Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AED04A46BB211F0B8641BD7DAE4EC9C.roa
File: 4AED04A46BB211F0B8641BD7DAE4EC9C.roa (raw, json)
Hash identifier: 9OiEjma3OYwdERMefAJcs+kxNv3dEGoPwnS6sKknUQk=
Subject key identifier: 4C:BD:24:6C:1A:61:8C:F0:A0:85:1A:DC:CB:55:53:25:A5:DD:3F:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AED04A46BB211F0B8641BD7DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 12:56:36 +0000
ROA not before: Mon 28 Jul 2025 12:56:30 +0000
ROA not after: Fri 05 Sep 2025 12:56:30 +0000
asID: 20326
IP address blocks: 154.83.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 06:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102354 (0x18fd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 12:56:30 2025 GMT
Not After : Sep 5 12:56:30 2025 GMT
Subject: CN=68877384-bff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:58:1f:71:36:db:32:44:7a:d9:58:c5:09:
32:d3:5c:c0:8e:29:52:66:ce:45:05:eb:c7:97:3d:
ef:b0:2c:db:f5:26:7a:65:db:a2:fa:e7:82:f2:1d:
22:46:6b:bb:19:aa:74:be:69:e5:78:da:9b:94:8f:
f2:63:88:57:2d:4d:12:86:26:6c:fc:1a:2a:04:e0:
78:09:ff:e6:cb:d8:e3:df:1e:8c:37:af:92:44:8e:
dd:9c:12:2b:2d:f6:71:e4:3d:6b:05:fc:2c:cb:23:
9c:a0:c3:e0:f1:fe:e8:26:3c:86:13:61:9e:4d:c4:
30:c0:49:2e:42:48:68:ef:33:63:5b:a3:b5:6e:d7:
62:d0:83:f0:f1:db:9f:9c:d3:25:9a:53:f7:67:d1:
d9:73:54:2e:19:b6:4b:c6:bf:72:2e:78:db:92:c9:
c8:95:ad:85:9b:f5:a3:dd:47:95:9d:f5:2f:7b:c3:
16:4c:f2:21:e5:2d:2c:46:f2:69:e1:3a:e5:8c:19:
a3:23:9b:4c:5a:1f:6d:71:64:b7:13:3d:d6:2a:d6:
7f:f5:a3:81:f8:9e:2e:5b:87:a2:52:0c:2c:03:e8:
bd:7d:cf:11:01:81:1d:d9:31:18:d7:71:50:a4:56:
e0:3e:34:bc:bb:8a:0c:2a:46:50:9d:df:ee:dd:3f:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BD:24:6C:1A:61:8C:F0:A0:85:1A:DC:CB:55:53:25:A5:DD:3F:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AED04A46BB211F0B8641BD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.152.0/22
Signature Algorithm: sha256WithRSAEncryption
13:d7:1a:96:26:c1:bd:1e:9e:eb:1b:58:16:22:85:16:8a:6f:
84:a0:50:6d:81:dd:c8:ee:33:66:22:c1:1b:22:57:5a:23:4a:
e1:48:c6:f1:5d:6f:2a:8b:bb:e1:12:1b:6c:dd:39:d7:7e:27:
73:9f:83:3c:2d:11:6f:04:00:98:dd:ec:89:65:37:dd:71:1b:
f9:9c:37:58:c3:0f:7e:25:03:c9:b4:14:d1:08:31:4c:13:0c:
2b:e7:91:d1:54:72:5d:e8:98:12:74:52:76:73:4b:28:87:1e:
37:21:e1:37:4f:e4:40:dd:0c:1f:5d:4e:ca:11:33:94:5f:12:
f3:fc:e6:c8:3e:7e:9d:9d:66:4c:c8:1f:e4:35:22:e4:fd:e5:
3c:57:22:e3:09:19:ea:4a:02:fc:a1:d5:cd:c2:6a:dd:9a:99:
ac:a3:66:2f:af:7e:44:3c:89:ef:21:6c:6c:b1:4d:78:1b:55:
fb:e1:02:4d:0c:c3:c8:35:2f:84:a5:44:1e:03:a1:e5:50:d2:
82:81:4f:3e:40:b2:d7:82:c8:87:be:ea:b2:05:ed:e2:06:62:
8f:01:c3:2e:f2:ad:9c:83:74:d5:51:fc:50:d0:89:e7:99:4f:
b3:69:48:7e:7d:42:5b:c1:15:4c:07:24:b6:52:a8:e7:27:7a:
b0:2b:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:12 2025 by rpki-client