Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/456D7F5A67C411F0A6A226BFDAE4EC9C.roa
File: 456D7F5A67C411F0A6A226BFDAE4EC9C.roa (raw, json)
Hash identifier: VkAB6FmG6aWwIlJtMCcSWllTyD0U9Wvf7KuU+CR71b4=
Subject key identifier: 7B:C9:49:EF:FA:8C:33:7C:8A:D7:58:5F:0D:2A:CB:90:27:C8:56:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/456D7F5A67C411F0A6A226BFDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 12:55:13 +0000
ROA not before: Wed 23 Jul 2025 12:55:08 +0000
ROA not after: Sat 30 Aug 2025 12:55:08 +0000
asID: 20326
IP address blocks: 154.94.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 06:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102178 (0x18f22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 12:55:08 2025 GMT
Not After : Aug 30 12:55:08 2025 GMT
Subject: CN=6880dbb1-4acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:85:c8:34:5c:8d:a1:ea:38:e6:44:77:b5:
e6:3c:60:2e:00:74:5f:c1:35:b6:62:e7:57:ae:30:
b4:24:9c:17:f7:a5:9e:7c:87:76:76:8c:c5:a2:60:
bb:9e:cb:3d:ff:06:0b:98:21:c5:98:e2:3c:fd:ec:
92:bf:6e:ee:cc:0a:93:d6:28:f1:1e:4e:86:7d:91:
61:d0:85:41:67:b6:0b:6c:04:9f:5a:66:45:a6:d4:
12:26:37:a9:0f:f6:9e:69:f8:b7:e2:d9:c5:15:bc:
42:ef:fd:3f:e1:80:d9:ba:88:52:1f:63:7f:77:9b:
b6:e1:10:d4:76:3d:bb:00:8f:e9:6a:f9:b2:85:88:
95:6f:25:23:85:0b:ec:f0:f5:3f:69:2b:74:a4:37:
45:c2:7b:eb:6f:4a:70:96:86:bf:12:5d:56:f2:18:
f5:d7:2f:23:4f:1b:a2:76:9b:78:04:8e:f0:1e:85:
24:c6:d6:7f:ac:1f:be:08:9f:15:0d:7d:b6:a2:c9:
48:ef:52:fe:42:eb:b8:d8:d1:1c:ad:73:8c:33:3a:
05:3f:ae:a7:e2:2d:95:94:ec:c4:a0:50:24:0a:84:
58:ac:6d:fb:9e:8f:44:16:ea:8a:09:33:01:3e:20:
79:41:1a:7c:b5:a6:11:10:03:9b:8e:49:b6:c5:77:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:49:EF:FA:8C:33:7C:8A:D7:58:5F:0D:2A:CB:90:27:C8:56:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/456D7F5A67C411F0A6A226BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.2.0/23
Signature Algorithm: sha256WithRSAEncryption
09:7f:df:1e:31:c8:da:0b:2b:4d:61:37:af:dd:0d:4c:42:a6:
dc:a6:d9:d2:67:6a:cd:3d:43:f7:61:2d:85:13:f9:07:34:4e:
f2:88:64:d5:3d:74:db:22:f3:a2:9b:61:d7:94:2e:73:c8:6c:
2e:7c:37:c8:a0:3e:0d:14:d2:d2:dc:7d:69:b4:e0:5b:fb:7a:
7b:78:38:99:e4:30:79:37:4a:41:d8:c9:75:f6:78:78:35:ef:
9d:ee:f1:c2:dc:d0:c3:a4:da:b9:9e:e6:f3:61:d8:da:eb:38:
75:76:d7:8d:4e:4f:50:4f:69:8c:f0:c6:32:93:56:25:2f:af:
ab:ed:73:67:46:56:c5:be:74:2e:93:1a:ee:03:0f:ba:fd:55:
be:bc:4d:1c:b5:c6:1a:c1:37:6c:17:c7:44:09:da:c4:3c:f0:
66:4b:22:84:ef:ed:cc:7a:31:27:aa:9d:cb:71:da:99:b2:6e:
88:30:35:fc:5a:f4:16:0f:4f:e9:ce:c2:ed:6f:62:fa:7f:bd:
69:72:bc:1c:c1:e3:22:9f:67:a6:7b:2a:63:9c:c1:d5:3d:74:
34:a9:b0:64:a2:9b:8a:9c:e1:26:86:9d:50:d5:50:06:74:57:
1b:2e:8f:3c:76:84:62:e7:03:dc:91:ee:1e:d2:8d:6f:ea:7b:
dc:20:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:52 2025 by rpki-client