Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F1603679BD11F0AAF124DBDAE4EC9C.roa
File: 30F1603679BD11F0AAF124DBDAE4EC9C.roa (raw, json)
Hash identifier: srVCUZiWehAlSADJUn7vlSmughrnHlRnRy3KByht6aI=
Subject key identifier: 74:43:FE:C3:B9:CA:C6:C9:5C:DB:C1:CE:B4:E2:DD:9C:FF:EB:FC:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F1603679BD11F0AAF124DBDAE4EC9C.roa
Signing time: Fri 15 Aug 2025 09:49:53 +0000
ROA not before: Fri 15 Aug 2025 09:49:48 +0000
ROA not after: Mon 22 Sep 2025 09:49:48 +0000
asID: 203020
IP address blocks: 154.90.192.0/19 maxlen: 24
154.94.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102872 (0x191d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 09:49:48 2025 GMT
Not After : Sep 22 09:49:48 2025 GMT
Subject: CN=689f02c1-87b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:92:e6:ea:62:6b:d3:10:08:1e:58:03:84:
61:1a:75:7e:98:fd:6b:a5:ba:21:91:b0:19:64:0a:
60:70:26:86:e1:73:4d:04:20:e7:87:f4:5f:97:eb:
7d:7e:97:9d:80:bd:91:b3:86:44:a8:00:5e:d5:7c:
dd:1f:cc:b5:24:11:b3:b1:e2:0f:a3:f6:8b:38:b5:
c5:9a:4c:0a:21:c0:b7:b9:14:d9:22:61:a5:f6:81:
76:fb:06:03:e8:37:7f:46:38:ec:63:08:76:7e:92:
18:96:c8:77:ae:18:51:cf:e7:4c:a3:d8:d1:03:d1:
84:56:a2:20:80:6b:d6:3e:7e:07:93:bb:b0:72:20:
0c:76:51:21:46:fe:28:1a:11:1a:15:66:0a:3a:7d:
97:8c:30:27:67:0f:c1:8d:ab:1a:cb:f0:03:f0:97:
2b:cc:ce:83:70:e2:f3:d3:63:be:1b:32:a9:e8:42:
01:59:5a:ac:35:be:0b:8d:97:bf:d3:6a:e2:e7:3a:
ce:62:fb:00:14:ee:4b:f5:73:b0:ed:ee:a3:2b:13:
e1:f8:4b:e4:c5:49:ff:8d:e0:af:be:e7:95:ca:4c:
8a:94:3a:bc:f4:96:4e:e1:7e:2b:e2:78:fd:5d:8a:
9a:d2:56:ab:a9:95:55:1b:c1:de:7a:c2:70:be:46:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:43:FE:C3:B9:CA:C6:C9:5C:DB:C1:CE:B4:E2:DD:9C:FF:EB:FC:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F1603679BD11F0AAF124DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.192.0/19
154.94.128.0/18
Signature Algorithm: sha256WithRSAEncryption
00:e3:c8:f3:5c:e1:4f:5e:d0:a1:1e:db:7d:ac:1b:0d:1f:e5:
8a:c3:0d:02:5f:7c:5f:ad:1c:c1:5a:2d:e2:c8:7d:66:fe:30:
46:e0:57:2a:51:3c:c3:67:58:92:cd:49:1f:ef:9b:f2:ff:02:
c7:ba:28:79:e9:c2:aa:88:27:cf:b5:fb:9e:21:50:2e:c2:a8:
8f:f7:e7:8e:f0:72:c5:35:60:ee:cf:b7:27:8a:7d:4e:43:f9:
14:43:24:e3:b2:57:4d:82:63:1c:db:03:9c:61:84:10:6c:72:
f2:64:77:fd:b5:de:61:75:c1:48:f3:ed:f5:cc:88:be:af:de:
9f:04:82:68:49:de:63:61:9c:a6:dc:e6:b7:7c:fb:d7:2a:fc:
18:b4:93:43:05:09:73:46:e2:1b:42:d4:ce:b9:b0:0b:23:76:
30:5a:51:21:12:d1:2b:f6:e6:6e:3a:28:d7:cc:88:7c:34:b6:
a2:fc:1b:3f:6b:ed:83:f0:d6:c6:41:f4:27:0c:20:c9:6c:db:
16:27:e6:72:15:32:a0:a7:23:ea:5b:98:97:cb:e2:97:d7:88:
24:47:62:a3:47:02:24:ce:26:8a:96:73:82:00:04:ca:61:a8:
46:55:2f:ff:73:aa:2a:e8:42:96:7b:d6:56:af:77:d6:a9:7a:
99:e3:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:59 2025 by rpki-client