Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34315F226FE411F090E31DA2DAE4EC9C.roa
File: 34315F226FE411F090E31DA2DAE4EC9C.roa (raw, json)
Hash identifier: sDFXLijwJnyPbY7cQRx8khsrhRU2oN0Io9RjnLHwhnE=
Subject key identifier: 98:B6:E9:E2:4F:F0:2C:B4:D5:65:1D:77:27:9A:57:D7:E6:08:E8:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01907A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34315F226FE411F090E31DA2DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 21:03:57 +0000
ROA not before: Sat 02 Aug 2025 21:03:50 +0000
ROA not after: Wed 24 Sep 2025 21:03:50 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102522 (0x1907a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 21:03:50 2025 GMT
Not After : Sep 24 21:03:50 2025 GMT
Subject: CN=688e7d3d-bac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cb:3f:a2:f5:01:50:67:83:3e:fc:91:89:5b:
3e:ec:78:5a:00:93:9a:38:6a:a6:60:b3:41:b5:62:
8b:2a:dd:3c:e8:dc:18:9f:be:c6:f8:c9:65:33:29:
3e:a0:f7:cc:88:5f:27:87:06:eb:b2:de:aa:45:96:
92:af:91:31:4b:e6:40:9c:07:f9:e9:eb:8b:24:26:
63:44:92:a0:3f:76:ca:37:91:fd:df:e2:77:5c:39:
e0:8d:2f:ad:17:2e:20:3d:70:d8:4e:73:8c:94:6c:
a7:3e:ed:62:9a:a3:36:04:21:89:20:ae:27:7b:f0:
0d:fa:0f:1a:c5:5b:f6:cd:b1:8a:cd:f3:50:df:60:
bf:91:d4:de:89:9a:43:67:ef:ab:9e:9a:5d:91:74:
54:8e:3d:4c:f8:99:03:e2:df:a6:af:35:c4:24:4f:
40:31:6c:e5:c1:e2:04:f0:27:60:e9:ab:d0:cd:a9:
42:b0:9b:22:e7:40:09:4e:89:78:ef:bc:d4:ac:1d:
c2:8a:88:71:76:0e:05:04:fd:24:a5:31:af:8b:ed:
14:2c:ec:76:4e:51:d3:9f:06:2c:b7:70:1a:88:52:
be:0f:05:5a:3f:0d:4f:ba:fc:4c:9d:26:99:9c:76:
6f:f7:5f:ce:b9:64:3b:9a:07:ce:65:71:b3:0d:c4:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B6:E9:E2:4F:F0:2C:B4:D5:65:1D:77:27:9A:57:D7:E6:08:E8:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34315F226FE411F090E31DA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
25:86:a1:19:d5:6f:02:43:a5:b7:2b:25:4a:c7:f4:cb:c9:4b:
35:dd:18:d3:d1:d5:7f:5e:92:13:cd:ba:51:98:d2:ad:75:62:
e6:8f:95:8d:cc:db:b4:cf:48:11:ca:3f:87:d4:25:ec:4f:7b:
8f:15:90:6f:02:b7:78:7b:bb:3d:3c:6e:9a:a3:4a:58:d4:b1:
b1:ec:35:66:53:e8:7a:af:91:99:54:0b:96:7c:c5:e0:05:14:
d0:a2:ef:6c:7c:d4:57:e9:a6:3a:0b:3d:3c:3f:0a:a7:ea:a2:
ad:09:90:18:88:8b:4d:ec:1f:07:4b:3f:10:81:16:d8:09:33:
75:b5:86:f5:20:97:4f:14:1b:7f:21:8f:a4:fd:11:64:26:49:
ba:82:11:00:35:1c:e5:5a:91:9f:1a:19:48:37:fc:cf:24:03:
e2:5b:b8:e7:54:da:74:89:ec:98:c7:20:6f:9c:07:8c:55:4b:
a3:5c:0e:0b:a1:fe:3f:60:51:7b:bc:65:ed:58:86:cf:bd:43:
7b:96:75:1f:4d:c8:b6:ea:a6:3e:0f:88:b6:b0:8a:a0:b7:57:
6d:64:a1:36:c8:3b:9f:f3:58:e6:b7:95:26:a6:7c:a6:c5:f7:
0a:df:73:cf:6d:4a:59:50:8c:01:3a:f3:4c:18:47:90:47:af:
79:e1:76:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:24:29 2025 by rpki-client