Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65DDCFB250F711F0AC1A66EDDAE4EC9C.roa
File: 65DDCFB250F711F0AC1A66EDDAE4EC9C.roa (raw, json)
Hash identifier: +4esWJBAFHNlWpD7vpYRO+c93iBrznpR9XNH1mEKPdc=
Subject key identifier: 6F:3E:06:B7:93:8B:D7:38:73:78:0B:35:5B:36:DB:98:68:C7:A9:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018856
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65DDCFB250F711F0AC1A66EDDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 12:33:15 +0000
ROA not before: Tue 24 Jun 2025 12:33:10 +0000
ROA not after: Fri 01 Aug 2025 12:33:10 +0000
asID: 214413
IP address blocks: 154.193.136.0/21 maxlen: 24
154.193.144.0/22 maxlen: 24
154.193.148.0/22 maxlen: 24
154.193.168.0/22 maxlen: 24
154.193.172.0/22 maxlen: 24
154.193.176.0/22 maxlen: 24
154.193.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100438 (0x18856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 12:33:10 2025 GMT
Not After : Aug 1 12:33:10 2025 GMT
Subject: CN=685a9b0b-841f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:c1:04:2e:28:e9:47:ed:e1:1b:91:6d:c1:
24:7b:44:59:a7:4e:73:e1:68:44:50:6c:b0:28:1a:
e0:14:09:d9:76:0c:ce:2e:e3:da:b7:c4:69:3e:34:
0a:fe:82:90:76:cb:97:f2:f9:82:91:ca:1c:85:46:
bd:d0:4b:01:2d:7f:a6:9a:41:6f:b5:26:42:1b:1a:
2b:eb:2b:59:03:43:2e:02:03:bf:13:42:a9:6e:0c:
e8:31:dc:73:53:27:83:8e:8c:e3:08:89:54:4c:7d:
ed:79:b3:c6:5d:00:f1:f7:7a:dc:13:c4:6f:0f:c8:
c4:d3:51:73:f0:a3:70:eb:7b:77:e3:b3:fa:d7:0f:
46:d0:8a:e4:fe:e7:35:e7:d7:96:1c:d8:69:29:14:
cf:23:d3:58:7b:72:15:a2:95:aa:64:5e:d5:52:16:
95:6f:c1:e9:08:71:4b:c9:67:22:90:53:1f:a7:9c:
53:e3:2e:e4:1a:e5:25:16:ec:95:b6:1d:aa:bc:17:
76:7e:f2:8f:fa:23:2d:54:28:fd:94:d6:9d:74:7c:
4b:85:fd:94:7c:8c:49:76:46:fa:39:8f:74:9b:25:
bd:e0:49:6a:d9:6f:2a:eb:37:34:47:2f:57:f6:c1:
91:fb:ea:d2:14:83:b9:6f:02:cb:30:9e:bc:5d:c9:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3E:06:B7:93:8B:D7:38:73:78:0B:35:5B:36:DB:98:68:C7:A9:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65DDCFB250F711F0AC1A66EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.136.0-154.193.151.255
154.193.168.0-154.193.183.255
Signature Algorithm: sha256WithRSAEncryption
d1:31:5c:95:c4:40:18:ca:4a:05:c3:9a:10:74:7b:f3:9f:fc:
34:5c:81:db:c9:f0:9e:62:06:61:27:5b:c7:83:5a:22:18:7e:
ee:95:b6:09:a1:58:26:96:f1:cd:e4:23:1b:cb:02:12:8f:55:
c7:65:84:c6:81:d2:6c:fa:17:f3:0b:e7:50:81:c1:e4:72:16:
3a:ab:73:6e:6e:0c:af:cc:75:df:ce:85:53:bf:b5:9c:8e:0a:
ec:9b:aa:78:0e:d9:32:cf:90:1e:f0:ce:b5:d8:74:20:24:a5:
64:be:bf:0f:07:be:4c:b6:4d:d4:a2:6b:d1:8d:51:36:f9:1e:
23:5f:aa:1a:5d:46:18:51:74:10:b6:50:36:66:32:7d:e7:3b:
f6:63:0b:94:ca:14:f2:84:7b:51:22:7a:4d:8c:a9:ba:6c:f0:
7a:3d:87:33:50:f3:22:fe:0d:f1:09:93:a2:18:79:ae:a0:ce:
1d:50:15:d6:be:18:42:a5:5c:b2:c4:88:a5:0a:5d:43:a9:60:
17:14:1a:4e:d1:f1:b5:12:22:96:bb:27:7e:4c:e2:80:1f:3d:
24:34:b4:c6:a2:6b:a4:a5:b2:4b:84:94:44:74:ed:6e:62:82:
0f:c8:c9:c8:16:2e:55:1b:d7:e3:ff:6f:60:ae:57:bd:5f:d5:
72:2f:9f:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:10:21 2025 by rpki-client