Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A367B0787AC811F085A50AA2DAE4EC9C.roa
File: A367B0787AC811F085A50AA2DAE4EC9C.roa (raw, json)
Hash identifier: 7zdHr4DjGmDu61sveXBCCoqnGzPdQ8gNmhAzdatoGpc=
Subject key identifier: F6:32:50:74:75:E0:86:B8:B4:2B:95:57:DA:04:F7:68:FF:BC:38:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A367B0787AC811F085A50AA2DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 17:44:21 +0000
ROA not before: Sat 16 Aug 2025 17:44:15 +0000
ROA not after: Tue 23 Sep 2025 17:44:15 +0000
asID: 133180
IP address blocks: 154.83.4.0/24 maxlen: 24
154.94.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102887 (0x191e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 16 17:44:15 2025 GMT
Not After : Sep 23 17:44:15 2025 GMT
Subject: CN=68a0c374-d25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:bb:29:28:c2:9f:81:a5:21:b0:1f:3d:0a:
18:b9:e1:31:3e:7a:68:03:4b:4e:67:7a:2b:64:c6:
8d:51:da:7e:b1:52:f7:55:87:b6:bf:62:b9:d2:ff:
19:82:a1:c0:57:e7:a2:73:a5:e3:1b:d2:98:cc:53:
fc:e3:4d:b8:91:a7:15:1d:f9:08:74:19:7b:a0:0a:
a0:ab:20:50:96:e7:5d:98:64:2d:49:bf:01:5a:f5:
10:4a:1f:b2:d0:d5:57:41:e3:23:f9:2a:44:54:ef:
10:65:33:cd:a6:4b:1d:78:fa:6a:c3:c8:39:ea:3a:
c5:a8:d5:80:9e:ff:2e:f6:3f:ee:7a:06:77:c0:ab:
21:b2:72:cb:28:ad:99:db:32:63:82:46:3b:93:bf:
55:21:0b:2a:de:7e:4b:29:fe:4d:e7:8b:83:80:62:
ac:d5:70:56:b2:17:c7:66:fb:45:ad:3d:6a:e6:6d:
0b:4c:98:ed:58:32:78:11:5c:e7:8f:00:42:f8:8d:
4c:6d:4e:0f:a9:f0:3e:4e:fc:8f:cd:c5:5c:60:5a:
7e:a2:bb:92:aa:63:6c:28:46:36:c8:8e:b4:9c:ec:
ca:59:e4:92:40:00:8a:2a:3a:fe:62:95:b1:1b:c7:
c4:b9:65:8c:ae:de:ce:af:ca:08:12:7e:3a:32:9a:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:32:50:74:75:E0:86:B8:B4:2B:95:57:DA:04:F7:68:FF:BC:38:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A367B0787AC811F085A50AA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.4.0/24
154.94.16.0/22
Signature Algorithm: sha256WithRSAEncryption
70:60:0a:68:1e:f1:6a:8e:89:44:7e:0b:b6:35:78:6f:00:57:
e7:4f:39:89:01:11:fd:ee:67:35:f6:26:15:c7:17:75:74:ab:
c4:44:75:ce:e4:2e:7b:89:f7:fb:4b:e2:d0:33:36:7b:4f:ce:
a1:40:aa:db:bf:6f:f5:fa:b1:14:a3:5a:9a:7c:3b:80:b2:f1:
e9:45:75:5d:de:86:35:81:b7:dd:09:cd:7e:88:00:eb:98:34:
f1:d2:7b:4d:82:c0:bb:bf:87:13:cd:4d:4b:ff:f9:5e:d7:20:
d4:6b:19:f1:72:d5:9c:b4:e9:28:40:73:66:83:dc:f6:be:39:
dc:62:e3:de:f2:3a:71:3e:36:50:8c:05:8f:e0:23:6b:7c:52:
cd:60:a2:8a:13:de:72:27:cd:0d:d2:53:81:31:a7:3c:45:14:
e5:77:bd:5e:ee:72:e5:ee:ed:bc:d3:93:a5:61:50:39:fd:04:
c7:16:a4:19:8f:52:69:79:a4:16:2e:5e:8c:d5:d0:1d:a3:8b:
ef:31:d4:e6:0a:7e:2c:d9:7a:92:cf:5c:25:80:66:64:66:90:
28:e4:36:49:57:88:7a:1a:b4:ed:35:8c:7e:68:ea:09:07:d3:
e6:26:8f:2c:3f:09:26:62:ea:34:17:ea:09:a8:ce:1d:bf:68:
6a:f9:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:35 2025 by rpki-client