Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5462CF305C8211F08C417593DAE4EC9C.roa
File: 5462CF305C8211F08C417593DAE4EC9C.roa (raw, json)
Hash identifier: R5Osz7bLdS9sG+wceqvmxdvrJOqFascR6k2HwiaIjUM=
Subject key identifier: 46:82:4C:C8:B6:C0:DB:14:28:3B:42:A9:36:9B:48:2C:85:B6:6B:B3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B6D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5462CF305C8211F08C417593DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 05:05:28 +0000
ROA not before: Wed 09 Jul 2025 05:05:23 +0000
ROA not after: Fri 09 Jul 2027 05:05:23 +0000
asID: 4637
IP address blocks: 154.16.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7021 (0x1b6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 9 05:05:23 2025 GMT
Not After : Jul 9 05:05:23 2027 GMT
Subject: CN=686df898-5555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:02:85:60:9d:49:4c:0a:fc:e0:f6:fe:12:
9c:95:33:29:6b:6c:b1:e4:61:ad:03:e2:45:d9:99:
a6:2d:43:c3:b5:45:50:26:7b:89:c4:11:ea:ec:c3:
16:24:ad:bd:3d:8c:b6:52:c3:5e:47:04:f4:c1:4e:
90:88:0c:05:ea:b7:6d:2b:20:df:d9:e2:dd:45:6e:
dc:87:96:0d:e7:61:7e:dd:85:43:f7:19:e4:f4:87:
ef:ca:d1:9c:1b:de:d3:e7:57:57:de:0f:63:08:3d:
d2:be:15:66:4d:b5:6d:d9:47:9f:d3:2d:5a:d5:d1:
d0:28:cc:bc:54:20:25:cc:d4:2f:10:98:b8:0d:a5:
d9:11:48:c4:b8:08:d5:4b:77:ee:cc:1c:9d:69:9c:
e7:04:75:85:45:74:11:20:33:e1:cd:68:80:06:8c:
d5:b9:9a:fd:93:3a:a5:1b:d1:c7:ba:42:8c:0d:f1:
ea:29:49:bb:71:93:a8:9c:2c:fb:2a:b2:de:37:7e:
98:99:cf:a0:f8:76:4e:72:34:ec:80:f4:02:89:5c:
65:d6:65:bf:05:31:63:c8:c3:9f:61:ef:de:3a:ed:
60:80:d0:6a:71:20:26:82:90:05:e3:9b:1e:4a:9c:
78:71:01:b5:2f:d8:75:12:d8:a4:49:3b:d7:c5:f3:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:82:4C:C8:B6:C0:DB:14:28:3B:42:A9:36:9B:48:2C:85:B6:6B:B3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5462CF305C8211F08C417593DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.83.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:1d:20:84:78:09:bd:42:e7:26:ae:80:0b:79:d6:ce:ca:3e:
78:d7:1c:ec:71:dc:a3:34:40:9d:82:e8:77:1e:b2:50:89:d0:
2d:6f:2a:4d:cd:f3:aa:be:16:66:1c:79:e6:c1:ca:9c:16:b7:
4a:6f:c7:8e:1d:ca:0c:ea:b1:27:c0:db:c2:6a:a6:64:ed:8f:
80:57:fc:d7:28:6e:01:5b:a0:9a:29:62:3e:88:79:fd:57:93:
ad:a6:60:61:6d:9f:58:2a:8a:d3:5d:46:1e:bb:42:1e:0b:ff:
e2:ce:80:70:eb:a7:40:e0:e0:76:78:64:0d:99:05:cb:8c:d9:
4b:09:d6:67:14:0d:45:9c:50:00:3e:01:32:3b:c5:82:28:34:
e4:be:f4:50:d4:a9:2e:32:ac:ce:e2:da:67:82:74:00:25:ba:
aa:3c:14:5a:c6:65:10:4e:1e:e2:21:f5:75:f2:08:da:8c:0a:
dd:4d:f8:e8:66:ea:d9:a3:c4:cb:ba:a0:94:4c:92:5d:32:20:
02:dc:5d:ae:73:fd:70:95:63:e3:e6:43:33:ed:a5:3c:ab:8b:
c8:68:82:8c:08:1e:60:9b:00:e5:82:6e:bb:4c:46:08:8e:e7:
d2:27:43:44:44:dd:c2:60:2f:c1:aa:76:d5:02:b6:bc:aa:b4:
f8:cc:76:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:22:45 2025 by rpki-client