Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1400FD12713C11F0BE1B29E8DAE4EC9C.roa
File: 1400FD12713C11F0BE1B29E8DAE4EC9C.roa (raw, json)
Hash identifier: MYtQ4EE4V7Bon5WX5tcckiQvPXC+lXAaRVe1SqVlqKY=
Subject key identifier: 46:E0:AF:1B:54:5F:21:39:C1:BC:5C:AB:E0:4D:41:A4:E6:6C:FE:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1400FD12713C11F0BE1B29E8DAE4EC9C.roa
Signing time: Mon 04 Aug 2025 14:05:30 +0000
ROA not before: Mon 04 Aug 2025 14:05:25 +0000
ROA not after: Tue 04 Nov 2025 14:05:25 +0000
asID: 328608
IP address blocks: 154.201.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102568 (0x190a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 4 14:05:25 2025 GMT
Not After : Nov 4 14:05:25 2025 GMT
Subject: CN=6890be2a-d3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:2e:62:e6:14:48:f2:f7:2f:31:a4:5b:1b:
97:a7:0c:e8:9a:b7:8c:b0:f8:85:d6:62:a8:18:39:
1e:7f:3e:3a:89:29:4a:4f:66:ee:bb:72:80:b6:be:
d6:f4:ff:99:05:d4:d3:2f:d8:01:2e:4b:14:cd:59:
71:f5:77:7a:2e:39:da:62:dd:b6:83:81:95:c7:c9:
99:ff:e1:93:9c:d1:18:b2:33:82:0a:31:17:73:db:
80:b8:de:b4:ab:7a:fc:56:ef:72:ab:f4:28:34:f6:
06:37:ff:f8:2f:f1:7b:16:9d:c9:ed:bf:7f:57:00:
a1:83:94:dd:cb:07:f1:13:25:42:3b:4b:69:c0:34:
ab:67:15:ec:18:7b:0d:e5:97:bb:26:f8:5b:a8:31:
16:94:54:d4:a1:39:cc:3c:f6:da:5a:1d:65:ac:7d:
71:50:ce:b1:fc:97:85:da:52:09:6d:d7:72:45:f5:
f5:49:cb:68:a1:c3:aa:16:b2:f2:36:c6:c3:90:6b:
99:6e:51:a6:31:99:b1:3d:42:fb:52:e2:0d:f9:3b:
f3:98:46:8f:b9:f8:fd:66:c5:98:c0:2d:70:6c:71:
43:1b:8a:52:8b:24:a8:6e:3c:81:de:45:53:94:fe:
99:2a:04:25:2e:0d:8b:4d:86:49:22:b1:ce:ac:6c:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E0:AF:1B:54:5F:21:39:C1:BC:5C:AB:E0:4D:41:A4:E6:6C:FE:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1400FD12713C11F0BE1B29E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.48.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:df:b7:96:44:4e:b6:a4:36:04:c7:bc:69:a5:46:45:f3:37:
3b:11:01:c6:d0:75:9a:83:7f:cc:83:84:65:42:62:a4:fa:68:
83:cf:a9:27:6d:6b:15:a8:f1:30:b6:bd:2c:18:7b:f9:6e:3c:
cd:11:61:f0:0a:55:1b:d4:06:37:13:b3:fc:df:f9:29:f4:df:
f5:ca:a5:ae:6a:41:fe:81:d2:dd:6d:e6:71:4c:3b:5a:84:d3:
61:0a:13:39:fa:52:dc:83:21:36:fe:f6:33:96:b0:ce:f6:35:
8e:50:26:d7:71:5d:61:b2:47:6e:44:7e:5b:08:0c:89:7f:e2:
58:df:42:a3:dd:6a:13:41:f1:bf:a4:41:4b:12:b5:c8:00:60:
4a:8b:1e:c9:f7:3d:1b:7a:65:1e:b4:85:19:d6:07:36:d9:8f:
60:5f:f8:e1:75:9b:54:81:b2:2a:1c:20:74:6f:5a:82:b5:9e:
ec:0c:36:21:50:30:87:0e:02:f7:90:ef:73:7b:4b:57:95:d7:
12:7d:83:10:a3:b0:0a:34:3e:4b:df:0c:2a:7c:87:f2:da:6f:
8f:c6:18:97:81:a5:92:62:0a:7e:72:ea:98:ea:23:b1:12:4c:
73:5d:22:83:1c:f4:9d:ff:5a:f0:33:ce:c4:65:cf:97:25:f1:
37:e3:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:52:40 2025 by rpki-client