
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A2A9276504511F08824AEE3DAE4EC9C.roa
File: 4A2A9276504511F08824AEE3DAE4EC9C.roa (raw, json)
Hash identifier: PK3kxx6xLI/JyfCxB2QnoYKpu8FVkkZMzB7w5MWY9Yk=
Subject key identifier: 65:A5:52:68:7B:0F:67:9A:C5:F2:37:08:28:7C:43:B1:2C:30:91:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018813
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A2A9276504511F08824AEE3DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 15:18:18 +0000
ROA not before: Mon 23 Jun 2025 15:18:13 +0000
ROA not after: Wed 30 Jul 2025 15:18:13 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100371 (0x18813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 15:18:13 2025 GMT
Not After : Jul 30 15:18:13 2025 GMT
Subject: CN=68597039-9e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:7b:f6:84:9d:b2:16:b5:e5:9b:2f:eb:fa:
e9:2e:53:fa:b1:7d:47:75:8e:c6:d4:6b:47:ee:ae:
d8:f2:92:fb:f1:fb:bf:8b:c4:82:c9:40:19:cc:7f:
69:29:2e:1c:b0:5b:dc:a4:e1:4c:80:22:9b:5c:86:
97:92:bd:5e:a6:f6:24:c4:31:b4:91:28:06:77:43:
e4:8a:bf:98:19:cb:47:73:8c:d9:b3:49:f7:22:ed:
d8:6e:95:a3:ac:34:7c:70:a5:1b:2e:87:11:09:02:
9e:85:c2:de:55:2e:e6:58:0e:be:59:83:d8:28:b7:
4d:ca:59:3c:a4:09:d7:07:0d:33:8a:3f:98:7c:3e:
ac:63:11:e9:ea:29:7b:13:ae:b3:1d:04:4c:1d:72:
9e:4c:b2:56:67:be:97:52:99:e8:00:28:cf:e4:22:
f8:68:43:bb:8e:8c:e3:45:32:97:fe:70:05:35:cf:
c6:e1:7a:5f:d4:6f:57:84:1b:3e:bb:42:63:04:96:
e0:44:9b:46:f9:68:7e:f2:4d:3a:19:15:31:2a:0d:
fa:02:09:b9:58:43:92:28:8a:79:7e:21:13:88:07:
4e:3e:f2:fd:f4:15:e8:94:7c:fb:0b:33:5c:0f:ef:
cd:37:1d:5f:f3:a3:9a:9b:cd:4c:fd:90:b8:a0:29:
96:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:52:68:7B:0F:67:9A:C5:F2:37:08:28:7C:43:B1:2C:30:91:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A2A9276504511F08824AEE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
bf:b4:24:e9:b8:88:93:d4:a2:59:85:0e:d3:1f:29:4c:7d:cd:
d8:e9:27:b8:89:19:3e:09:fb:79:e7:78:66:4b:b8:62:8b:55:
d7:fa:ee:98:ca:3c:2d:e2:9f:37:ff:44:ae:2e:60:6c:2a:68:
6a:ef:69:67:99:6a:85:65:ff:61:ac:92:60:1f:75:e6:8d:d4:
84:86:9f:4b:a2:0f:c2:a0:85:fb:53:3c:b7:2d:89:fa:af:a6:
d6:5a:ea:a1:cf:da:b4:cf:5f:a5:89:08:3f:1f:41:c8:4b:83:
0c:2b:6f:e3:d6:66:73:dd:b9:a3:87:e0:59:b5:6b:4d:b2:b1:
99:d4:0d:18:aa:f1:87:11:22:00:13:24:25:74:d6:23:f5:31:
7d:24:58:2b:db:ac:4c:b6:83:5f:dd:fe:15:68:18:a3:52:3e:
59:fa:39:c2:f6:73:27:c4:85:13:86:af:b7:5e:a4:ea:0b:86:
9f:7e:78:0c:44:7d:1d:d2:a7:f9:61:9c:8e:dd:a1:70:36:98:
e8:e2:80:bd:08:10:45:50:61:4d:99:71:7f:66:c4:26:a9:6e:
70:76:be:a5:17:a4:f8:2b:f6:78:f8:8b:b2:e7:b5:24:b8:58:
51:e3:60:0a:58:b8:b2:ef:e6:e4:83:3e:b4:6b:76:98:42:37:
5e:c9:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:20:52 2025 by rpki-client