:92:82:96:da:55:1d:cd:bb:9e:db:56:7e:09:
7f:21:73:39:64:84:5f:e2:77:93:35:18:d0:e5:0f:0d:08:1f:
a4:eb:ae:a3:62:ab:55:fa:b6:36:c6:8b:8d:c2:e5:14:9c:28:
c0:05:d0:f5:df:8d:63:d2:81:c2:47:4d:84:1c:79:de:7c:8f:
bd:a6:9a:2e:19:d3:d9:60:e4:15:74:3a:e0:f7:d5:3b:2f:9e:
e8:9a:35:35:5f:67:9e:56:4f:b0:da:68:14:27:39:47:b9:f9:
2e:6e:c4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:47 2025 by rpki-client