Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D683D986FF311F088048181DAE4EC9C.roa
File: 5D683D986FF311F088048181DAE4EC9C.roa (raw, json)
Hash identifier: NOBe0VIMujzMOhh3RfuAaP8aT01DFJ/QYsvoDiemDmY=
Subject key identifier: 02:AE:4E:D8:30:D0:6D:6C:AF:33:B7:A0:D2:7D:34:BA:80:37:4A:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01908C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D683D986FF311F088048181DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 22:52:29 +0000
ROA not before: Sat 02 Aug 2025 22:52:24 +0000
ROA not after: Sun 05 Oct 2025 22:52:24 +0000
asID: 398823
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102540 (0x1908c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 22:52:24 2025 GMT
Not After : Oct 5 22:52:24 2025 GMT
Subject: CN=688e96ad-9c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:b4:90:b1:d9:12:17:77:d9:83:c3:e0:b5:
79:ae:c8:5e:8a:aa:cf:f8:48:57:a2:18:b9:fb:13:
b5:ce:55:8d:50:d3:cc:2b:b0:25:fc:bd:dc:52:d4:
99:0f:ef:dc:fb:c5:1d:d4:86:de:f9:e2:af:95:08:
b5:f8:de:dc:f2:c4:92:d9:88:54:7a:05:d0:c3:a5:
ee:58:8f:e8:c0:0f:50:c8:c3:37:0c:5d:59:bc:f7:
7c:32:a2:eb:22:02:7e:0f:a6:06:a0:b2:48:71:13:
96:a2:21:48:38:22:2f:df:c1:ed:25:f7:fc:52:71:
71:27:91:27:58:47:32:10:92:cf:45:1d:0f:5c:e9:
14:4a:ec:c3:2b:b4:03:b8:97:eb:0c:98:b2:0a:3e:
ec:c2:54:63:84:00:9e:ef:d7:0b:c7:f2:31:cb:1c:
e0:7b:14:40:94:9b:b6:db:0b:f4:0a:45:b6:0a:b4:
04:9c:0b:04:80:c7:85:5d:40:7d:bd:eb:ba:11:2a:
99:64:2f:ce:81:81:64:c3:ee:eb:12:d1:65:d0:a7:
f3:f2:1b:d7:50:07:a5:66:a7:d0:b5:23:b2:6d:f1:
c9:ac:74:85:78:13:f8:51:d4:93:3f:20:c8:55:05:
b4:33:5d:3f:44:fe:40:03:15:61:77:3c:b2:33:cf:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AE:4E:D8:30:D0:6D:6C:AF:33:B7:A0:D2:7D:34:BA:80:37:4A:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D683D986FF311F088048181DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
00:40:5a:d8:19:b8:bd:61:7b:1c:03:01:cc:27:71:1a:72:ac:
86:51:a5:ab:6a:3a:08:4d:d2:04:20:16:fa:c5:76:f3:0e:21:
31:57:ba:af:fe:4b:f3:13:97:2d:3b:2c:1b:8a:ef:f5:b6:7d:
2b:cc:30:14:3b:98:93:dd:6e:97:42:8d:ca:7f:ff:9a:92:a6:
bc:06:b7:31:d4:90:0e:c9:6c:99:c0:6b:68:1e:bf:5c:c4:57:
97:fa:da:54:1b:91:8e:67:85:f9:7a:50:57:68:3e:b1:fe:96:
32:30:a0:76:d5:a7:24:06:24:3b:b6:ec:8d:ac:2d:08:f5:a2:
c4:2b:8b:d9:9e:46:a8:03:32:16:79:6e:7a:3a:21:ed:68:2a:
60:1c:00:50:11:86:8a:55:3e:c5:d5:ff:3c:ad:88:a3:3f:27:
46:3a:d0:28:8c:6d:eb:b8:49:00:d6:99:f6:94:36:d1:ef:8e:
eb:d2:a6:b6:53:ba:ad:17:65:77:78:31:bd:47:0c:bd:62:b2:
6f:f5:11:2d:e6:80:2d:de:da:ad:67:0a:db:c5:0e:88:80:9c:
b6:21:59:23:2a:c6:93:d2:19:df:c5:c5:0b:4a:1a:35:9b:b4:
c6:9e:f8:f3:bd:82:c0:24:b9:61:f5:5a:22:30:18:a6:82:17:
51:a1:4c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:17:55 2025 by rpki-client