Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45994CBE5D7B11F092D122E9DAE4EC9C.roa
File: 45994CBE5D7B11F092D122E9DAE4EC9C.roa (raw, json)
Hash identifier: D+F5h5m2bIhdRWan81H4QdCPCzcgjC3AOibUneedJyM=
Subject key identifier: 94:54:15:C3:43:ED:57:EA:E7:9F:83:6D:80:51:B6:0B:59:F9:8A:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45994CBE5D7B11F092D122E9DAE4EC9C.roa
Signing time: Thu 10 Jul 2025 10:47:28 +0000
ROA not before: Thu 10 Jul 2025 10:47:23 +0000
ROA not after: Mon 15 Sep 2025 10:47:23 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101702 (0x18d46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 10:47:23 2025 GMT
Not After : Sep 15 10:47:23 2025 GMT
Subject: CN=686f9a40-c4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:b1:f2:7f:ec:5a:c2:42:35:c3:f8:03:d4:
33:a4:41:44:9c:86:ae:81:8f:37:1e:d6:25:06:d6:
c7:bb:2b:ef:8c:59:cc:f2:77:8a:81:5e:44:ad:1d:
57:a9:00:0d:d3:ba:64:e3:66:61:91:2a:f5:d9:ab:
60:3b:11:1e:ee:a1:6c:27:99:2e:7b:21:16:2c:6a:
ec:d3:8d:73:fa:2a:60:df:7f:ba:f4:87:54:e9:18:
7d:45:84:35:de:50:1d:fe:f9:4d:ae:03:8d:40:e2:
7d:41:e8:8d:3a:f4:7a:ef:f2:c9:01:1f:29:0f:01:
f7:00:1f:0f:c9:ea:b7:48:c2:f2:42:7c:fe:76:9d:
2a:13:c1:53:18:c3:68:98:97:75:df:22:d3:52:79:
62:1d:fd:f0:e8:6e:d7:aa:b7:01:1d:b7:c2:c7:16:
ad:18:c6:36:4a:d8:c5:79:f8:44:96:4a:d9:81:ae:
b0:1c:92:1b:40:8f:b2:44:c5:ab:4c:9c:8e:28:f8:
98:4f:85:20:3a:b4:86:ce:71:96:f7:cf:f7:fb:b7:
a1:10:f8:52:04:bd:62:a9:f0:7d:cf:31:ac:3e:63:
b4:9a:71:aa:d5:94:0d:18:59:8a:13:68:d8:4f:00:
c7:bb:68:f9:1c:ba:d0:fc:b6:34:e4:af:20:d2:39:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:54:15:C3:43:ED:57:EA:E7:9F:83:6D:80:51:B6:0B:59:F9:8A:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45994CBE5D7B11F092D122E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
80:34:8e:c8:7a:45:82:9a:3c:45:51:95:20:5e:16:80:c2:6b:
7c:bb:88:6d:f9:08:e6:e7:bc:31:3c:ea:c3:46:ba:c9:8f:e9:
8c:08:05:b6:30:76:0a:3b:ed:64:d8:e5:48:cf:65:7d:38:cb:
66:eb:0b:2b:84:17:3a:c1:f1:5b:28:8e:91:32:26:94:56:0b:
dd:e3:19:82:65:5e:52:88:76:53:3d:8c:62:2a:f7:4e:4b:b9:
ff:1c:28:1c:28:b0:15:b2:48:c0:2a:90:8d:ec:61:40:f5:c8:
7e:f5:ef:1d:a1:13:35:84:38:b8:dc:c5:62:c6:15:4e:7d:24:
cd:7e:ee:95:35:3c:1b:eb:ba:7c:19:6e:07:17:d6:41:fc:45:
85:5c:22:f1:13:40:5b:09:4e:af:63:30:83:52:87:88:3a:b2:
1a:83:b7:72:62:f1:e2:d6:9e:40:4f:ce:f6:1e:ce:b5:41:e5:
9a:3c:18:13:35:46:42:4e:7c:53:cb:4b:17:9e:51:6c:97:5c:
7c:b5:73:aa:bd:aa:81:62:15:63:38:69:ed:b8:b5:37:1d:22:
0c:c3:f8:1c:0d:d9:a2:32:ab:41:0a:8b:65:eb:cd:17:e4:6d:
15:62:d4:74:ac:6b:bf:7a:df:06:a2:42:6a:2d:6e:d2:cd:cb:
57:8f:e9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:21 2025 by rpki-client