Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9CC4180801911F0896D2C7BDAE4EC9C.roa
File: A9CC4180801911F0896D2C7BDAE4EC9C.roa (raw, json)
Hash identifier: 2l7VmD62bg2tlYwYsGc2/q3kAimZYxIw1bku51hzDcY=
Subject key identifier: 23:95:B3:85:EA:20:E5:0C:58:3E:7A:4C:DB:61:EB:11:3C:86:EF:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0195B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9CC4180801911F0896D2C7BDAE4EC9C.roa
Signing time: Sat 23 Aug 2025 12:06:56 +0000
ROA not before: Sat 23 Aug 2025 12:06:51 +0000
ROA not after: Sat 27 Sep 2025 12:06:51 +0000
asID: 134489
IP address blocks: 154.82.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103857 (0x195b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 12:06:51 2025 GMT
Not After : Sep 27 12:06:51 2025 GMT
Subject: CN=68a9aee0-c908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:87:80:c3:84:8c:a7:83:69:8d:f6:4a:d1:
8d:ae:a5:f6:14:e1:29:52:a5:0e:a7:f1:ce:ca:51:
a3:a6:c1:4a:21:3d:fc:10:2b:8f:01:7e:90:d2:46:
03:10:eb:04:aa:b3:a4:f6:93:ef:59:b3:29:8e:3b:
2d:bc:a3:cc:21:de:f0:ba:51:77:1f:2e:9a:6f:04:
52:70:7c:4c:c4:ba:5b:bc:7a:a8:95:d0:05:4e:a8:
72:43:a7:be:12:c7:93:59:20:97:03:dd:f6:fc:f0:
fd:5d:56:29:67:81:1c:9c:a5:94:ac:70:08:b0:60:
55:b9:cd:e8:60:96:d9:46:37:c3:74:4c:73:06:36:
62:b1:00:1c:af:ce:47:9b:ac:17:2d:85:40:91:4d:
6e:1a:ef:df:5b:07:bb:56:b5:3c:74:7f:63:6d:e5:
85:d6:10:e5:9f:45:fb:19:75:29:bd:df:dc:a8:ac:
d0:13:85:ca:58:4d:9a:29:5e:88:c1:8e:16:ea:5b:
3d:2c:e7:c9:d7:ef:4a:af:53:bb:19:9c:a9:8e:80:
a4:50:0b:51:6b:66:1c:cf:25:2e:73:61:6d:7f:56:
5b:8d:3e:79:c0:e6:61:f8:b1:a8:4d:a1:33:6a:99:
c2:65:bc:11:49:20:fe:8d:00:67:4d:46:80:58:48:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:95:B3:85:EA:20:E5:0C:58:3E:7A:4C:DB:61:EB:11:3C:86:EF:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9CC4180801911F0896D2C7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.17.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:82:a1:6c:34:e8:3a:e5:fb:5e:4e:52:ee:dc:ab:c1:a2:8a:
5c:71:c0:b6:8f:44:3a:5e:c1:87:82:c8:04:ee:ac:fb:9d:a5:
ce:f5:fa:18:95:e8:29:f1:b9:95:92:9a:c3:3f:93:b4:50:38:
a1:54:68:9c:12:dc:f7:63:d8:b7:3e:67:6f:68:90:85:81:fc:
d4:38:5d:7a:2e:39:b6:d0:46:8e:95:47:5c:27:0d:29:a1:21:
8c:33:10:99:be:f3:88:30:b9:74:00:4d:b8:80:26:81:4e:d7:
45:2f:3f:3c:ed:78:44:c1:67:77:11:0b:00:e6:6e:9b:96:45:
7c:3d:79:6a:23:82:bc:eb:c2:a7:93:33:7b:92:7c:4e:95:bd:
31:b2:ba:92:ab:37:49:65:d0:6f:21:47:20:92:7f:3f:f0:41:
41:ca:33:0e:7a:d2:0c:ca:ff:76:f3:c6:49:de:42:8e:0a:5f:
a7:54:f0:f9:0d:49:6e:c4:87:45:44:63:fa:06:41:48:15:60:
35:33:a1:6a:76:41:b1:cc:a2:88:1e:6b:3b:9b:9a:e1:4f:fb:
1b:b9:ef:3c:a4:e7:ab:5a:3e:19:c9:20:31:d2:8d:d5:ac:1e:
9a:46:ec:96:9d:f0:9d:fe:1c:fd:c1:6e:55:0e:5d:e9:f8:a0:
8a:43:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:37 2025 by rpki-client