Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8D1E5E7F4511F0B54C9A8BDAE4EC9C.roa
File: 2B8D1E5E7F4511F0B54C9A8BDAE4EC9C.roa (raw, json)
Hash identifier: q0m5i/pLtc7ThjNhLaH0q+s5Dzgh0YooOIOynWWYsK8=
Subject key identifier: 68:44:C9:37:70:DB:7C:7F:0D:35:1F:62:AD:1C:66:6F:80:3D:05:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019497
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8D1E5E7F4511F0B54C9A8BDAE4EC9C.roa
Signing time: Fri 22 Aug 2025 10:45:51 +0000
ROA not before: Fri 22 Aug 2025 10:45:46 +0000
ROA not after: Sat 27 Sep 2025 10:45:46 +0000
asID: 6079
IP address blocks: 154.81.200.0/21 maxlen: 24
154.83.48.0/20 maxlen: 24
154.90.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103575 (0x19497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 22 10:45:46 2025 GMT
Not After : Sep 27 10:45:46 2025 GMT
Subject: CN=68a84a5f-0d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:d9:91:2d:1e:5f:0d:2a:c8:2f:28:2d:7e:
75:cf:c7:41:d7:b0:a3:a8:f9:7e:bb:79:70:5d:55:
23:18:32:a2:2e:7e:0c:02:2e:80:5f:df:94:27:b7:
8f:dd:f7:41:ee:1c:d8:f7:2b:dd:71:e7:b1:49:25:
e1:09:f3:47:c1:6a:6e:cc:f4:46:09:5b:2e:4f:03:
4d:47:2a:95:2b:19:9b:ff:16:07:a2:02:7e:b2:5a:
5a:ea:99:03:d8:11:42:44:4f:58:0a:e1:30:1b:1b:
84:3b:94:a1:f7:54:82:1a:6f:1d:91:bd:62:29:85:
c5:ac:61:d6:07:50:ce:5a:2d:16:ce:fc:5e:7b:42:
ef:78:26:9c:bb:98:15:d1:0c:f5:2a:a1:4e:0d:45:
bc:9b:b7:7c:fc:0c:bc:cc:14:5e:0b:b3:68:11:6f:
e0:55:61:8c:ee:9c:6b:07:64:50:38:5f:06:c5:21:
b3:8f:3a:32:09:03:bc:b8:3a:5d:03:e6:63:d7:e5:
1b:1a:d0:28:af:75:14:f1:eb:ab:10:cb:c2:b3:fb:
62:c5:83:02:bb:80:fe:4a:f9:16:89:bd:68:6f:b9:
c5:fa:18:8d:c4:ff:99:60:f9:1d:76:6e:a5:56:46:
ff:5d:cc:1f:d4:eb:57:fd:c6:de:57:88:07:49:9b:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:44:C9:37:70:DB:7C:7F:0D:35:1F:62:AD:1C:66:6F:80:3D:05:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8D1E5E7F4511F0B54C9A8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.200.0/21
154.83.48.0/20
154.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
95:0b:20:17:16:ab:77:e1:ee:14:0f:66:77:16:7e:19:92:91:
0c:28:04:b5:b7:a1:43:5e:e6:cc:10:fb:26:95:c1:1c:8a:f3:
aa:9d:54:f9:98:d4:d1:5f:2d:e8:03:78:fe:80:63:61:20:26:
63:f0:0e:02:c3:98:7e:97:e6:8f:df:8a:50:19:b1:b4:08:d3:
89:e3:06:18:e0:49:47:26:b8:95:d1:76:c5:ac:f0:fe:ea:54:
96:d6:64:4e:48:58:19:9e:d7:ef:7d:0e:f9:a2:44:a7:c4:2a:
52:70:55:f8:43:a3:cc:e2:fd:00:00:bf:d2:1f:5c:0c:77:97:
09:69:33:00:74:46:e8:c3:9a:4c:2b:47:09:bd:fc:4d:d4:12:
87:b4:f1:0b:db:d6:cc:30:d7:c5:2d:c0:79:59:c6:cd:ae:d8:
93:53:c8:c7:9f:be:c7:27:35:29:c7:7b:ce:91:38:e3:5d:97:
82:45:22:1c:c6:17:22:f9:3c:5c:e3:12:e6:c9:6d:0d:f4:19:
89:e6:7a:90:2b:11:e0:ab:39:b9:39:dc:68:5a:4f:82:63:35:
d6:d2:2c:a9:1a:46:0e:81:d9:13:32:47:5d:84:c5:e8:60:52:
23:f7:bf:e5:5d:42:37:55:b5:1b:ad:98:be:1e:ca:c3:ef:06:
03:a0:01:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:55 2025 by rpki-client