Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/383658D6512411F0AD8DFD8FDAE4EC9C.roa
File: 383658D6512411F0AD8DFD8FDAE4EC9C.roa (raw, json)
Hash identifier: tw3tti9red0pX/ywVpiSm87Nuc3HQoSD4yphgK603t8=
Subject key identifier: CA:3A:0D:66:53:50:35:C1:A4:BB:FD:2E:AC:65:1B:E1:F1:AF:F3:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018886
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/383658D6512411F0AD8DFD8FDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 17:54:06 +0000
ROA not before: Tue 24 Jun 2025 17:54:01 +0000
ROA not after: Sat 09 Aug 2025 17:54:01 +0000
asID: 138915
IP address blocks: 154.223.62.0/23 maxlen: 24
154.223.64.0/24 maxlen: 24
154.223.65.0/24 maxlen: 24
154.223.66.0/23 maxlen: 24
154.223.68.0/23 maxlen: 24
154.223.70.0/23 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100486 (0x18886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 17:54:01 2025 GMT
Not After : Aug 9 17:54:01 2025 GMT
Subject: CN=685ae63d-7601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:7e:e5:c0:99:be:5a:15:b5:40:de:c8:3a:
eb:d4:6c:d8:ef:d2:7c:18:67:b2:e1:8f:56:9d:fc:
87:69:2d:12:6f:85:36:cd:d0:ae:5e:d9:c4:1b:ae:
60:b0:47:16:e3:72:58:c6:8c:fd:ef:76:7c:71:7e:
4c:10:ca:92:d8:3f:5a:ac:ef:f8:f9:f3:bb:75:90:
e4:04:e1:37:b1:1c:ae:80:e7:b0:58:a5:27:b7:95:
4f:95:8e:d4:18:81:90:b0:43:3a:3c:6e:2e:85:84:
43:85:08:6e:95:57:5e:e8:30:09:04:5a:28:46:70:
6e:01:65:3f:60:83:8a:34:19:d1:c5:e3:4d:33:b0:
f9:d2:9a:ab:9e:56:c8:c7:6f:7e:0f:66:d1:7c:44:
fa:af:8d:8c:24:f9:e7:ba:96:f0:11:48:06:39:88:
4f:01:34:c8:fe:d7:4d:5e:8c:1b:62:d0:fe:d2:56:
6b:cf:a7:ee:9e:ac:39:65:be:2c:44:c7:45:d3:9b:
67:29:70:27:97:4f:a8:8f:c9:19:6f:50:11:b0:ee:
86:23:b5:42:22:2f:6b:45:46:53:d9:56:7a:79:f6:
d0:7e:f2:9f:6c:fa:ae:10:6a:78:9f:39:11:9a:d1:
dc:98:1e:c6:01:f8:65:c2:ed:3a:a2:97:b0:58:16:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3A:0D:66:53:50:35:C1:A4:BB:FD:2E:AC:65:1B:E1:F1:AF:F3:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/383658D6512411F0AD8DFD8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.62.0-154.223.79.255
Signature Algorithm: sha256WithRSAEncryption
45:16:5d:6f:4f:46:bd:98:b8:49:da:36:63:78:66:d6:10:40:
32:e6:ed:60:ea:f4:d2:ef:d7:b9:e5:ed:38:88:ae:e7:68:2a:
57:f9:94:92:d3:a2:0f:6b:91:77:13:c5:f9:64:12:7e:e2:eb:
c8:f2:b9:80:b3:01:37:0c:2d:1e:dc:b5:89:85:bc:24:80:c4:
31:a2:70:6f:c1:f9:f0:f0:fb:18:55:11:98:47:4c:da:49:e2:
0c:39:9c:3b:53:da:17:ec:79:2b:2e:79:98:1d:51:15:37:cc:
d0:0f:a4:f7:b8:9a:29:b5:fb:5a:e5:c0:f1:a0:e4:47:40:16:
31:d0:f7:07:12:29:1d:a6:57:da:3a:2e:57:5f:58:7e:e9:72:
51:83:c5:3c:d6:fe:d4:c6:b4:44:c5:d3:59:3f:a6:75:8f:07:
73:7d:0c:0d:8b:6d:00:aa:66:aa:8d:72:af:72:24:64:60:4f:
d0:e3:96:b0:b3:14:55:16:48:9c:66:8e:55:5e:0e:6c:d7:d8:
d3:72:bb:7b:4f:29:35:8b:7d:70:18:36:bf:a7:84:08:52:15:
1a:98:fa:14:83:8d:65:ff:56:8d:e6:38:c5:60:28:28:6e:8e:
8d:c7:81:8d:16:4b:51:38:bd:8c:f4:e3:b2:98:d7:5a:11:69:
a0:7d:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:43:16 2025 by rpki-client