Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42AA1D7C7E9F11F08BDF81C1DAE4EC9C.roa
File: 42AA1D7C7E9F11F08BDF81C1DAE4EC9C.roa (raw, json)
Hash identifier: E10F9OnMclmLHlV4Lj+ZJSyqsZ4ySTiMhRmMoeC3rBk=
Subject key identifier: 0D:11:B8:64:C4:60:84:9D:F3:C6:1F:F5:E7:13:ED:49:81:5F:BC:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0193AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42AA1D7C7E9F11F08BDF81C1DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 14:58:13 +0000
ROA not before: Thu 21 Aug 2025 14:58:08 +0000
ROA not after: Wed 21 Aug 2030 14:58:08 +0000
asID: 17561
IP address blocks: 154.205.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103343 (0x193af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 14:58:08 2025 GMT
Not After : Aug 21 14:58:08 2030 GMT
Subject: CN=68a73405-b9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b5:81:d8:49:ab:c5:3f:6d:28:54:76:c3:8c:
e8:bb:36:cf:f7:f5:06:1d:c9:dc:95:ec:c3:22:b2:
91:d2:3f:9b:2a:2b:de:59:be:e8:f4:57:e0:fc:0a:
8f:c8:9d:24:9b:76:41:ee:26:69:d1:c4:b3:42:29:
86:7c:00:07:c8:42:43:08:02:e4:d1:7e:fe:bb:04:
98:a5:14:6f:6b:6a:a6:c3:d1:2b:72:8f:ad:8e:54:
c9:70:6e:bc:b7:c4:8b:b6:12:6f:58:51:56:a9:f2:
ee:a7:14:d8:93:41:18:f3:b7:5a:63:c1:78:d1:fc:
b0:ac:c6:5b:4b:24:60:3d:9d:05:26:51:fa:2a:39:
ae:0c:46:2e:b2:08:30:2e:70:17:be:29:bb:21:e3:
76:b7:6e:16:68:2b:4c:fe:1b:fd:79:f3:4e:de:2f:
95:98:ba:90:42:f2:7a:27:65:d6:1c:e2:81:67:55:
2d:22:3a:34:ff:5a:da:6c:6f:2f:ee:0d:3c:73:99:
62:73:75:70:bd:bc:bd:15:5f:16:8d:7c:bf:d1:82:
cc:d5:6d:b3:3e:2c:47:54:f0:a1:77:f6:27:7c:7c:
2a:f3:59:be:89:94:a5:bb:6f:6c:ad:50:c0:db:71:
2a:c5:34:b2:0d:ef:a1:55:1c:ca:24:6e:5c:05:21:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:11:B8:64:C4:60:84:9D:F3:C6:1F:F5:E7:13:ED:49:81:5F:BC:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42AA1D7C7E9F11F08BDF81C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c3:5b:f1:d4:be:1e:a2:8c:e7:ac:32:d0:41:f9:05:1a:f1:77:
70:84:26:32:04:66:a3:27:14:f8:1a:95:9e:4d:bc:dc:e5:e8:
3a:66:6b:a2:3d:3d:00:73:62:c0:40:e0:3b:80:37:85:13:5e:
1b:8a:17:75:a4:fd:79:a2:0b:b1:4c:8b:eb:68:87:bc:12:ee:
f9:27:9d:7c:dc:33:78:98:cb:e5:d3:1f:af:f8:ba:c0:f2:7a:
46:77:15:75:a5:63:82:10:e7:3a:a4:eb:ac:8f:66:fe:8c:d7:
4c:67:35:2f:df:3e:1d:23:ae:a3:f0:2f:2a:90:fe:f7:d0:e1:
7b:1f:0d:e1:55:f8:0c:57:ba:b3:a0:62:88:6d:9a:5b:98:ab:
bb:91:90:57:8d:ca:8a:12:21:96:7e:84:95:64:ce:d9:3b:71:
16:e4:6f:af:06:30:11:e2:f3:c2:51:61:d8:7d:ee:b1:ec:77:
d2:ae:94:49:74:ca:fb:b4:23:46:ea:a9:33:ed:c8:4a:66:06:
4b:d5:54:28:6b:47:ca:75:1a:3d:b9:30:bd:c8:4b:55:5a:0a:
6a:fa:49:58:77:00:15:ba:b5:a7:1e:15:b0:a1:54:bf:43:0e:
63:dd:96:34:88:95:31:bc:19:02:0f:e6:81:de:20:55:7d:60:
cc:4c:36:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:15:00 2025 by rpki-client