
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B2E4A8E6D2211F086A2B6B8DAE4EC9C.roa
File: 8B2E4A8E6D2211F086A2B6B8DAE4EC9C.roa (raw, json)
Hash identifier: OMM3am1oduXuFlLZS6WcINi6lF66U3N2fn3pEB4zFSI=
Subject key identifier: 30:1C:2C:A9:BD:D9:B4:5D:BA:51:BD:CA:1C:E2:B6:BE:28:A0:FB:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019001
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B2E4A8E6D2211F086A2B6B8DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 08:52:38 +0000
ROA not before: Wed 30 Jul 2025 08:52:34 +0000
ROA not after: Tue 02 Sep 2025 08:52:34 +0000
asID: 20326
IP address blocks: 154.198.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102401 (0x19001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 08:52:34 2025 GMT
Not After : Sep 2 08:52:34 2025 GMT
Subject: CN=6889dd56-3e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:04:65:3f:b4:32:13:c4:4b:1c:39:ef:59:
67:34:f0:d2:1f:86:28:2c:a5:85:12:67:c2:eb:c9:
a8:86:4d:9d:bc:34:5f:1e:92:56:ba:44:dd:a5:c9:
51:14:6f:4a:43:bc:43:e1:14:b3:1e:8e:93:37:85:
6e:f1:dd:a3:da:c4:f8:30:fb:4b:c9:b4:58:3c:13:
8a:39:08:a0:58:b4:a6:ab:08:c6:23:bd:ff:27:48:
aa:90:dd:46:48:00:63:64:a5:81:55:06:33:fa:c3:
e5:40:3b:fb:f8:21:fa:25:80:d3:75:75:de:2d:23:
95:7d:a9:0a:15:0e:21:e2:70:bd:92:62:1b:9d:90:
86:26:b7:62:3e:58:0d:49:33:4c:d4:f3:c7:9d:13:
7e:d6:fe:25:85:29:cb:6c:07:cd:6f:46:13:92:8b:
13:1f:d4:f7:24:9a:38:8a:82:07:53:d8:d2:34:a7:
75:1d:ad:48:95:de:7b:7c:42:7c:db:d8:e2:75:e5:
94:bd:e8:02:25:dc:9d:21:5b:a8:50:75:ec:70:52:
c1:06:72:e5:43:5d:17:7d:4e:0d:8b:07:26:e7:14:
b5:43:e5:15:aa:6d:89:4b:31:23:94:69:72:a0:b8:
43:c8:6a:6f:17:60:98:62:03:0c:5f:39:c4:64:7b:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1C:2C:A9:BD:D9:B4:5D:BA:51:BD:CA:1C:E2:B6:BE:28:A0:FB:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B2E4A8E6D2211F086A2B6B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:83:24:d6:55:f0:69:b4:dc:3c:ba:45:a1:58:2c:57:36:c2:
0c:60:0b:ab:bc:c8:f1:65:13:00:a2:76:8c:bc:d9:49:ad:4f:
50:be:cd:d4:ca:62:50:72:3c:65:39:89:37:95:c2:0e:cc:ba:
09:06:54:ac:12:63:f6:f6:3b:7c:ee:f2:a1:a8:13:90:af:5b:
88:c3:7f:99:6c:f1:0e:31:c7:d4:12:f4:b9:10:63:7c:39:4f:
f4:56:93:d8:02:88:94:74:b2:30:a6:6c:72:81:f5:b0:04:78:
31:c9:37:ae:6a:bb:ae:ca:d1:0c:b1:9c:d1:29:ee:d9:7e:dc:
98:db:f4:86:84:ec:b0:f7:ac:66:fb:b0:ef:ba:2b:97:6c:e6:
6c:53:91:c3:bf:24:95:20:29:a8:4a:d3:46:f9:64:6a:aa:5c:
c5:93:38:55:96:26:6c:af:3d:9a:21:64:5c:d8:ce:fd:3c:6d:
3f:16:18:b8:09:35:17:ee:ab:34:56:77:f4:09:55:b7:4a:a1:
31:b5:f5:13:b8:07:43:f3:f5:e9:12:1e:8a:90:64:6f:39:40:
ac:55:e6:d0:72:d0:0f:e6:80:3f:88:31:1c:a6:76:a4:72:e9:
74:ba:c7:ab:1f:97:a6:4f:48:ab:a5:88:71:ab:60:32:df:b7:
fb:16:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:02 2025 by rpki-client