Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29A9915A754811F0B036C8C1DAE4EC9C.roa
File: 29A9915A754811F0B036C8C1DAE4EC9C.roa (raw, json)
Hash identifier: B7UEno0u6inWKtT4ITVGPXPOWL7Q9MpojfMTaSgiclY=
Subject key identifier: DB:0F:69:44:6D:56:7B:F7:33:33:A0:95:4E:7C:6B:AE:94:8B:80:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019143
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29A9915A754811F0B036C8C1DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 17:42:05 +0000
ROA not before: Sat 09 Aug 2025 17:42:00 +0000
ROA not after: Sun 05 Sep 2027 17:42:00 +0000
asID: 45753
IP address blocks: 154.212.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102723 (0x19143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 17:42:00 2025 GMT
Not After : Sep 5 17:42:00 2027 GMT
Subject: CN=6897886d-82e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:c3:58:d8:23:69:c2:07:0d:af:f0:45:30:
95:21:97:c8:d6:38:1c:1b:43:89:77:a4:8d:33:11:
6b:17:37:d5:05:39:67:f9:d3:29:02:4f:63:2a:5d:
c9:02:33:17:f2:37:59:f3:94:35:17:5a:f0:8a:36:
88:d1:92:27:73:c7:75:43:a0:95:91:0e:04:d2:34:
5a:4b:46:d7:53:25:cb:52:07:f1:a6:46:0e:5c:3a:
5a:67:ef:f6:41:c6:49:6c:5b:59:96:4b:d2:0c:69:
a0:7b:07:ed:5d:01:63:a6:89:49:f5:81:08:0d:81:
a7:bf:85:32:5f:8a:73:4d:ed:c2:f9:fa:22:d1:d9:
cc:66:09:0a:6b:9c:4c:24:a2:55:5e:96:2f:d4:ee:
ba:72:b1:ab:de:fc:46:64:32:d6:2d:20:75:bb:d2:
bc:a5:94:db:bf:43:ce:a0:0c:0f:98:9f:0e:5e:d4:
50:cf:96:30:61:e2:cd:e7:1b:75:c5:43:ba:69:ed:
30:d5:cc:96:ea:96:7e:b7:fe:f3:b0:54:ca:fc:1f:
9a:50:07:15:8f:2e:c1:a4:9c:50:2e:bd:3d:8d:04:
6f:1b:b7:bd:11:16:bf:82:b2:80:46:51:1d:2b:5f:
93:8c:67:8f:c4:fd:90:5c:2e:c5:a0:38:df:2b:bc:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0F:69:44:6D:56:7B:F7:33:33:A0:95:4E:7C:6B:AE:94:8B:80:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29A9915A754811F0B036C8C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.161.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:89:7d:99:ce:d9:8c:3e:db:00:29:c2:df:5e:d6:2c:f4:03:
51:49:68:84:05:b5:b6:65:44:8a:43:3c:78:ac:61:20:ba:dc:
f5:0a:8e:f9:a0:d3:28:79:26:6f:55:0c:c8:ce:6b:47:70:7e:
ce:71:fb:09:e5:a1:4b:1c:3e:46:49:e7:ec:77:40:59:75:fe:
a4:0c:c7:af:7e:58:84:88:b7:77:2f:f2:21:8a:c2:56:cb:52:
4c:b2:66:98:17:31:26:25:2f:ed:1c:83:5d:33:96:e3:f1:b8:
03:29:ff:20:ba:5a:ec:55:ec:11:06:4f:71:90:1d:7d:01:14:
38:41:4a:76:90:b7:6c:15:be:11:7f:d7:4b:a7:c1:1e:b6:a1:
6d:d5:0c:3e:89:31:82:4f:4f:c5:dc:e1:d8:9b:89:10:8a:90:
05:32:c0:f3:54:7d:c0:ab:11:2a:16:05:5b:d6:5e:de:63:5d:
0c:e1:92:75:1a:fc:f8:89:bc:a5:17:6a:10:4d:c4:7e:5b:f9:
0d:14:71:ec:c2:e6:df:2e:c7:c7:a3:91:c5:2e:0c:a4:67:00:
e3:2d:96:f4:72:13:4f:cd:6c:9c:08:29:d0:1b:4f:2a:0b:27:
b5:bc:fc:14:df:8f:9f:03:5a:17:3c:6b:7f:ab:6e:f2:32:04:
e9:c5:75:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:34:21 2025 by rpki-client