Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48546D8E6FD811F099C72FD4DAE4EC9C.roa
File: 48546D8E6FD811F099C72FD4DAE4EC9C.roa (raw, json)
Hash identifier: vEBWRjUahfioGJNsmDPtcvK0oBMVKxfe+HpGItZaPHs=
Subject key identifier: C9:E6:B2:6C:86:D0:89:AA:6A:42:F0:5E:6F:4F:4D:60:AA:AE:6A:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019068
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48546D8E6FD811F099C72FD4DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 19:38:37 +0000
ROA not before: Sat 02 Aug 2025 19:38:32 +0000
ROA not after: Mon 15 Sep 2025 19:38:32 +0000
asID: 396356
IP address blocks: 154.93.8.0/21 maxlen: 24
154.95.48.0/22 maxlen: 24
154.95.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102504 (0x19068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 19:38:32 2025 GMT
Not After : Sep 15 19:38:32 2025 GMT
Subject: CN=688e693d-88e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:a8:73:d7:7a:28:47:6d:05:0d:15:6e:05:
fb:46:1b:b8:1c:0d:01:e7:ca:c8:fb:c2:d6:e6:4b:
d7:67:4b:fe:4e:e2:dd:1e:c9:58:76:45:72:fb:78:
df:06:01:c9:55:07:24:6c:0f:f6:d5:dd:84:98:59:
52:0a:a2:32:76:fc:bd:e4:7c:10:bf:87:0b:77:4c:
e6:44:de:7e:e2:a1:47:db:76:fa:2a:03:f2:ba:29:
54:7f:9b:dd:f4:90:21:ac:e0:58:ea:98:a0:f7:dd:
76:07:53:cc:85:e2:62:3c:7e:05:ed:36:36:bb:a8:
0e:43:cc:36:73:cf:bd:21:b7:c3:5f:6c:b2:13:c3:
44:61:88:71:8a:01:e5:f8:4e:65:8d:be:14:d1:30:
87:87:20:3b:3c:f1:32:5e:ab:dd:eb:08:c5:d6:d4:
42:8b:f0:a0:69:9d:cb:3b:f6:90:29:1d:e0:3f:d9:
de:a1:a7:15:fb:09:39:3f:6e:eb:cb:39:94:bb:a2:
1c:b3:4d:79:18:84:5f:86:41:84:27:6a:bd:4b:2a:
ab:14:19:cf:03:fe:90:a8:1d:eb:ff:12:9b:7c:c7:
d9:25:46:5e:cf:fb:70:d3:f5:38:3c:fe:62:ef:e8:
87:2a:33:cd:40:7a:08:42:cb:ad:a4:ed:2c:e9:db:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:B2:6C:86:D0:89:AA:6A:42:F0:5E:6F:4F:4D:60:AA:AE:6A:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48546D8E6FD811F099C72FD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.8.0/21
154.95.48.0-154.95.52.255
Signature Algorithm: sha256WithRSAEncryption
04:51:6a:0b:3b:0b:68:cd:b0:8c:55:1a:97:ee:7d:e3:97:ac:
31:39:74:e6:35:25:1d:08:74:d5:19:dc:a4:a6:99:e7:49:42:
ab:32:9b:39:e8:ff:50:85:a1:60:8e:f7:87:bd:e7:0b:8e:46:
d5:ca:6e:2c:b1:28:f8:9d:ca:e0:f3:59:cb:0e:87:82:ff:56:
f1:cd:fe:85:88:d1:4c:02:34:07:65:60:ca:87:62:08:18:2d:
8b:0a:d6:a1:2c:a9:86:52:45:20:5e:b6:f9:a6:67:91:cf:fc:
bd:ad:c2:58:36:3c:16:bf:51:ed:1e:6b:9f:9f:a1:b4:70:15:
df:09:34:c5:de:36:06:87:39:56:b1:92:22:cd:56:b3:35:5a:
0c:21:cf:a5:ca:c4:89:3f:c6:c1:2d:fa:86:7b:f7:d2:11:50:
e5:72:7e:9d:57:5f:eb:05:36:57:2d:5a:80:0a:81:79:eb:df:
e6:1a:80:6c:9d:bd:e4:67:6c:93:fc:6d:c2:c0:b2:55:c7:48:
b3:9d:0d:de:08:26:63:66:02:0f:f4:7a:ac:55:35:39:a2:57:
44:03:bf:d0:45:f6:19:c6:c5:15:70:29:c4:3a:65:20:f9:15:
91:35:0a:40:71:73:0a:01:a2:77:61:31:ef:1a:39:26:94:1e:
d4:34:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:45 2025 by rpki-client