Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65015402712111F093FE7EBFDAE4EC9C.roa
File: 65015402712111F093FE7EBFDAE4EC9C.roa (raw, json)
Hash identifier: MKdSWEOZtdw0L/FY3nIQo812KHuR324fCufoe86l/Hw=
Subject key identifier: F4:79:74:50:75:56:12:A9:F8:25:53:FE:DE:41:17:D4:04:4A:25:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65015402712111F093FE7EBFDAE4EC9C.roa
Signing time: Mon 04 Aug 2025 10:54:29 +0000
ROA not before: Mon 04 Aug 2025 10:54:25 +0000
ROA not after: Wed 10 Sep 2025 10:54:25 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102564 (0x190a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 4 10:54:25 2025 GMT
Not After : Sep 10 10:54:25 2025 GMT
Subject: CN=68909165-6ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:98:a8:d4:b5:c0:4e:e3:68:36:26:86:6c:
cf:62:05:0d:ca:13:e6:de:0d:72:35:96:25:1f:7d:
78:b1:22:f0:9c:27:e4:0a:03:e2:fb:76:33:ee:38:
b7:00:1b:f4:57:62:c9:85:de:22:0e:f9:c7:8b:7b:
b6:54:63:48:9d:e2:39:05:ba:21:68:7a:d4:e3:60:
a9:f4:5f:bf:91:2e:dd:94:5e:cc:a2:8c:ee:ee:f9:
3b:73:87:ad:a7:3d:98:d4:0b:60:f6:58:36:3a:06:
b4:c0:25:f4:ec:43:f1:ce:b0:cf:90:b1:d8:91:36:
3e:4b:88:3e:38:46:45:70:d9:dc:1f:f9:bb:68:85:
8f:1a:49:c2:18:1e:f9:ae:f4:d0:db:7e:7d:1a:90:
1f:e2:aa:5e:a4:01:7d:63:d4:3d:29:55:c3:34:0e:
70:9f:42:17:5f:b7:0c:97:71:20:88:a8:d6:fa:d4:
a1:73:4e:d6:18:5e:ca:94:f0:46:0f:c7:d8:9d:fa:
44:e6:2f:f4:d1:51:de:bf:1a:3b:f9:4b:bc:ba:cd:
ed:d3:87:50:3a:62:1e:b3:9b:9c:d5:ed:c9:6a:e0:
d1:09:6e:b6:1c:5e:20:e1:0e:25:c1:65:70:e2:c3:
64:52:0a:7e:ea:62:17:44:0b:f2:0a:26:42:78:be:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:79:74:50:75:56:12:A9:F8:25:53:FE:DE:41:17:D4:04:4A:25:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65015402712111F093FE7EBFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
59:7d:24:1f:f3:c9:d8:74:04:35:40:85:a1:f6:d9:44:ad:e9:
82:63:1e:2d:d7:4a:a0:2a:7b:43:66:11:f9:98:10:e1:90:94:
97:5d:ee:34:cd:f4:08:30:ad:8f:0e:db:f8:a8:98:89:c9:ae:
cd:6c:81:e8:c6:81:4f:87:ca:94:8c:8d:1c:db:e9:d3:50:d6:
94:fa:b2:08:f8:5a:26:8b:59:b8:81:3a:b5:00:de:e3:3b:5c:
77:c2:a3:bc:af:c7:93:57:6e:bf:43:7e:a2:7f:b3:f7:c4:f6:
63:2a:3c:7e:af:5f:3d:a8:a2:61:3c:5b:20:50:59:f7:df:2a:
4e:77:17:e0:7d:ac:30:ea:14:72:75:8b:be:0b:3f:81:5c:ee:
69:ed:f2:c7:34:82:d6:ea:9f:91:ca:a9:94:54:b6:d8:d9:ef:
86:3e:2b:49:93:4e:ad:a9:9b:25:7c:d3:db:b1:b4:d8:83:15:
69:93:e0:db:33:6b:0e:15:4e:58:23:d5:91:54:50:14:c2:5e:
5e:18:2b:2d:62:3b:53:8a:3f:2d:4f:24:fe:d3:8c:c9:59:63:
a0:bd:70:c0:4c:7a:6d:16:48:5e:36:13:63:58:42:ab:a2:25:
66:b2:28:87:0a:6d:b8:bc:71:11:e5:da:2d:6f:5a:17:ae:26:
e7:a1:d8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:18 2025 by rpki-client