
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46BFAD646FCC11F087000587DAE4EC9C.roa
File: 46BFAD646FCC11F087000587DAE4EC9C.roa (raw, json)
Hash identifier: ofXcftx7wdtUiwC4iv0JupLaBZsQKDgzgBFoZUK7MiI=
Subject key identifier: 9F:45:FE:0B:5E:6E:95:71:87:5A:CD:D6:AA:6B:69:0B:F6:7D:6A:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01905E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46BFAD646FCC11F087000587DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 18:12:40 +0000
ROA not before: Sat 02 Aug 2025 18:12:35 +0000
ROA not after: Wed 10 Sep 2025 18:12:35 +0000
asID: 137899
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102494 (0x1905e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 18:12:35 2025 GMT
Not After : Sep 10 18:12:35 2025 GMT
Subject: CN=688e5518-0810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:f7:ac:bd:96:19:28:1f:a8:34:61:43:d3:
75:13:a3:d8:be:01:61:71:9d:13:8b:c3:71:27:ec:
22:61:9a:57:d0:f7:b0:78:5a:39:e1:4e:b7:b3:67:
a2:f7:96:20:64:aa:7a:8c:2e:ae:6f:e1:e0:29:4f:
0c:8b:51:18:dd:1b:2c:98:76:e9:88:ab:bc:f8:0f:
f1:b9:c3:63:63:dd:8b:cd:39:71:dc:d4:d6:63:42:
38:36:94:99:27:89:a4:71:86:3c:ac:e3:e1:ab:7f:
b0:b6:97:e9:fa:33:3c:54:58:31:44:02:ba:04:0f:
b5:94:91:59:ce:db:b3:05:f8:fd:a4:d5:47:cd:cd:
1d:90:a9:d7:0f:f1:f8:bb:3c:00:38:7a:cb:65:05:
32:64:4b:56:6e:d7:cf:d6:50:e0:5a:7f:e8:f0:5f:
b7:0c:2b:11:f5:d8:28:2b:9b:a1:a6:b4:9a:51:1f:
d1:a1:96:c2:fc:fe:3d:de:12:d4:3b:2c:04:56:57:
ca:70:88:23:47:c0:fa:3a:ca:52:55:c8:b3:34:5d:
24:c2:41:ec:10:b4:7f:68:c8:29:f9:82:f4:a2:76:
43:14:eb:0f:2a:da:71:73:a1:8f:70:07:ec:3b:7e:
db:1e:8c:a0:07:9b:1f:2d:ee:ec:ef:71:b9:96:a3:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:FE:0B:5E:6E:95:71:87:5A:CD:D6:AA:6B:69:0B:F6:7D:6A:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46BFAD646FCC11F087000587DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
58:04:d9:55:16:c7:6f:4b:e0:11:80:9f:99:ad:4d:89:80:47:
1c:47:8e:7d:10:bf:27:fa:d9:aa:f2:05:4c:bb:23:80:d4:c6:
df:5f:dc:2a:84:c8:23:01:a8:ac:e6:9e:b2:22:ac:43:50:aa:
43:b4:cb:15:2b:48:14:57:21:80:4c:6a:c8:6b:e7:5d:c9:98:
27:3b:93:56:30:90:a8:b9:36:be:d5:44:fb:3e:6c:2c:58:5b:
d5:1e:7d:72:13:f6:5d:ae:db:54:50:6f:cd:83:e2:87:94:26:
c8:6c:32:4e:76:8d:0c:09:3b:0a:66:3e:60:8b:db:7b:e8:1d:
2d:14:37:e6:4a:ee:6b:c0:bd:85:97:7d:ff:78:a8:b6:c4:54:
10:1c:17:91:0f:40:b5:56:7c:73:88:d4:db:9c:4c:b1:dc:12:
13:52:ab:18:3c:e5:14:dc:29:28:61:62:fd:36:18:d9:07:2b:
33:be:44:65:1b:bf:75:1b:ef:62:2e:8c:97:97:ce:5a:7f:a9:
4c:d6:7f:7e:ad:c9:93:ae:25:fc:fb:95:40:35:04:52:e5:d8:
56:3d:0e:a3:dc:92:c9:7a:3c:ec:ce:5a:2a:33:62:b6:82:cf:
74:aa:7a:75:0c:cf:45:68:2a:91:c8:e1:2f:45:a6:94:3e:aa:
62:e5:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:17:01 2025 by rpki-client