Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3612F3C/8EED16AA7BE111F0AB1C77C8DAE4EC9C/74AD86847BE711F0A1AAA9F2DAE4EC9C.roa
File: 74AD86847BE711F0A1AAA9F2DAE4EC9C.roa (raw, json)
Hash identifier: 71M9rftv3/xyKu3/GH7xs+YPRufxDMCwyLrT1oKsUK4=
Subject key identifier: A4:74:1B:D6:B0:17:05:B6:2C:B5:54:A9:D2:A3:11:F2:1D:44:38:6D
Certificate issuer: /CN=F3612F3CAF/serialNumber=0141E2033D409A720AE3AA3ED40FBA42D5FA5B98
Certificate serial: 07
Authority key identifier: 01:41:E2:03:3D:40:9A:72:0A:E3:AA:3E:D4:0F:BA:42:D5:FA:5B:98
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AUHiAz1AmnIK46o-1A-6QtX6W5g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3612F3C/8EED16AA7BE111F0AB1C77C8DAE4EC9C/74AD86847BE711F0A1AAA9F2DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 03:57:28 +0000
ROA not before: Mon 18 Aug 2025 03:57:23 +0000
ROA not after: Tue 30 Nov 2027 03:57:23 +0000
asID: 37727
IP address blocks: 154.65.16.0/21 maxlen: 21
154.65.16.0/21 maxlen: 24
154.65.16.0/24 maxlen: 24
154.65.17.0/24 maxlen: 24
154.65.18.0/24 maxlen: 24
154.65.19.0/24 maxlen: 24
154.65.20.0/24 maxlen: 24
154.65.21.0/24 maxlen: 24
154.65.22.0/24 maxlen: 24
154.65.23.0/24 maxlen: 24
2c0f:eeb8::/32 maxlen: 32
2c0f:eeb8::/32 maxlen: 36
2c0f:eeb8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3612F3C/8EED16AA7BE111F0AB1C77C8DAE4EC9C/AUHiAz1AmnIK46o-1A-6QtX6W5g.crl
rsync://rpki.afrinic.net/repository/member_repository/F3612F3C/8EED16AA7BE111F0AB1C77C8DAE4EC9C/AUHiAz1AmnIK46o-1A-6QtX6W5g.mft
rsync://rpki.afrinic.net/repository/afrinic/AUHiAz1AmnIK46o-1A-6QtX6W5g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3612F3CAF, serialNumber=0141E2033D409A720AE3AA3ED40FBA42D5FA5B98
Validity
Not Before: Aug 18 03:57:23 2025 GMT
Not After : Nov 30 03:57:23 2027 GMT
Subject: CN=68a2a4a8-3078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:14:2b:46:60:08:ba:1e:dc:25:33:bd:44:
54:5e:12:c4:84:4c:2d:37:0d:63:c9:ed:cc:99:93:
36:f7:30:ec:a0:49:b5:bd:c7:00:65:d1:25:e7:3a:
ee:83:fb:43:4e:02:95:19:ab:f0:80:c1:35:54:17:
34:05:cc:43:4e:c5:23:5d:a0:1b:c3:35:ac:ed:25:
0e:70:b7:60:4f:c5:4e:cc:96:15:bd:35:21:fa:d4:
ca:b8:a4:fc:f3:c8:bb:88:83:58:30:ff:5e:8a:6d:
3c:df:c8:96:5d:c0:8d:52:99:90:68:4d:cf:11:9f:
9b:6c:61:67:44:6b:44:e3:cb:a2:4d:a5:02:97:33:
20:76:a9:a5:57:de:86:cd:b8:df:ed:bc:f9:03:71:
c7:c4:ce:d8:8e:60:69:d6:51:b5:0c:df:a3:fa:21:
5d:f1:d2:c0:8f:c1:75:6b:42:3a:01:0e:03:8c:d7:
ee:2c:10:76:02:b9:92:4b:86:80:04:31:0d:f0:25:
50:63:cf:5f:54:fc:d6:8c:d3:17:a7:30:8d:71:3f:
a3:d6:dd:a5:d6:10:d5:b8:a3:61:b8:a6:45:fd:fe:
46:49:5a:f3:db:2d:7f:54:9d:f4:a8:98:04:28:87:
3a:bd:5a:dc:97:07:17:80:fb:b2:b3:dd:a5:d9:e9:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:74:1B:D6:B0:17:05:B6:2C:B5:54:A9:D2:A3:11:F2:1D:44:38:6D
X509v3 Authority Key Identifier:
keyid:01:41:E2:03:3D:40:9A:72:0A:E3:AA:3E:D4:0F:BA:42:D5:FA:5B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3612F3C/8EED16AA7BE111F0AB1C77C8DAE4EC9C/AUHiAz1AmnIK46o-1A-6QtX6W5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AUHiAz1AmnIK46o-1A-6QtX6W5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3612F3C/8EED16AA7BE111F0AB1C77C8DAE4EC9C/74AD86847BE711F0A1AAA9F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.16.0/21
IPv6:
2c0f:eeb8::/32
Signature Algorithm: sha256WithRSAEncryption
4c:7f:64:68:b6:d0:3b:8f:9d:40:49:82:aa:c6:83:38:41:c8:
e6:43:e1:4a:20:19:09:3b:86:0c:74:59:68:ee:91:64:a0:01:
6a:bf:b1:2d:c5:96:7c:f8:20:70:15:18:d2:f0:9c:6c:d1:ab:
5e:85:70:9b:d7:96:07:e8:ca:63:d7:0e:34:a6:01:17:5e:f6:
67:3c:ec:fa:4a:d6:4a:b5:d0:e5:e5:90:bc:bb:58:28:e6:a9:
2c:85:a3:e8:c1:d3:77:72:2a:0d:4b:b6:2d:73:8d:57:94:21:
cf:84:78:da:28:a1:36:5e:c7:c7:af:46:b3:7f:a5:fc:bb:91:
3c:0b:ad:1d:03:30:d5:b9:ac:61:66:f1:ff:f5:d6:e0:e4:26:
c4:57:ef:19:24:7c:5a:66:66:8b:fd:c4:02:a2:28:5f:b8:41:
5d:94:de:f1:6f:54:9c:f5:03:16:a9:7f:76:ca:2a:5f:46:71:
26:6e:68:66:7a:ad:55:56:b0:82:19:1f:7f:19:9c:49:d4:c0:
f9:b6:f7:d7:e5:09:23:01:65:b7:52:9c:07:4e:7f:49:80:29:
11:ee:cb:38:11:8a:73:b9:8a:97:5c:92:a3:09:30:83:02:39:
d1:89:12:b8:12:16:1b:08:66:e7:55:fe:ac:5e:f2:2b:97:e2:
d7:8e:7a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:02 2025 by rpki-client