Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4162CE8C693711F090DF08B5DAE4EC9C.roa
File: 4162CE8C693711F090DF08B5DAE4EC9C.roa (raw, json)
Hash identifier: 3OObGJ1IR7aEEFODNjMGT8DiVSqwyhTtcr8wR+GR/+8=
Subject key identifier: B9:E9:41:97:2C:8D:06:5D:12:7C:F0:C6:40:C3:9C:D5:59:38:75:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4162CE8C693711F090DF08B5DAE4EC9C.roa
Signing time: Fri 25 Jul 2025 09:10:49 +0000
ROA not before: Fri 25 Jul 2025 09:10:44 +0000
ROA not after: Sun 31 Aug 2025 09:10:44 +0000
asID: 57043
IP address blocks: 154.222.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102309 (0x18fa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 09:10:44 2025 GMT
Not After : Aug 31 09:10:44 2025 GMT
Subject: CN=68834a19-c0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:d0:09:06:61:80:f9:49:bf:73:7c:1b:03:
d7:81:68:06:56:3d:ea:9f:a4:d5:ba:57:e0:72:2c:
51:ba:57:18:20:2c:08:df:e3:71:41:c3:39:7f:78:
0e:7c:63:27:13:4c:b3:b8:d3:de:5d:a9:ad:e6:51:
4a:51:c5:b4:78:0c:6e:14:2c:5c:f3:b7:b8:bd:94:
e8:07:f6:52:a6:c5:4f:dd:8b:1e:60:a2:ea:ec:52:
75:79:d1:95:77:7f:8a:20:d3:a6:af:61:7b:b6:50:
5a:e0:24:e5:ff:ea:11:55:16:e1:94:db:4d:6b:c5:
04:d2:b3:b9:fe:aa:53:36:b7:01:9a:46:bf:dd:d1:
aa:34:f2:c3:79:22:fe:a9:de:1b:04:ab:54:c5:87:
04:aa:a3:d8:1f:5b:c1:60:0d:9c:3e:a9:ff:f1:1a:
b9:a9:b9:89:04:49:8f:52:e8:72:71:7c:7e:c3:a3:
a3:10:8f:62:cf:0a:09:84:23:ea:9e:16:ba:27:de:
f9:d0:9b:7b:4b:60:05:4f:b8:d6:fa:76:1e:11:20:
5f:68:3a:9b:8e:ae:55:a5:97:d3:0f:38:2e:f7:e1:
5c:a0:44:8a:4b:82:20:3e:03:6f:8c:31:82:e6:43:
62:8f:55:ce:9c:e0:a5:45:c6:d8:de:f8:21:f6:96:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E9:41:97:2C:8D:06:5D:12:7C:F0:C6:40:C3:9C:D5:59:38:75:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4162CE8C693711F090DF08B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a6:45:41:25:f5:26:04:5c:b7:d0:78:3e:86:ad:04:ab:87:
79:7a:85:7b:97:49:5f:e3:db:fb:e3:14:b1:08:b0:40:86:99:
d3:07:cd:3a:ab:7c:79:a5:0d:54:af:99:16:7b:5c:f4:3f:93:
eb:e5:b9:6c:45:16:42:64:78:d6:e9:f6:0d:57:58:9d:06:99:
5d:ec:bd:d5:85:09:ed:1d:63:1a:ea:7e:2f:01:fa:54:19:9e:
0c:5b:5e:e3:86:39:40:2a:49:4c:49:30:1f:06:2a:8a:75:92:
96:db:dd:6e:85:19:70:b0:73:68:ec:6a:4c:7a:7b:83:9f:d4:
e9:34:de:d8:a0:a6:10:03:0f:72:79:b3:77:33:8a:cd:55:e9:
8d:57:6f:2d:d9:9e:76:af:6a:74:ec:82:5f:f0:8b:10:75:da:
8a:8d:a0:6b:0d:34:bb:dd:2b:44:2a:37:57:8b:d7:83:8d:19:
a4:4f:93:95:11:f2:41:e5:af:c3:92:3b:a7:51:3a:93:fa:4b:
8a:13:8f:57:c7:da:64:67:0e:0b:cf:41:05:cb:77:60:33:dc:
73:6e:da:47:d8:0d:2f:96:82:ca:07:e5:2e:2f:84:f1:26:16:
18:e2:48:e4:6a:a9:f7:2e:7d:5f:93:48:d8:d0:ed:23:c9:c5:
98:6b:3e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:17 2025 by rpki-client