Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF66F052803811F0A69AA8C2DAE4EC9C.roa
File: BF66F052803811F0A69AA8C2DAE4EC9C.roa (raw, json)
Hash identifier: zbmV1lzJzgYY3JDnJ/O8nf534ApW7NTUJNOYC/ajA1A=
Subject key identifier: 95:34:B4:3D:8C:03:EB:48:36:62:65:E8:80:9C:A6:4D:CD:5A:2C:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01960F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF66F052803811F0A69AA8C2DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 15:49:27 +0000
ROA not before: Sat 23 Aug 2025 15:49:22 +0000
ROA not after: Wed 10 Sep 2025 15:49:22 +0000
asID: 203020
IP address blocks: 154.217.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103951 (0x1960f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 15:49:22 2025 GMT
Not After : Sep 10 15:49:22 2025 GMT
Subject: CN=68a9e307-8275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:f5:eb:1e:eb:83:3b:04:94:86:00:9e:3e:
d4:b9:8c:63:55:62:d4:29:a6:5a:0a:ff:ea:e2:82:
73:13:8d:99:9b:97:54:7a:5a:67:84:da:bd:3e:27:
1a:62:26:ac:a7:46:04:39:55:95:53:c7:2a:66:a6:
2b:09:e7:c5:91:82:06:74:f8:76:ab:30:7a:29:71:
50:06:14:7e:25:61:e4:5f:2c:ea:0c:ba:bc:4c:a3:
71:eb:12:b0:d8:1b:e7:b2:ec:e1:68:25:d2:be:9c:
9d:ed:75:19:69:4b:31:6e:2d:01:d5:76:6a:ec:85:
fe:a1:95:9f:f7:86:e8:70:05:f8:56:64:2e:a0:f8:
47:45:35:69:39:8c:39:f3:4f:7e:86:07:7d:94:3c:
76:36:41:3b:a0:e3:ee:e4:06:6c:a5:67:b5:49:01:
40:93:e6:06:73:e6:03:bf:27:47:22:43:da:9e:dc:
e0:4b:5d:37:0d:21:5d:e6:41:be:02:67:aa:0f:2f:
82:9a:f5:c1:45:47:b5:64:44:f4:17:6b:2a:ef:e4:
60:7d:8b:02:c3:90:03:5d:16:7f:3d:86:18:8e:5b:
cf:c7:f1:85:8b:48:58:81:5a:42:fd:7e:97:58:7e:
fe:b9:7f:e5:2e:97:c2:11:f4:08:70:cb:bc:95:2d:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:34:B4:3D:8C:03:EB:48:36:62:65:E8:80:9C:A6:4D:CD:5A:2C:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF66F052803811F0A69AA8C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.0.0/17
Signature Algorithm: sha256WithRSAEncryption
38:1b:60:8c:b5:ee:e5:bc:1f:33:39:d7:d7:f3:ec:06:71:35:
92:fb:d1:26:1a:47:c8:81:c3:77:44:b5:d3:17:8b:51:4a:32:
51:fc:6b:dd:b2:ec:dd:cc:c5:32:93:92:d8:90:6d:7e:52:66:
77:6a:ba:90:1b:6f:1b:d9:eb:b1:8d:c4:b7:72:2f:17:7c:7d:
13:af:75:41:58:49:ca:39:e3:a6:8c:4a:27:d9:c0:16:ad:14:
3b:cd:9c:55:c1:09:d9:0e:18:89:b4:96:06:54:4b:5e:3a:8b:
e9:3d:ce:46:f0:89:b9:95:bd:03:b0:4f:96:82:87:b0:09:d1:
a3:dc:1b:e6:6c:dc:7c:24:5f:88:b5:cf:d2:01:0e:a1:31:aa:
35:07:62:84:fe:bd:3c:65:ef:6e:a4:8b:28:64:e1:93:2a:c7:
c6:4f:14:81:df:e9:2a:3b:32:08:a4:89:71:38:99:ce:3f:de:
ba:65:84:64:67:c3:58:dd:9d:bb:70:83:ee:2e:4d:c2:ab:96:
cf:c2:5e:bd:94:ab:5b:ce:34:be:bd:de:97:b3:a6:b3:1c:97:
22:7e:f4:b7:37:43:af:20:23:76:a4:f9:b6:be:54:29:ae:35:
4e:11:8e:5c:a0:79:e7:39:55:c6:21:0c:88:ca:18:c2:19:b1:
6d:7c:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:00 2025 by rpki-client