Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C50C933E88B411F090CB8E8BDAE4EC9C.roa
File: C50C933E88B411F090CB8E8BDAE4EC9C.roa (raw, json)
Hash identifier: vsWf4ON+Dw7dNgS72dAE96qBcrXHuYsqlNhSPKMJxw0=
Subject key identifier: 0E:44:3C:D3:02:12:CE:DF:40:F6:F9:8E:D8:B5:FB:AA:08:2C:84:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C50C933E88B411F090CB8E8BDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 10:57:23 +0000
ROA not before: Wed 03 Sep 2025 10:57:18 +0000
ROA not after: Fri 10 Oct 2025 10:57:18 +0000
asID: 203020
IP address blocks: 154.217.15.0/24 maxlen: 24
154.217.16.0/24 maxlen: 24
154.217.17.0/24 maxlen: 24
154.217.18.0/24 maxlen: 24
154.217.19.0/24 maxlen: 24
154.217.20.0/24 maxlen: 24
154.217.21.0/24 maxlen: 24
154.217.22.0/24 maxlen: 24
154.217.23.0/24 maxlen: 24
154.217.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105708 (0x19cec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 10:57:18 2025 GMT
Not After : Oct 10 10:57:18 2025 GMT
Subject: CN=68b81f13-03e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:04:48:69:11:cf:bf:7b:e7:d8:94:6d:ca:
69:11:93:76:b4:4f:01:63:9c:ec:3c:f9:31:e6:3d:
2a:71:7a:9c:2e:5c:d4:e9:2b:18:ad:f8:38:11:12:
ae:0b:ed:11:6c:c1:b5:d8:87:b1:ee:16:7f:ac:b3:
ac:8a:6f:41:66:49:a6:e4:95:2d:5c:f4:61:b1:e2:
81:c4:56:31:ea:2c:b9:e8:b9:91:41:49:10:9c:18:
dc:5f:a4:2a:3f:2e:f2:e7:49:95:db:e0:49:bc:33:
50:4c:1e:4e:26:95:21:ef:fc:83:9a:da:e5:67:c2:
25:c9:8e:ac:47:db:db:58:5d:55:f8:53:c0:16:7c:
ff:cc:0c:d5:bd:6e:12:8a:48:c6:52:7b:47:08:df:
64:89:23:71:d7:66:aa:0e:53:e2:1f:45:c2:d6:23:
b4:6b:2e:86:6b:ae:c9:6d:65:06:5a:d0:a8:a0:e3:
97:93:83:ef:eb:62:6b:ff:3a:26:1d:3a:5b:be:83:
4f:fd:0e:b0:07:46:e1:f1:bc:da:ab:15:16:99:ec:
b0:a0:69:9e:a6:91:ff:2d:61:62:97:1b:d5:d3:ba:
ef:57:25:58:8d:b6:23:4b:9c:84:b3:a9:b2:75:97:
9a:77:84:df:5c:38:61:2d:b2:2b:64:03:e9:24:3d:
5b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:3C:D3:02:12:CE:DF:40:F6:F9:8E:D8:B5:FB:AA:08:2C:84:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C50C933E88B411F090CB8E8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.15.0-154.217.25.255
Signature Algorithm: sha256WithRSAEncryption
ad:c1:e0:48:4d:b1:12:e1:79:3d:91:91:70:5e:b3:a9:9a:7d:
4e:a5:b1:bc:84:4a:ca:c3:59:f3:76:3f:e2:6c:f5:fe:0c:47:
78:cd:d8:39:e5:23:15:1a:2f:a8:2c:78:f9:a7:ee:30:fb:d0:
de:ca:9b:e0:02:36:f3:ca:75:44:a9:d8:7e:b7:1e:4c:9b:2b:
49:90:c7:e3:d1:d4:a4:3d:2e:17:9d:b6:dd:de:94:11:99:88:
c2:3a:a8:e2:b7:a9:48:4b:bd:47:27:ba:9c:7d:80:e0:ce:d9:
9e:96:2b:68:0d:9d:14:ac:1d:71:a5:8b:bc:44:5f:8a:e9:e5:
99:32:9e:9c:00:e0:34:f1:1f:43:93:35:1b:eb:14:9d:17:c3:
41:2a:77:42:78:bb:b6:50:d7:86:af:93:a8:a3:eb:03:bd:2b:
1b:57:6a:35:7a:8c:fa:b4:b4:fa:58:2c:cf:c5:64:ca:dc:52:
5b:53:fe:01:61:25:ee:a7:38:bb:c0:2f:b7:df:1f:d7:aa:6a:
25:30:3b:ed:b2:e5:9b:05:d6:3f:de:30:99:3e:9f:3c:b9:fb:
8e:e7:5e:f6:da:66:62:a6:df:a8:4d:37:24:b3:82:87:02:b2:
b4:fc:60:c1:02:e2:a2:07:52:c2:25:e5:8c:e3:5f:23:a9:4c:
bb:b9:12:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:34 2025 by rpki-client