Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D6B7C24687A11F09C1AC1E1DAE4EC9C.roa
File: 3D6B7C24687A11F09C1AC1E1DAE4EC9C.roa (raw, json)
Hash identifier: ybID2PaSYSPo/DUCfFpqBc/Nw88VcvJVKWmXsWGc+Aw=
Subject key identifier: 0C:34:09:81:C9:93:BF:19:63:02:9D:57:66:26:5B:EB:AB:43:05:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D6B7C24687A11F09C1AC1E1DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 10:37:48 +0000
ROA not before: Thu 24 Jul 2025 10:37:43 +0000
ROA not after: Sun 31 Aug 2025 10:37:43 +0000
asID: 20326
IP address blocks: 154.82.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 06:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102237 (0x18f5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 10:37:43 2025 GMT
Not After : Aug 31 10:37:43 2025 GMT
Subject: CN=68820cfc-4242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:3f:5d:42:69:0c:e1:de:29:a7:ca:dd:6d:
58:ba:51:18:f0:33:ea:50:4e:a3:47:5a:9f:6b:1d:
77:5f:9e:fd:1b:0c:4b:af:f6:de:e9:af:98:6b:db:
b1:7d:72:63:4f:a8:44:2c:2e:3b:3b:05:f4:03:25:
89:d1:28:41:7b:43:a7:30:01:af:dc:a0:c7:73:6a:
00:df:07:28:3f:1c:8a:da:40:28:02:0b:00:1c:ec:
33:ba:4d:78:ef:de:02:6f:11:5d:6f:35:6f:cf:c3:
4c:b4:66:2e:65:63:d6:7a:fa:9a:6d:ba:eb:85:13:
38:20:ef:b1:91:16:37:0a:57:2b:f5:f2:44:1f:81:
b5:88:08:43:29:5b:92:bd:16:0e:77:97:aa:67:c6:
12:54:d3:e7:89:95:56:56:40:70:a6:6f:e6:ba:80:
e3:ac:92:c1:75:38:07:da:8a:59:0d:4f:91:f9:ca:
81:f1:6f:97:62:a6:28:b0:da:a5:89:12:68:ab:9b:
0a:6a:87:54:ee:3f:e0:ec:51:33:39:f7:45:90:98:
db:df:16:0e:50:9a:1d:7b:fc:2a:02:97:02:4f:41:
f1:63:bb:26:9a:91:e1:f5:40:f7:c1:c5:3e:d4:c4:
b5:64:de:6c:50:f6:8a:8a:ec:e3:8c:b4:67:88:99:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:34:09:81:C9:93:BF:19:63:02:9D:57:66:26:5B:EB:AB:43:05:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D6B7C24687A11F09C1AC1E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.193.0/24
Signature Algorithm: sha256WithRSAEncryption
89:20:2e:36:39:4b:c2:59:7c:90:2d:70:52:fb:01:36:5d:66:
42:1c:04:d3:9a:de:19:dd:3a:4a:c9:b4:dc:9e:57:ee:03:da:
97:63:9f:23:60:48:dd:3c:40:50:75:82:1b:0b:f0:b4:0f:4b:
af:14:af:4a:d3:58:fe:41:36:9a:32:0f:da:01:79:c3:d9:d5:
08:1b:6b:fb:5f:ac:78:2d:5b:d6:07:d1:55:ce:56:9e:b3:7e:
67:41:4a:92:7c:f5:ba:8b:59:73:7c:6e:ce:29:fb:2b:b6:5b:
23:fd:66:ca:34:37:ec:1f:7f:ae:50:b6:73:60:10:11:67:60:
cb:a1:9e:bf:7b:43:53:53:04:95:09:85:bf:da:ba:f7:7b:b5:
24:ff:fb:93:a3:47:52:75:fb:14:23:51:e6:5b:49:2b:e6:ec:
81:61:ab:44:13:f2:5b:d1:19:8e:02:cd:6c:81:87:6d:c4:bc:
7d:d2:29:8b:d6:ff:be:d2:8d:04:fb:9f:0a:93:20:56:2b:f9:
a6:40:fe:4f:05:65:3e:1a:bf:97:07:54:ef:f5:ed:5a:6a:64:
cb:95:d6:6f:2d:5c:de:14:ab:77:4f:e2:f8:9d:e3:02:9e:54:
2a:80:37:cb:79:d4:bb:30:dc:76:9d:18:ce:dd:02:6e:2c:df:
19:65:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:41:19 2025 by rpki-client