Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6F3EBB088F411F0B0D9F1A5DAE4EC9C.roa
File: E6F3EBB088F411F0B0D9F1A5DAE4EC9C.roa (raw, json)
Hash identifier: LnpqOeGjCTq9oUmr9CnktrcgzscrmrRSKNh+PGoxEqE=
Subject key identifier: 14:AF:82:59:CA:41:22:C7:54:93:60:08:ED:97:D7:84:CF:BA:D3:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6F3EBB088F411F0B0D9F1A5DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 18:36:28 +0000
ROA not before: Wed 03 Sep 2025 18:36:23 +0000
ROA not after: Wed 10 Sep 2025 18:36:23 +0000
asID: 135377
IP address blocks: 154.197.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105798 (0x19d46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 18:36:23 2025 GMT
Not After : Sep 10 18:36:23 2025 GMT
Subject: CN=68b88aac-08ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:31:24:85:ca:7c:59:f3:a7:ad:da:ed:e4:
ba:9f:19:0c:b8:e2:7e:37:32:ac:fb:e2:8a:71:24:
17:22:e2:bf:d5:29:19:07:3c:d8:a9:2b:13:c5:e0:
c3:bd:84:33:99:f7:14:3e:68:77:92:b8:c6:aa:f0:
33:eb:94:5b:b2:f3:fc:e0:6f:b8:72:5a:77:ed:23:
45:a5:46:31:6a:d6:9b:aa:2d:cd:7c:a8:88:c6:f2:
7e:28:67:22:6c:77:9e:90:f2:a9:01:36:90:8c:d8:
13:c3:1d:26:45:3e:8b:e9:8a:e4:90:c5:d8:91:43:
81:c8:e0:7d:0f:83:06:83:fd:6e:8c:d4:57:bf:bc:
d0:d9:92:b1:7b:c8:74:12:3b:72:19:75:82:a4:53:
73:76:a7:54:0a:cd:31:69:bd:d2:5d:f5:0b:43:f5:
c4:23:e1:71:8d:66:fd:48:a7:85:44:73:96:13:24:
d8:87:9e:e3:62:0c:1d:e4:9e:b1:f1:1d:d2:50:c6:
37:fe:0a:2c:be:dd:b8:d0:93:b8:fc:e6:74:50:02:
e5:89:d7:dc:5f:21:c6:3a:25:53:2a:1b:e5:1d:1d:
2c:42:85:20:73:4f:6c:cd:a1:47:44:1a:92:c7:f7:
28:54:81:d2:ea:c3:cb:6a:e9:7b:88:53:18:56:5e:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AF:82:59:CA:41:22:C7:54:93:60:08:ED:97:D7:84:CF:BA:D3:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6F3EBB088F411F0B0D9F1A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.56.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:38:a6:74:b8:63:12:29:8d:dd:08:2d:16:20:f3:78:ca:e4:
b3:45:ce:66:ee:f6:10:2f:1a:ea:a6:32:3f:73:be:e2:80:8d:
4b:39:63:6b:16:72:29:c8:f2:8b:67:54:10:84:24:a2:d2:c0:
c2:36:d7:7e:39:51:aa:d3:f0:d8:5d:11:14:8c:cb:d4:e4:9f:
92:7c:e1:85:8f:06:b5:75:71:75:06:09:23:c4:9a:19:ed:e8:
be:8e:5b:29:e5:74:d4:4c:e3:d9:cf:35:07:04:74:17:2b:8d:
b7:1b:e6:b1:8b:53:d2:89:dc:6e:13:80:a2:0f:bb:79:9f:41:
5c:42:a5:9f:c2:83:1a:5a:cb:5d:d9:69:0e:94:a1:5d:94:18:
8b:aa:48:e0:ac:04:e4:b6:2b:7a:67:d4:c8:72:39:dc:c4:28:
48:bc:bc:33:a4:d5:43:2c:d5:77:95:f7:5a:65:75:a7:9d:0a:
63:a0:6c:21:ce:ec:ba:0e:67:18:70:d4:2e:75:81:48:b9:f4:
47:42:8f:7e:e0:dd:e3:7b:8b:42:f0:56:d2:0a:19:8f:d1:2f:
94:94:00:77:4b:dd:10:80:1d:59:55:21:48:ee:63:86:58:43:
92:57:db:c1:65:40:ff:b7:11:1b:fa:14:78:e3:13:59:35:41:
a8:86:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:01:03 2025 by rpki-client