Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC2186B266D711F0A60DAEC0DAE4EC9C.roa
File: FC2186B266D711F0A60DAEC0DAE4EC9C.roa (raw, json)
Hash identifier: rdgQc+NPmEFcjTMIIu1sDWVK5Cf0HJgJoPD4S9gQPAQ=
Subject key identifier: F7:31:C2:10:A4:57:D2:0D:1E:30:A4:77:98:0C:79:76:B2:85:A6:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018ECC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC2186B266D711F0A60DAEC0DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 08:43:49 +0000
ROA not before: Tue 22 Jul 2025 08:43:43 +0000
ROA not after: Sat 30 Aug 2025 08:43:43 +0000
asID: 40779
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102092 (0x18ecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 08:43:43 2025 GMT
Not After : Aug 30 08:43:43 2025 GMT
Subject: CN=687f4f44-1fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:a6:58:d3:48:b7:4a:6d:ad:3c:44:7c:ef:
12:d7:a9:b9:81:fc:0d:b4:5b:26:14:71:fa:04:e7:
65:8e:ba:fe:d5:64:d9:b1:44:22:e3:3b:85:5f:16:
02:af:ac:dc:83:22:8a:a1:1f:f3:3c:f4:78:11:a5:
43:24:7a:ca:88:9e:fe:85:59:74:4a:07:8c:4c:43:
78:ea:6e:18:11:b2:58:9e:2b:47:90:05:ed:5f:46:
04:62:69:44:e6:05:6c:1f:0a:65:77:01:3f:b8:0b:
98:9a:1d:be:a9:d1:cc:2a:76:88:ae:3d:c8:dd:20:
12:cc:d8:f2:e6:c4:e2:47:7c:a2:0f:ed:03:ef:4b:
c9:c3:ae:1a:87:7b:3e:d2:cd:7a:b5:c0:d2:46:bf:
40:97:3e:a0:73:a7:e0:d1:8d:a9:7e:8a:1c:57:c7:
a0:c8:a9:d4:3d:0f:72:97:da:57:39:6d:ce:60:d2:
ef:18:6a:51:66:b1:2c:a0:2f:bb:a0:28:7f:11:05:
c2:30:14:b9:9b:a8:e6:db:4f:7b:0f:08:88:51:1a:
5f:75:f2:63:4b:27:ee:79:46:b8:2a:ac:ce:2a:5a:
47:e0:5a:f2:69:93:25:b3:77:66:ed:46:d2:c1:f7:
d0:5f:6b:5d:47:f5:ed:20:50:6f:86:e7:46:50:0f:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:31:C2:10:A4:57:D2:0D:1E:30:A4:77:98:0C:79:76:B2:85:A6:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC2186B266D711F0A60DAEC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:e9:94:d1:63:ef:ab:27:b8:e1:89:c5:7a:dd:94:d5:c8:8a:
66:21:24:b4:4b:4d:3a:20:38:c4:84:ad:9f:66:51:62:fb:b4:
e9:52:3e:a2:85:51:d9:84:bc:20:d4:59:ce:01:a8:4e:95:1c:
d4:50:55:f9:c0:bb:86:1d:86:34:08:b5:c7:14:d4:ad:23:fd:
89:26:2d:89:de:e5:7d:7a:29:6d:a1:77:22:57:52:8a:e9:25:
1d:fa:61:79:69:9f:b4:15:67:49:ea:d9:65:5d:b0:6a:b8:7b:
61:0d:04:55:d2:01:c7:51:d9:e5:ef:5c:00:c5:15:a5:7a:20:
30:6b:df:72:28:27:ba:e6:7b:fd:a5:7c:a5:bc:09:68:b5:5f:
4b:11:4e:e0:84:bb:7a:f3:ca:8b:8e:b2:68:f2:6b:a9:9e:f9:
83:27:75:50:84:cc:23:61:15:41:6c:eb:71:a9:f1:ee:e2:5b:
50:f6:6d:97:02:36:1c:c0:1b:db:20:cf:50:62:b8:26:ac:83:
b6:94:72:f0:3f:c6:95:f0:ff:93:47:1d:b4:c6:af:1b:43:2e:
2b:bf:e9:39:07:29:19:34:4b:80:ee:bd:06:0a:c9:39:9f:4a:
b0:3d:86:35:53:6b:e4:e8:c1:9c:16:21:b1:da:c6:ce:73:28:
b5:99:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:11 2025 by rpki-client