Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC5201EE437911F0BBE57898DAE4EC9C.roa
File: DC5201EE437911F0BBE57898DAE4EC9C.roa (raw, json)
Hash identifier: BlgdrsJaMSrqnYKCSB3Y/eSz/WIuZL1hiCdabhqVX9I=
Subject key identifier: CD:67:30:CB:CA:FD:0C:45:A2:EB:A9:13:81:FC:2F:EE:38:A9:70:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018536
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC5201EE437911F0BBE57898DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 08:31:52 +0000
ROA not before: Sat 07 Jun 2025 08:31:47 +0000
ROA not after: Thu 26 Feb 2026 08:31:47 +0000
asID: 45669
IP address blocks: 154.198.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99638 (0x18536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 08:31:47 2025 GMT
Not After : Feb 26 08:31:47 2026 GMT
Subject: CN=6843f8f8-8066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:d8:7d:ea:b3:ad:0c:c4:ec:5d:94:f6:09:5d:
1a:24:96:e5:41:b5:5c:c0:12:d6:b5:d2:05:02:11:
1e:23:1c:51:76:c7:22:45:2f:f2:5d:12:4b:0e:a6:
ea:99:88:4e:a6:f2:50:35:ad:ab:a9:6f:5c:33:6e:
63:35:f6:49:8e:f7:4b:81:2b:6e:97:e6:e6:9b:05:
fb:07:f3:e2:13:ec:a8:c2:a5:3c:ea:c1:66:08:4c:
f8:01:e8:2c:d6:98:5b:0b:e6:c2:54:a7:1d:ca:e9:
91:9f:2a:d8:87:9e:c8:ab:a4:3a:72:88:d7:ba:78:
3b:c7:6d:b3:ff:c3:79:97:6f:7d:9f:07:f7:fd:59:
cb:22:de:f1:a5:9d:73:32:ae:19:4d:be:b3:0c:46:
a9:f0:c4:45:93:c1:c0:f0:a3:31:a9:4b:cd:4d:30:
87:6e:93:66:6e:ee:27:4a:67:22:6f:07:13:89:3c:
d9:9d:4b:c3:05:3f:7c:0a:8d:5a:02:c6:82:ae:6c:
39:e4:b3:cd:8d:4e:ff:c3:7d:ed:87:d1:c3:93:69:
9c:9d:5f:a0:6d:47:1f:c1:17:9f:88:bc:3b:4a:0f:
c3:2c:97:db:e9:3f:8f:1e:41:01:d0:27:1e:e8:01:
a1:15:06:ed:d7:fb:6c:7d:02:45:1d:41:01:51:e3:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:67:30:CB:CA:FD:0C:45:A2:EB:A9:13:81:FC:2F:EE:38:A9:70:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC5201EE437911F0BBE57898DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0b:bb:a6:6b:5b:ea:aa:72:ca:f1:72:72:6c:21:28:a9:78:1b:
95:89:82:75:e2:59:41:b7:58:e3:3a:3b:54:64:fb:9e:92:f1:
d6:81:6c:aa:43:b5:f0:30:36:53:94:00:d4:a5:4a:ae:a8:4c:
84:df:35:3d:93:e1:54:2a:1e:2a:ae:85:c7:27:9f:a0:36:5d:
98:a6:45:1b:bb:95:20:4b:33:c4:bc:d9:10:79:12:6d:26:cc:
03:e4:23:41:48:5e:83:1c:96:8d:28:9c:11:8c:16:b5:43:fa:
5f:e0:47:57:4e:ce:b9:47:e9:56:e2:b8:65:7b:fa:a1:eb:c2:
e8:fb:ba:8e:8f:4d:3e:a1:75:97:50:56:b3:fc:e9:49:db:a7:
7d:b5:a8:51:b9:fc:27:5f:ac:e4:0e:0f:fe:28:0f:d6:76:8f:
97:8d:65:fc:13:5a:76:cf:a2:d1:cb:64:cd:b9:17:bb:96:ca:
63:7e:11:27:71:99:7c:db:4b:ec:10:88:72:39:a6:3d:f2:b6:
61:9f:bc:98:25:c6:a4:ac:b9:bb:43:36:32:b2:61:91:e3:7b:
41:f9:99:3e:1e:4e:97:4a:43:c6:80:53:b3:5e:01:54:51:d0:
d6:e3:05:b7:00:4a:ab:67:a6:a5:13:d8:47:32:dd:01:7d:b1:
36:66:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:34:25 2025 by rpki-client