Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/078AEE6476D511F08E330EDADAE4EC9C.roa
File: 078AEE6476D511F08E330EDADAE4EC9C.roa (raw, json)
Hash identifier: +8u6CSBdqw4+9/gfNkUboznchCHlhCR+itRRwLjMxaM=
Subject key identifier: FE:9D:61:57:B5:8B:79:F3:39:A5:CE:9A:B0:D3:CA:4F:C7:51:13:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019169
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/078AEE6476D511F08E330EDADAE4EC9C.roa
Signing time: Mon 11 Aug 2025 17:02:58 +0000
ROA not before: Mon 11 Aug 2025 17:02:52 +0000
ROA not after: Wed 17 Sep 2025 17:02:52 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102761 (0x19169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 17:02:52 2025 GMT
Not After : Sep 17 17:02:52 2025 GMT
Subject: CN=689a2242-7b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:6c:fe:a6:74:7b:d8:f0:b2:97:81:ee:5a:
55:1e:78:74:40:9a:32:09:5a:56:8d:2e:90:a3:3f:
66:20:8d:af:4b:6a:1a:fc:25:49:85:12:ab:00:94:
f6:85:76:98:af:bc:56:33:76:5f:f8:d3:54:2e:7c:
d5:3a:c3:01:66:cc:c1:d6:b9:97:18:c7:eb:01:6f:
f9:bf:da:8d:96:7a:30:bc:99:51:23:29:18:64:62:
56:4e:4a:97:b3:bd:2e:18:25:20:49:97:15:f0:da:
8a:52:cf:5a:74:9a:9a:c2:10:84:fb:23:07:8b:70:
2b:af:4f:6c:00:37:a9:90:b3:78:ef:18:c7:4b:3e:
7e:5c:01:d9:ea:f5:5b:2f:81:c4:44:93:9e:d1:24:
06:b9:93:2b:14:90:39:94:57:cf:c2:93:4f:ae:ee:
c5:54:5b:87:47:09:6d:2d:92:25:2a:1c:73:6a:53:
82:3e:fd:21:00:de:78:49:6f:c2:91:af:87:98:05:
b0:f7:30:60:29:9b:10:08:41:d9:83:91:6f:c5:50:
89:1a:4b:d1:29:c7:58:5b:a0:31:ef:64:c8:d7:5e:
a7:34:81:a9:97:c9:5a:64:96:a8:36:3d:61:c3:20:
38:80:1a:df:a2:47:b2:06:e7:7f:bb:ca:8f:82:85:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9D:61:57:B5:8B:79:F3:39:A5:CE:9A:B0:D3:CA:4F:C7:51:13:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/078AEE6476D511F08E330EDADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
82:72:d9:7a:21:3c:16:8d:9b:cd:db:9c:4b:02:b8:af:b6:72:
50:a4:bb:e5:e0:ce:69:8c:f0:cd:26:61:f8:a7:fc:f6:64:44:
71:81:ea:fa:09:62:bb:23:4c:c5:f9:5f:aa:ab:40:a7:22:4c:
25:6b:03:a8:79:25:83:e0:7c:8e:eb:0f:21:cb:6c:ad:3a:23:
0c:ca:36:52:a5:41:59:49:0c:04:54:dd:48:f5:ee:8f:cb:9f:
39:ed:61:4d:1e:ab:ed:1d:a5:c5:13:85:97:f3:fe:5c:c9:9e:
e7:37:ce:f7:20:5f:8b:c4:57:a6:ac:1b:51:77:86:50:d8:0c:
f0:f0:91:3c:cc:99:c8:cf:12:65:bb:6f:3e:8d:00:0e:cc:d2:
f0:df:7e:67:62:2a:72:6e:ef:04:0c:6b:c3:02:73:42:78:9b:
e5:7c:62:8c:9b:df:9e:1d:f5:6e:e3:2a:18:ac:fd:24:75:64:
b4:23:ed:31:c4:ce:63:97:09:3d:d1:c9:34:32:b4:75:41:98:
12:f1:53:45:8c:e3:aa:99:53:21:08:a3:9d:7d:d1:bf:59:da:
d0:74:b5:72:e8:67:11:bf:c6:ce:f2:6e:6d:a9:a0:49:85:ed:
43:18:27:18:b7:ee:29:0c:53:d2:c5:db:8e:9c:72:14:4e:38:
35:4e:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:38 2025 by rpki-client