Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16AEF2EC6D1511F0819241E3DAE4EC9C.roa
File: 16AEF2EC6D1511F0819241E3DAE4EC9C.roa (raw, json)
Hash identifier: mlvGhOXv/SfkD1VKvJlGfi4T1yDc+yCgcg86/uMjnHM=
Subject key identifier: 28:70:6C:1A:B7:4F:08:5F:C9:71:FA:C0:91:F3:AA:0F:4B:71:44:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16AEF2EC6D1511F0819241E3DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 07:16:19 +0000
ROA not before: Wed 30 Jul 2025 07:16:15 +0000
ROA not after: Sun 12 Oct 2025 07:16:15 +0000
asID: 13335
IP address blocks: 154.200.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 05 Aug 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102383 (0x18fef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 07:16:15 2025 GMT
Not After : Oct 12 07:16:15 2025 GMT
Subject: CN=6889c6c3-eb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:3b:52:c9:e0:b8:86:7f:88:50:46:a3:34:
9f:60:50:4b:be:85:a9:1f:9f:1e:8c:58:ed:76:c0:
8a:75:39:ac:10:ad:20:14:13:35:c2:53:20:99:d8:
7a:f3:5e:cc:47:57:4f:51:17:b1:03:c8:3c:fa:ed:
60:51:c3:88:d1:0c:04:c4:d9:0f:9b:2f:6b:32:6c:
cf:e9:af:e0:02:6e:04:31:6f:26:bd:6e:06:f0:12:
de:13:db:88:84:2f:4d:73:7c:6a:67:3b:eb:8f:d1:
7f:92:6d:ee:84:db:e7:99:3d:5b:80:71:ea:0a:3b:
96:80:1c:71:f4:5d:33:0f:1f:1d:f3:dc:f2:02:72:
6e:cf:e6:23:19:fe:50:5e:12:d8:37:a7:d6:2e:44:
78:40:75:ad:e0:93:83:c8:5b:27:68:91:4a:f7:dd:
a7:ed:2c:d3:a8:5b:41:8c:51:a0:38:99:69:08:4c:
bd:a8:d3:6e:e8:c3:d9:bc:56:b4:41:26:bc:a5:ab:
10:94:47:23:08:5f:08:2c:25:84:0e:22:75:9d:2a:
db:b7:1d:53:74:d7:df:a9:40:62:5a:49:3d:58:f1:
c8:fc:f5:9e:48:6c:19:e4:c5:4f:2f:37:73:e9:94:
82:e7:ba:4a:73:05:1d:a2:3c:35:06:8a:27:a9:6c:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:70:6C:1A:B7:4F:08:5F:C9:71:FA:C0:91:F3:AA:0F:4B:71:44:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16AEF2EC6D1511F0819241E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:20:e1:b5:71:e6:88:31:5d:4d:17:d2:0e:d1:fb:40:a1:41:
95:d6:66:73:63:85:ef:5c:a7:d5:f4:1f:a9:b5:d5:3f:00:86:
e1:de:bd:9b:0d:3b:c7:ea:59:55:72:c7:59:b4:e8:44:d5:70:
8c:5e:16:41:db:44:5d:1f:4f:63:31:41:ab:7b:b7:aa:92:01:
45:c2:e1:4c:d7:6f:c3:41:30:65:33:58:d3:04:2a:f9:c3:0f:
6d:11:a6:a1:2e:be:c6:75:ca:75:9d:93:98:37:52:22:54:a5:
b9:3d:3f:57:3b:d9:c0:c3:7b:de:74:54:42:6a:6c:69:55:2c:
be:c6:40:3a:47:32:18:52:52:0c:81:4c:95:de:05:1a:52:45:
00:e8:47:23:18:a1:36:35:95:7f:e9:1e:2f:08:6f:c2:4c:cf:
4b:d1:65:e0:61:58:f7:5a:f3:7b:c8:a2:b0:34:1a:fc:d9:a5:
b5:05:c0:f7:99:96:49:25:41:5e:b4:fe:72:c7:01:97:5a:da:
2b:23:cc:09:db:68:c0:8c:61:07:0e:ec:53:be:d2:b1:de:66:
a6:2a:62:c2:5f:c9:8f:ef:91:db:27:65:19:5b:1e:7f:d2:1f:
66:58:d0:7f:26:7e:d5:1f:48:ce:ea:3d:c0:a8:98:92:ea:21:
a2:8c:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:35:51 2025 by rpki-client