Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F3D2DFA752611F09D7903EADAE4EC9C.roa
File: 8F3D2DFA752611F09D7903EADAE4EC9C.roa (raw, json)
Hash identifier: va/aySvZWUPJ/V3AZh5u0eJF8dplFdvtiVLWgOqz+UU=
Subject key identifier: 0C:86:D4:D4:E0:80:BF:76:74:B6:3F:02:EE:10:DE:C8:28:F9:55:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019117
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F3D2DFA752611F09D7903EADAE4EC9C.roa
Signing time: Sat 09 Aug 2025 13:41:32 +0000
ROA not before: Sat 09 Aug 2025 13:41:28 +0000
ROA not after: Tue 16 Sep 2025 13:41:28 +0000
asID: 2914
IP address blocks: 154.83.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Aug 2025 02:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102679 (0x19117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 13:41:28 2025 GMT
Not After : Sep 16 13:41:28 2025 GMT
Subject: CN=6897500c-bd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:10:79:f8:dd:f8:76:ba:14:ac:5d:60:8c:34:
8c:05:c3:a3:63:4a:74:8e:66:4f:b0:1d:05:ce:91:
aa:c6:cd:a0:84:52:fc:4f:89:d2:93:07:71:be:00:
74:a7:e7:cc:13:b6:e1:21:73:98:e3:24:c1:54:7e:
d5:57:eb:ba:ea:fb:6c:da:8c:88:40:4f:9c:c6:bd:
ef:88:0a:6f:2e:8a:ba:73:5f:d8:3d:a0:43:5b:49:
07:52:e6:a2:19:6f:7e:2a:fd:bd:23:0d:00:40:6c:
95:2b:84:0c:a4:72:8f:b7:0c:8c:f1:5e:27:b0:38:
f5:fc:8d:b7:8d:a0:47:65:4e:73:de:de:e3:3f:a5:
1a:2a:2b:9e:7c:95:0e:39:15:ce:f9:73:5c:81:00:
38:50:38:02:45:ea:1e:12:e8:49:79:1a:79:ab:5c:
38:e4:fa:cf:f4:13:2d:4f:8e:19:15:85:74:a1:16:
3e:c3:37:60:74:fc:b6:c3:c8:e0:19:9c:b7:88:0e:
a0:b7:df:74:28:25:ec:31:8f:45:bd:8c:c7:45:d2:
33:90:f0:43:4e:c5:74:cd:14:10:bf:cf:fd:b5:a2:
1c:3e:61:95:96:26:5d:56:20:28:6e:a2:de:5a:e3:
aa:ea:c3:83:a1:fc:59:98:99:39:81:52:5b:5a:60:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:86:D4:D4:E0:80:BF:76:74:B6:3F:02:EE:10:DE:C8:28:F9:55:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F3D2DFA752611F09D7903EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.11.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:67:90:0a:cb:21:c9:24:8e:82:85:29:d0:f1:83:0b:23:dc:
d0:aa:31:95:2c:9a:7b:d0:0e:07:05:3f:fe:d8:92:8d:5c:7c:
ae:4b:94:5d:2a:b7:fc:e9:b4:2e:38:42:03:19:c5:9a:8b:dc:
91:3f:9c:87:79:46:9e:f3:3e:bb:94:46:8c:ca:0f:f8:6c:55:
fa:58:99:a4:95:c7:05:11:b7:bb:18:18:b4:30:00:8c:68:bc:
4d:10:b2:5a:ba:43:ec:c5:73:17:f3:da:93:db:99:56:2b:5e:
bc:89:b5:e5:a3:92:a7:19:1a:47:46:d8:61:ec:8a:1c:e7:6b:
d2:94:0e:d7:4a:d5:23:c6:b5:95:11:2a:04:b8:82:d9:07:90:
0e:93:f1:b0:ed:ba:ef:1e:6a:2e:5a:e9:d9:94:0d:6f:e6:b4:
55:11:2b:09:b8:4b:37:de:e2:b2:fb:b1:4a:b0:1f:30:a8:74:
0e:be:29:62:1f:6e:33:7f:9a:69:30:8e:d9:9b:80:78:ed:bd:
ee:53:09:23:12:99:ab:02:85:4d:28:fc:de:ef:29:b7:0e:92:
74:dc:5d:5f:22:e6:5e:f3:66:ec:66:4c:30:fc:ce:22:93:6e:
80:24:da:83:22:87:57:22:4b:79:d7:e7:91:2a:73:23:6d:4b:
e7:b8:2e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:26 2025 by rpki-client