Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43B7DB2476DD11F0B1D32D91DAE4EC9C.roa
File: 43B7DB2476DD11F0B1D32D91DAE4EC9C.roa (raw, json)
Hash identifier: 8j9veDsridZQWpyFdCFBRiZFn0VOUJrtXGa2Tjc+VK4=
Subject key identifier: 2F:BE:DF:EA:2F:51:D1:3D:62:EF:11:BC:6B:D7:15:99:5E:C8:31:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01916F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43B7DB2476DD11F0B1D32D91DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 18:01:55 +0000
ROA not before: Mon 11 Aug 2025 18:01:50 +0000
ROA not after: Sat 04 Oct 2025 18:01:50 +0000
asID: 63139
IP address blocks: 154.93.95.0/24 maxlen: 24
154.93.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102767 (0x1916f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 18:01:50 2025 GMT
Not After : Oct 4 18:01:50 2025 GMT
Subject: CN=689a3013-5813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:3d:c8:44:cd:cb:fc:f7:20:22:01:e1:bc:
64:f1:1d:e4:27:6a:d3:7d:87:32:67:8e:9b:91:62:
3f:bb:fc:61:ce:50:5a:74:1c:b9:c0:22:de:f9:9e:
61:15:07:3f:18:4c:f1:28:31:50:4a:a8:e1:90:b3:
8f:3f:26:5a:47:d3:7c:88:c0:bc:e8:9f:e1:2e:be:
d6:cd:67:f9:05:ec:8d:8f:d8:82:f6:a0:0c:0c:41:
83:c0:a2:bf:5e:8f:c8:91:1c:4f:8e:d1:3f:60:93:
5b:93:eb:29:e0:bf:7d:22:37:e5:95:b3:a5:a3:b6:
74:c8:73:3b:ee:12:6a:86:40:eb:64:24:7f:54:9a:
c5:4f:65:15:3e:6d:e5:2d:fc:22:fa:88:04:de:9c:
c5:db:8c:a6:bb:1e:10:a5:24:5e:50:90:1e:d1:43:
0c:bb:68:66:77:1d:8f:20:53:68:b1:a9:b6:20:58:
7b:bb:1b:30:51:35:ea:e4:a7:8a:3a:78:0d:92:ff:
e9:35:71:c6:46:a1:d4:92:d3:31:16:a9:5c:03:30:
e3:be:26:66:5d:17:bc:19:df:08:88:5a:41:2e:09:
5c:3d:7a:ca:d1:12:d1:87:73:5e:b4:66:3f:24:36:
4a:15:22:9b:f8:ce:72:bc:dc:ae:f9:e2:3d:34:e4:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BE:DF:EA:2F:51:D1:3D:62:EF:11:BC:6B:D7:15:99:5E:C8:31:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43B7DB2476DD11F0B1D32D91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.95.0/24
154.93.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d9:0d:05:81:f3:6b:f5:87:9c:ff:eb:44:00:0c:36:b9:4d:
8e:cd:ea:4e:2b:35:4d:7a:35:48:1a:34:7c:41:bd:60:3b:cf:
11:ea:c6:b2:3c:c1:fc:ef:66:21:ee:d9:0d:62:9c:71:ef:5f:
b5:a8:b4:cf:b1:89:da:eb:bd:5d:e5:74:f0:21:9e:a9:08:41:
fc:6a:9a:68:bc:c4:06:34:50:c2:50:6f:56:74:51:4c:d9:2c:
77:33:56:f3:89:fe:7a:cc:4e:8d:c7:47:38:36:47:7b:64:4b:
53:df:a9:a2:bd:f1:33:20:bd:64:7e:59:99:6e:d0:c9:fa:3f:
89:b1:33:1e:a1:73:24:d9:04:64:e4:da:6b:7d:7a:9d:d3:a0:
ff:cb:02:b7:30:08:43:5d:b2:66:55:55:67:39:94:3f:db:eb:
0d:f1:06:fc:26:10:99:eb:29:21:8c:69:b9:02:43:50:5f:40:
bf:60:11:7e:c2:92:67:17:55:bd:a4:5b:71:6c:c1:23:cf:c3:
08:34:52:d3:c2:de:b0:0c:88:ae:15:4b:9c:a6:0f:f1:74:1c:
a9:98:c9:d3:ff:db:93:8d:48:7d:65:67:d6:aa:bd:fa:3a:23:
e0:fb:cf:f2:25:02:de:e0:18:d9:74:6a:73:9a:c8:79:a7:f5:
8b:5b:db:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:19:31 2025 by rpki-client