Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/46D81614B96511F0BD3399A7DAE4EC9C.roa
File: 46D81614B96511F0BD3399A7DAE4EC9C.roa (raw, json)
Hash identifier: Rn2iy6Qhezj00+9VhyQzkbcTl6/sWtZl/QG9AYbnBWI=
Subject key identifier: 34:78:66:26:61:5E:6D:4A:66:9A:D0:03:31:56:75:40:F0:5E:82:C3
Certificate issuer: /CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Certificate serial: 01D4
Authority key identifier: 25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/46D81614B96511F0BD3399A7DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 10:01:48 +0000
ROA not before: Tue 04 Nov 2025 10:01:43 +0000
ROA not after: Wed 04 Nov 2026 10:01:43 +0000
asID: 37680
IP address blocks: 154.0.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft
rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC6C8AF, serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Validity
Not Before: Nov 4 10:01:43 2025 GMT
Not After : Nov 4 10:01:43 2026 GMT
Subject: CN=6909cf0c-3614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:19:01:10:89:b5:29:86:a7:e1:5d:53:4f:
a2:92:53:cb:aa:1e:92:5d:88:b9:ac:fd:ab:a4:32:
47:0d:02:0d:ac:ea:08:7f:f2:21:4e:8c:28:3b:86:
46:99:56:be:ee:93:1d:6e:31:7a:e9:be:07:47:d5:
3a:30:d7:67:1b:8a:b9:ac:92:ad:35:ac:3d:a4:3b:
b6:8c:8d:a2:67:56:b6:54:d3:8f:10:59:13:4a:76:
10:f4:2f:bb:68:0c:27:e1:8b:e5:31:cb:fd:21:57:
42:f9:aa:6d:83:bb:d6:a9:9e:e6:02:59:23:35:00:
3a:ad:27:6e:c3:09:a8:c9:e6:7e:d8:7c:30:b6:34:
de:35:9a:b7:16:40:38:b4:48:ad:b4:2a:9e:09:ba:
4f:32:f1:d9:b3:1c:bc:56:de:86:15:84:2f:35:47:
1e:01:eb:e3:74:9e:c8:ca:04:8d:3e:6c:55:3a:48:
e5:85:3b:24:0c:16:b5:42:82:d2:35:42:8d:9f:22:
bf:3f:35:57:8d:8b:49:03:40:74:f2:41:85:01:4b:
4a:1a:02:c5:f9:6d:5d:bc:60:a0:74:b6:a1:61:5a:
50:85:bf:ec:bd:76:10:e6:f4:24:36:99:34:67:48:
92:a1:8c:a6:fa:4d:c4:21:01:ed:49:4f:f7:f1:f4:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:78:66:26:61:5E:6D:4A:66:9A:D0:03:31:56:75:40:F0:5E:82:C3
X509v3 Authority Key Identifier:
keyid:25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/46D81614B96511F0BD3399A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.0.1.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1f:8e:01:c0:b8:7a:83:99:29:e0:97:2a:c1:6f:5d:ae:2e:
ba:b4:ae:99:ff:6f:9a:b7:7f:26:64:c5:c2:1b:f5:07:b2:09:
4b:61:26:96:a4:16:e9:75:1f:f0:20:cb:c5:ed:84:3b:bd:8c:
e9:04:b8:59:2a:2f:54:18:f3:57:c1:65:c4:3e:78:07:f5:0a:
27:08:9d:03:7a:19:4c:62:c7:2d:c8:f4:92:6c:9a:dd:86:9a:
b8:0d:1e:44:29:84:53:0b:08:1c:33:e3:ff:5e:57:ac:ad:14:
b1:af:2a:64:d1:02:57:23:c1:06:8b:fb:ca:1e:93:77:94:13:
95:9d:60:5c:ef:96:4e:82:3a:f8:52:aa:68:d4:65:5c:ae:91:
33:84:19:fc:f3:c0:82:29:ca:4e:ea:a0:12:05:2c:7e:f4:73:
45:9d:45:77:11:f9:df:64:58:24:72:bf:f1:0b:ff:34:60:3e:
c5:31:7b:c8:36:2c:26:c0:48:29:0d:97:90:69:30:fc:0b:4c:
18:31:d7:10:ed:2f:98:99:1a:be:45:88:53:1e:a6:3c:bc:51:
06:f7:ef:1a:4b:66:66:2d:1a:b8:e7:3c:b0:79:49:68:06:dd:
7f:8e:52:55:4a:c3:de:a6:5e:05:cb:37:bd:3d:65:31:7e:d9:
cb:c8:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:59:30 2025 by rpki-client