Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCE4E14CAF3311F0A7670EECDAE4EC9C.roa
File: CCE4E14CAF3311F0A7670EECDAE4EC9C.roa (raw, json)
Hash identifier: FM3g/5qpb6Onim8Ln5IZP92Zh4Yz65XGmD086ROyyH0=
Subject key identifier: 06:E5:2C:57:55:6B:2C:AC:63:60:CA:E8:26:45:BC:FD:E8:E1:97:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCE4E14CAF3311F0A7670EECDAE4EC9C.roa
Signing time: Wed 22 Oct 2025 10:42:27 +0000
ROA not before: Wed 22 Oct 2025 10:42:19 +0000
ROA not after: Fri 05 Dec 2025 10:42:19 +0000
asID: 20326
IP address blocks: 154.193.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107691 (0x1a4ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 10:42:19 2025 GMT
Not After : Dec 5 10:42:19 2025 GMT
Subject: CN=68f8b513-59e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:26:dc:ef:9c:7e:c5:15:80:c4:96:22:fb:
c5:5c:ad:23:71:ce:c2:33:24:bd:6b:1d:a2:0c:2b:
e9:33:1d:f9:58:bf:08:a9:b7:db:89:f1:e4:94:fd:
33:16:3d:6e:c3:67:e2:3c:05:db:fc:02:77:db:ee:
87:53:be:2c:aa:4e:ad:19:bb:a9:09:f7:e0:3b:2b:
c2:83:a3:a4:6d:39:78:08:64:65:d4:6c:09:1e:66:
ef:12:d2:e4:e7:70:70:99:c2:04:87:5d:e5:5f:ee:
e1:ad:16:09:a1:8d:38:0e:7b:e2:ec:aa:0b:c9:9e:
bd:7d:88:82:15:10:61:54:a0:d6:94:f2:30:56:19:
bf:19:75:be:bc:ed:19:44:54:26:7e:c2:fa:17:43:
a6:6b:1d:7a:da:25:d5:75:f3:5e:44:51:1c:5c:6e:
ac:04:10:a9:ac:cb:87:87:97:3a:d0:d6:51:4b:38:
df:aa:cd:af:6f:b6:ac:e8:fb:d2:90:b9:ae:e7:53:
d0:06:8c:43:98:4f:ee:b1:ef:60:43:38:57:45:ba:
0c:56:90:12:fb:ed:c1:e5:08:e8:26:b8:aa:c6:92:
08:03:68:cd:5d:7f:1a:7f:35:4d:9a:18:fa:ec:3f:
dd:14:98:52:c3:a9:04:90:5e:88:a2:f6:9f:1a:b7:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E5:2C:57:55:6B:2C:AC:63:60:CA:E8:26:45:BC:FD:E8:E1:97:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCE4E14CAF3311F0A7670EECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.163.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ee:1a:0d:7d:79:ac:63:3c:74:37:18:a8:6b:13:52:77:8a:
97:91:a6:46:7a:55:aa:f6:ca:65:1c:d0:6b:d6:45:0a:c3:8d:
a7:56:a8:2b:4c:4b:b0:cd:21:d8:a2:15:4f:1f:8d:56:2d:1d:
f7:44:be:be:fb:5f:95:86:ae:40:98:34:e8:d3:02:9d:31:e3:
3c:98:32:0f:91:70:72:7e:6f:33:7a:81:20:e7:ff:5f:84:75:
d9:9c:31:97:8d:5f:d1:4d:97:7c:81:99:6e:01:ea:2e:b3:dd:
1c:0c:f9:98:b0:3e:c3:0a:54:8c:1d:c2:b6:a6:c5:32:f2:0b:
81:40:12:56:79:9b:21:05:17:a2:f2:92:24:55:f9:df:0a:c2:
6e:90:44:66:b3:d5:a8:b7:e6:a2:3d:b4:73:2b:18:05:ab:77:
d9:6e:90:e1:77:5f:06:c2:ae:19:74:c8:7b:15:ca:e7:80:04:
4c:45:a9:72:fa:55:24:28:6a:45:15:47:ce:f1:a1:97:db:23:
9a:94:86:b8:7b:ba:e7:6c:68:a9:86:b6:cb:43:ac:87:b7:eb:
58:4f:eb:4b:33:69:f2:5d:26:b9:e6:5b:17:18:a1:38:70:b9:
92:64:5a:15:72:1e:6d:26:bf:05:25:98:8b:be:e4:31:a9:21:
8b:2a:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:41:01 2025 by rpki-client