Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/016CC34C665711F0BE5933EDDAE4EC9C.roa
File: 016CC34C665711F0BE5933EDDAE4EC9C.roa (raw, json)
Hash identifier: nVMHu2e7JxlHokeXOvdXrysQgbdkLtzLbQL6GqjpzcU=
Subject key identifier: 24:54:D1:10:62:2A:CC:80:45:38:D2:82:DC:CE:A8:58:46:9A:9A:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/016CC34C665711F0BE5933EDDAE4EC9C.roa
Signing time: Mon 21 Jul 2025 17:20:32 +0000
ROA not before: Mon 21 Jul 2025 17:20:27 +0000
ROA not after: Thu 28 Aug 2025 17:20:27 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102035 (0x18e93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 17:20:27 2025 GMT
Not After : Aug 28 17:20:27 2025 GMT
Subject: CN=687e76e0-e49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:f4:6a:93:6d:6d:c8:df:c5:03:a5:96:de:
b7:84:b5:66:73:ae:46:18:ef:60:4a:cc:2e:bc:a7:
16:86:0a:b5:27:23:85:cb:67:91:09:fc:56:09:09:
cd:07:2b:d9:11:58:57:99:b0:f8:f2:07:05:5b:cc:
07:4b:9a:df:ac:c1:8a:ba:a5:7a:df:46:a4:49:58:
65:c3:28:f0:ff:a5:69:03:39:34:dd:a2:b3:fc:c4:
c9:eb:18:b0:fd:4c:f1:f7:6a:23:5e:dd:d5:09:97:
d0:ff:ba:80:51:6f:ed:f7:1f:d7:0b:24:1f:df:cc:
1f:89:b3:27:5b:95:d0:61:fd:02:6b:75:4e:3d:7c:
89:85:15:fe:fe:d3:70:2e:a2:97:65:4e:9d:ce:4c:
d7:b4:3f:68:8f:f9:05:21:7d:bf:71:83:bf:44:34:
7c:6e:17:8c:ef:d4:75:a0:4d:dc:80:a8:3d:e0:cc:
90:fe:de:15:13:a0:24:bd:9f:c3:6b:a3:9d:ee:a9:
48:33:79:da:5e:90:45:0d:28:04:96:02:99:7c:d1:
e2:f0:96:2e:ac:12:6c:a7:2f:76:b2:1a:d2:fb:3d:
28:e0:36:70:7b:4b:22:69:1f:a5:19:12:55:b8:20:
13:2a:c7:94:0f:e6:65:ff:bf:2d:90:e8:09:4b:7f:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:54:D1:10:62:2A:CC:80:45:38:D2:82:DC:CE:A8:58:46:9A:9A:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/016CC34C665711F0BE5933EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3b:c1:e2:04:c5:da:47:37:b3:7a:6c:58:b1:d0:ca:df:09:
4a:09:99:f2:b3:81:53:5e:ab:9e:06:2f:f3:2d:99:72:18:a4:
a3:eb:05:67:9a:d2:8a:d7:3e:50:59:ac:c8:0e:34:29:ea:03:
bf:4f:7e:25:7a:85:fb:a6:c1:3c:04:3e:e0:ce:1f:5e:05:4e:
12:fb:6a:6f:f8:79:70:16:ba:1d:08:ba:a9:ed:3e:ce:d0:69:
55:93:de:8a:1f:62:66:ca:06:f4:59:05:be:50:f0:41:5c:57:
ce:30:31:d7:bd:b5:93:86:cf:9b:ef:a9:c7:f8:15:6b:b4:d2:
b7:04:46:f7:38:6a:2f:aa:45:fb:db:84:12:6d:a0:28:74:d6:
0c:79:12:bd:96:b0:8e:ca:8b:6e:b0:39:a8:36:3c:90:62:7b:
e7:d3:0f:a3:90:e9:01:24:41:bb:c9:86:33:2e:be:28:9d:87:
b2:8e:44:9f:8d:a0:17:af:3b:40:fb:ae:52:48:e2:f4:4a:b7:
bc:9e:50:c8:83:44:6c:f3:8b:af:12:bd:42:09:8c:fc:1c:af:
53:6a:74:96:ae:d6:c9:a7:75:9c:37:0f:89:ec:78:2c:8e:9e:
54:91:14:d6:d1:51:a6:61:3d:be:0f:df:87:93:a5:3e:7f:7a:
0a:52:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:48 2025 by rpki-client