Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F140C6283F511F097AAAE9DDAE4EC9C.roa
File: 8F140C6283F511F097AAAE9DDAE4EC9C.roa (raw, json)
Hash identifier: k0ubiSnqHFgaVBO7L4JjiWqvJN6rmf0wKi7NlZIm14g=
Subject key identifier: E0:34:D7:27:29:50:13:DA:49:49:F9:61:67:7D:F7:FC:FF:F8:6B:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01997C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F140C6283F511F097AAAE9DDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 09:58:34 +0000
ROA not before: Thu 28 Aug 2025 09:58:30 +0000
ROA not after: Thu 04 Sep 2025 09:58:30 +0000
asID: 9304
IP address blocks: 154.223.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Sep 2025 09:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104828 (0x1997c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 09:58:30 2025 GMT
Not After : Sep 4 09:58:30 2025 GMT
Subject: CN=68b0284a-ac36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:9e:d5:e3:57:a7:3c:d1:cd:85:f5:ef:2c:
d1:74:8c:fd:5b:94:da:3f:b5:df:8c:00:39:c7:5f:
fd:61:ce:ea:a7:aa:d1:13:cb:99:d0:bd:7c:c2:c9:
bd:af:e3:b6:a1:4b:5a:e2:bf:45:81:b9:22:c9:f7:
06:2a:29:88:83:29:32:54:cb:70:db:c4:f5:7e:40:
8e:d0:33:2b:1f:a6:03:88:cc:3d:6c:c7:a8:74:ef:
f7:43:ac:dc:4d:f6:4d:78:46:fe:7a:19:c5:a7:82:
24:a1:7b:95:02:85:d6:cb:a2:df:1b:06:54:de:0c:
96:20:ee:ec:84:cf:d4:91:6e:9b:57:8b:4b:cd:24:
68:36:57:09:92:55:36:8e:ca:a8:b2:17:43:f9:dc:
31:ee:b4:2e:58:56:a0:ec:a9:d4:95:81:0a:50:ab:
8e:ee:72:1c:a0:3f:ec:a9:72:99:cf:48:b6:7b:ae:
25:1d:0c:a6:8f:97:70:40:20:b1:0d:f4:a3:7f:ac:
eb:97:4a:df:34:81:f3:83:e2:07:b9:2a:04:ae:ab:
cf:e5:f3:b8:11:07:1d:5e:7f:e3:56:e6:b4:4e:65:
7c:77:da:e1:c2:8e:94:ec:e6:b3:c7:4e:e9:0f:bb:
27:cb:9d:9f:97:cc:77:d6:13:24:60:2f:97:4e:02:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:34:D7:27:29:50:13:DA:49:49:F9:61:67:7D:F7:FC:FF:F8:6B:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F140C6283F511F097AAAE9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.5.0/24
Signature Algorithm: sha256WithRSAEncryption
98:cc:d4:ac:28:93:32:20:13:a6:f5:6a:7c:98:42:4f:ca:48:
a3:06:38:b9:b8:af:e0:6d:d8:98:cd:60:0b:bc:90:76:51:60:
24:fd:18:be:ce:95:aa:fe:87:1e:69:42:17:d9:e5:43:56:a3:
05:ff:ee:6b:73:43:f0:fe:58:dc:7d:b0:56:b4:85:13:d6:20:
e0:0c:55:72:65:95:50:08:30:b9:9d:60:51:41:3b:7f:23:d5:
cf:e0:ea:a1:16:35:8c:c5:dc:46:20:1a:60:b9:a1:1b:f5:db:
fd:ce:61:bb:43:e1:06:07:e4:10:32:db:36:67:ee:e4:7c:3f:
99:7e:7e:4b:c2:ca:a3:21:ca:b6:32:75:eb:19:e0:8f:58:24:
ef:5c:70:b3:c2:24:fb:b8:73:1f:4d:2c:30:08:41:69:a9:a2:
fd:9b:12:59:ac:c6:3f:e7:4a:ee:7c:32:a0:2a:e9:d8:ce:c6:
9e:29:38:b4:6b:f6:e9:5f:80:a9:74:d2:fd:43:d4:1b:bf:43:
7d:8f:3b:67:2a:38:82:d0:58:84:1a:64:f1:ff:f3:14:97:f2:
5c:e5:72:b4:ce:65:4d:92:88:42:85:f4:dd:95:c4:aa:5b:0d:
4c:a3:cd:0d:02:fb:fa:42:c1:65:3b:cf:24:46:da:f5:06:2d:
27:1d:ae:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:37 2025 by rpki-client