Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F7653E066CB11F08EBF9EECDAE4EC9C.roa
File: 4F7653E066CB11F08EBF9EECDAE4EC9C.roa (raw, json)
Hash identifier: /BNufb1DimTwsxITNR47vM+0KH467TXeLh4r3tkD6bw=
Subject key identifier: E5:04:4D:0B:85:20:E7:2D:60:1D:86:4E:8F:04:98:88:55:70:E1:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F7653E066CB11F08EBF9EECDAE4EC9C.roa
Signing time: Tue 22 Jul 2025 07:13:05 +0000
ROA not before: Tue 22 Jul 2025 07:12:59 +0000
ROA not after: Wed 27 Aug 2025 07:12:59 +0000
asID: 395793
IP address blocks: 154.200.80.0/21 maxlen: 24
154.223.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102074 (0x18eba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 07:12:59 2025 GMT
Not After : Aug 27 07:12:59 2025 GMT
Subject: CN=687f3a01-334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:36:ae:70:46:39:52:f9:65:c4:23:94:d0:
71:b6:13:f1:96:a9:21:40:f3:1f:51:67:0f:a1:89:
56:c6:74:48:ad:5e:1c:ae:59:e2:38:d1:58:0c:49:
a8:8c:e4:89:0b:a1:e2:7f:93:f1:2b:7e:8d:9f:a4:
d9:00:b2:12:e1:e4:c4:fc:77:d8:90:4b:f5:c5:eb:
d3:3c:90:11:09:07:c1:e9:72:49:0b:2c:e1:fb:f5:
ab:5b:f4:95:57:21:fe:7d:b1:18:a5:ba:da:d2:c9:
eb:62:76:00:76:68:04:99:34:26:a3:53:af:16:51:
f5:a8:e9:5d:63:8c:85:5b:ef:82:f0:99:1e:15:47:
99:72:00:8e:83:0f:18:38:83:3b:79:5b:60:c9:1e:
ae:9d:a0:ce:a1:23:ee:6f:a2:45:5e:6a:2b:1b:1a:
fb:d8:19:70:38:8b:d1:e7:0d:fd:29:d2:65:6d:d3:
41:97:c8:75:93:f5:53:47:94:09:7c:e9:a1:ca:56:
a1:52:9f:65:95:43:26:69:7c:fe:0a:8a:3d:38:eb:
9b:f0:50:6f:7e:fa:26:0d:55:e2:af:10:d8:e2:39:
aa:11:fb:9b:cb:08:75:d2:fe:68:0a:da:bb:69:13:
14:15:14:7c:6c:52:74:20:2f:d8:0d:b6:c7:b1:cf:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:04:4D:0B:85:20:E7:2D:60:1D:86:4E:8F:04:98:88:55:70:E1:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F7653E066CB11F08EBF9EECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.80.0/21
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
43:4d:2c:24:26:78:4b:c0:31:ac:0a:4a:cc:9e:eb:c4:f6:5a:
50:a2:48:48:18:35:46:46:52:c9:98:75:69:93:d0:da:1c:f3:
80:7a:42:7f:8b:7b:46:0a:40:af:5c:c1:a3:7b:d8:9f:5e:47:
90:96:23:fa:ec:f5:28:0b:8b:eb:c8:01:71:9f:12:72:07:88:
43:f1:e6:d8:00:cc:7d:75:bc:84:23:4d:9f:ac:3f:4e:a6:b4:
1b:38:99:f0:e4:32:58:1e:bd:8a:68:66:19:34:7c:d2:53:8b:
fb:61:d2:eb:a5:40:f8:a7:7d:b1:66:10:61:7d:0f:a3:89:27:
34:c8:cf:b1:cf:3f:94:72:75:f8:3b:c5:4a:55:41:3d:2d:19:
ec:0f:63:c6:7e:58:f4:f2:bb:27:e3:b3:f9:6a:67:a5:98:1e:
c6:d5:a6:00:7a:8c:ab:3a:2c:f5:06:c1:17:39:fc:39:0d:d3:
eb:0d:88:b7:da:2a:c8:c3:73:48:07:a8:4c:66:ed:aa:d8:ab:
b4:58:97:33:28:64:cb:e5:3e:d8:84:89:2b:37:6b:00:21:c0:
81:37:77:ec:8f:76:7a:6f:3c:2f:81:1e:ee:8d:e9:e3:b5:03:
60:73:b0:a4:4c:9a:ea:3e:35:a7:c7:55:33:8b:5a:1f:f7:94:
a5:cb:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:18:26 2025 by rpki-client