Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/431C4916781811F0A91B94A4DAE4EC9C.roa
File: 431C4916781811F0A91B94A4DAE4EC9C.roa (raw, json)
Hash identifier: Hmx056pTFamGOSGpL6NoA1YmawmoAvx9PJmoIR9UqG4=
Subject key identifier: 34:82:81:88:44:98:A6:91:36:73:42:FF:D3:E2:23:1A:65:68:A9:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01918A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/431C4916781811F0A91B94A4DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 07:36:45 +0000
ROA not before: Wed 13 Aug 2025 07:36:40 +0000
ROA not after: Fri 19 Sep 2025 07:36:40 +0000
asID: 206848
IP address blocks: 154.90.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102794 (0x1918a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 13 07:36:40 2025 GMT
Not After : Sep 19 07:36:40 2025 GMT
Subject: CN=689c408d-08b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:6d:85:32:b5:83:b6:fc:51:30:4a:a6:0f:
1b:e5:e2:52:1e:f1:c9:ba:a0:01:98:19:0e:24:b1:
8e:df:dd:32:b3:37:f9:a6:91:92:79:fd:31:28:46:
20:b1:c0:86:96:f8:2c:2c:45:1b:10:ac:42:7b:b9:
66:ee:b5:7f:f5:af:01:d0:63:e0:1b:16:39:62:28:
e6:52:5c:ab:51:0c:71:93:c4:68:ae:ee:81:54:1d:
bc:b1:d0:8a:6e:28:04:cb:32:4a:f2:73:06:3b:54:
f5:e8:b0:c9:9f:ab:21:d1:ec:c4:ce:8e:66:43:55:
41:10:76:53:cb:59:e5:55:21:f8:f8:f8:31:ba:9c:
bf:cc:e5:7d:e0:99:16:57:c9:a6:bd:4c:c0:69:1b:
c8:e6:1d:ff:7b:97:4f:7f:d6:39:ca:cc:d1:47:b6:
51:0f:47:ce:eb:1c:3b:0c:5d:d9:0d:3f:4b:83:03:
aa:97:16:3c:31:01:cf:d3:34:3c:7f:34:de:53:4d:
f1:65:a6:6f:f8:22:49:1f:0a:1c:b0:4b:cf:ff:da:
a9:8b:79:26:ac:ad:27:49:fb:e3:56:a1:f2:0f:b8:
99:8e:71:25:3d:67:39:1c:ca:80:93:34:72:1f:b9:
5f:b1:69:08:a1:af:6a:87:16:01:e0:7f:cc:a0:a6:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:82:81:88:44:98:A6:91:36:73:42:FF:D3:E2:23:1A:65:68:A9:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/431C4916781811F0A91B94A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.75.0/24
Signature Algorithm: sha256WithRSAEncryption
86:0e:be:fb:82:a3:36:76:19:a4:86:3a:28:bb:12:57:ad:b2:
5a:05:d5:05:10:89:7d:5c:19:ed:67:00:c5:66:41:c5:fd:bc:
ea:c9:68:8a:45:85:c5:b0:4c:30:1b:9d:e3:50:ad:35:c6:a2:
c5:be:63:59:d2:ba:e4:01:65:88:a0:95:2f:26:45:b4:87:07:
c7:c6:40:f4:f3:a7:49:5d:42:c3:90:6e:bc:23:39:99:5b:4b:
46:24:ad:17:7e:ec:a7:ba:d3:ee:46:eb:d4:40:21:6a:b5:75:
b8:2d:70:8b:11:a9:e4:6b:32:42:6d:e4:3c:46:25:8f:d3:3a:
ed:aa:82:c1:10:80:20:fe:da:50:a1:52:8f:29:c2:76:1e:99:
58:45:f7:f8:d3:64:0d:88:fe:09:80:fb:99:75:e1:67:f3:27:
8f:37:7c:13:41:9d:42:25:b3:90:28:fc:a9:b7:cb:91:cb:67:
df:48:a1:2e:8f:e2:d7:13:96:a6:26:bb:6c:cb:28:00:e9:b6:
97:c6:89:1e:b1:20:b0:38:e8:81:db:da:39:e9:a9:64:51:c4:
81:fa:6d:05:e4:9f:b9:37:58:d2:f8:37:71:c8:a8:a0:f3:b8:
55:e3:47:2d:de:89:a9:2e:9d:17:6f:cd:6b:67:90:94:6a:fd:
df:ad:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:21 2025 by rpki-client