Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9615C0541B11F09486FDDADAE4EC9C.roa
File: 5F9615C0541B11F09486FDDADAE4EC9C.roa (raw, json)
Hash identifier: kTcQCJ7wH2r1l/GxbrG5ij7WpCKBa/YSkZUSEWuJlCE=
Subject key identifier: EC:3C:AC:21:54:2B:3B:86:C2:AD:C8:AB:C5:88:59:BC:21:72:82:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018947
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9615C0541B11F09486FDDADAE4EC9C.roa
Signing time: Sat 28 Jun 2025 12:28:20 +0000
ROA not before: Sat 28 Jun 2025 12:28:14 +0000
ROA not after: Tue 07 Jul 2026 12:28:14 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100679 (0x18947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 12:28:14 2025 GMT
Not After : Jul 7 12:28:14 2026 GMT
Subject: CN=685fdfe4-28a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:c1:ee:20:1e:7d:75:ab:47:36:94:ca:28:
40:3e:6a:3c:5b:87:af:cf:3b:ae:05:08:41:2a:0a:
8c:b4:2c:70:6a:95:64:9b:c6:46:40:12:14:2f:1a:
25:10:b5:a5:be:bf:e0:de:03:90:24:61:c4:9f:d8:
9b:e1:8d:4b:1a:b0:a9:c1:ad:63:86:74:f5:cc:fa:
bc:5b:fd:8e:64:7d:9c:9a:89:cd:a2:17:43:04:86:
e2:6f:78:ea:32:1b:0f:e1:f9:44:6c:b1:d3:47:07:
ed:76:2e:83:2c:b4:4e:35:ad:fb:14:7b:38:54:cf:
b1:b6:4d:57:da:a5:2f:a1:9e:c9:50:d5:a2:9f:b4:
cb:2c:a1:a5:eb:72:9a:60:d2:ab:b0:21:56:c8:95:
30:80:6c:a7:ea:96:4c:d7:27:cd:ce:be:cf:05:7e:
0c:2a:cd:09:16:c1:66:44:3a:af:18:e4:51:d6:ed:
f4:82:4a:79:f2:dd:c3:71:51:ae:7f:3c:83:a9:32:
5e:03:b8:43:42:8a:96:20:88:da:10:c3:32:d2:49:
74:34:9b:b5:c5:09:86:41:15:7b:3e:1c:fd:63:5b:
1c:01:3d:76:e7:f7:6e:ce:89:29:c4:0b:9e:a5:fa:
26:a4:05:6e:2a:12:ab:bf:b2:30:a0:f4:bc:7f:1b:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3C:AC:21:54:2B:3B:86:C2:AD:C8:AB:C5:88:59:BC:21:72:82:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9615C0541B11F09486FDDADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:94:13:05:ef:26:d0:5b:40:34:71:2f:40:0c:98:62:e5:31:
a8:6d:33:a7:b6:68:14:5c:ea:cb:80:f5:24:0c:8d:30:03:9a:
f9:2b:7b:38:51:af:98:67:98:b0:b8:86:51:7f:d0:d5:91:9a:
29:89:44:6f:c5:45:1e:04:a8:c3:dd:5f:7b:05:1e:44:9f:f5:
4e:82:e5:3b:d5:9c:12:e6:fa:02:3d:b7:d8:dc:3d:05:fb:b2:
dd:33:54:bf:1c:b1:78:dc:0f:2c:8a:8c:ec:f2:30:e8:ca:c3:
32:78:dc:48:da:9d:a4:55:d7:5d:de:b2:b9:0e:44:22:92:a2:
07:50:01:24:35:4c:ea:51:5a:7b:df:bd:c7:e3:38:4e:4f:80:
31:79:a9:54:4e:62:14:84:af:92:82:03:8e:c8:02:4e:21:7d:
12:1f:0d:c4:a0:e8:01:b3:6d:01:59:6a:78:9c:8a:ab:f4:4f:
76:a0:d7:9d:64:fa:54:83:ef:28:2d:ce:4c:bc:c3:c0:c1:a7:
08:bf:72:4d:83:2b:f4:e9:9c:d9:a1:0b:7f:35:58:6e:a5:aa:
4c:4c:bf:bd:7a:f1:45:10:1f:ee:63:90:31:f8:79:83:51:da:
a2:9d:c5:ff:1b:9d:98:d9:46:42:9f:c1:a4:cc:ff:37:1b:0b:
9a:c6:39:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:48:05 2025 by rpki-client