Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16F0A7F64C6211F0BD116B9EDAE4EC9C.roa
File: 16F0A7F64C6211F0BD116B9EDAE4EC9C.roa (raw, json)
Hash identifier: pi+qNPTX7jX6XHRAlioxF6G6UTJHj9Z9Jprl8WZLHeY=
Subject key identifier: 52:52:92:F6:F5:8E:A0:D0:FE:7C:7A:5F:FF:EB:18:20:9B:43:94:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018761
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16F0A7F64C6211F0BD116B9EDAE4EC9C.roa
Signing time: Wed 18 Jun 2025 16:34:23 +0000
ROA not before: Wed 18 Jun 2025 16:34:18 +0000
ROA not after: Fri 12 Sep 2025 16:34:18 +0000
asID: 398478
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100193 (0x18761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 16:34:18 2025 GMT
Not After : Sep 12 16:34:18 2025 GMT
Subject: CN=6852ea8f-40ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:7f:9d:ff:56:ff:be:19:ea:70:94:15:bd:69:
b4:2f:a1:09:dd:dc:f6:f8:de:52:b5:14:65:b0:bf:
e0:9b:6f:d2:0a:37:f4:8a:02:91:c8:6e:7a:27:59:
d2:ff:27:e3:35:7a:42:67:f7:02:09:41:e3:6d:0a:
d9:6b:bc:14:b5:3a:6a:72:c8:2c:8c:81:86:f5:e4:
d7:5a:33:0b:fc:d8:5a:59:b0:ca:f5:6b:d0:6d:fd:
b6:c2:53:59:80:53:84:df:8e:3d:b6:84:87:a3:55:
2f:20:29:6e:fc:24:8e:fc:67:fe:87:ea:a1:32:73:
f5:4e:8f:d1:10:82:b4:50:40:bb:b0:4e:10:09:ad:
21:72:78:96:a6:29:8e:36:71:01:b0:c9:39:a6:cc:
3d:ea:1d:18:10:1c:fe:13:f2:f3:bd:b4:b3:27:d8:
56:0e:a8:92:4f:44:03:07:84:48:67:32:73:8f:6e:
7c:45:0c:1b:a8:e3:0e:42:a1:c3:75:6e:a7:fb:c6:
b9:6a:81:1b:7f:00:7c:01:23:6d:54:6c:f5:22:0a:
6b:64:4f:44:bb:18:51:be:06:ae:48:91:2b:6b:c0:
80:13:c3:39:1d:ab:14:8a:df:8a:c1:61:57:a3:19:
bb:03:a7:72:5e:d3:a2:68:1c:16:ef:92:54:bf:f7:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:52:92:F6:F5:8E:A0:D0:FE:7C:7A:5F:FF:EB:18:20:9B:43:94:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16F0A7F64C6211F0BD116B9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:43:f8:f2:7b:56:0d:35:ba:15:ab:d4:2b:56:9d:be:5b:d3:
14:02:e1:16:0f:59:52:95:19:6b:78:68:2d:ff:87:db:4c:f9:
4d:4e:34:23:ba:39:9a:24:67:5a:5f:f1:62:49:78:cf:e7:b7:
68:e5:c3:b1:90:33:53:2f:24:94:a6:ee:75:e8:50:e5:f1:65:
b1:8a:7f:82:cf:be:40:08:1f:62:80:95:c7:e2:2c:ff:d2:a3:
9e:71:22:94:4e:37:b5:cc:fb:25:21:b1:ec:48:47:b4:64:90:
6b:8b:e5:6e:31:6a:c7:af:f8:c5:db:f5:a2:f4:59:53:70:c7:
ec:26:15:35:2d:86:16:64:76:18:bc:9f:14:7d:79:0d:ac:b8:
a2:bf:33:95:0c:ac:1e:97:10:c0:1b:1f:46:eb:08:6f:24:53:
b1:bf:41:a0:8c:6f:40:92:60:99:54:55:18:83:eb:f7:fc:2e:
34:ef:a7:e8:ba:9d:c7:6c:42:d2:d0:bc:65:45:a7:88:48:6d:
39:39:a6:88:da:a8:90:64:a3:09:24:f9:87:a8:bf:91:a6:5d:
fc:0a:b9:e8:cb:1f:61:73:c1:98:e6:7a:8f:7f:46:a1:e6:b6:
82:e8:23:53:cc:4a:91:47:00:f8:ee:a4:4d:cd:8e:27:91:63:
58:0c:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:58:51 2025 by rpki-client