Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE43A87859B311F08F1426C6DAE4EC9C.roa
File: CE43A87859B311F08F1426C6DAE4EC9C.roa (raw, json)
Hash identifier: Lmb/mxGXpGcijl+xJ3aShVA+m0VnZBrK0hs8U0YIvLQ=
Subject key identifier: 9F:74:80:5E:D2:7C:4B:9C:53:16:E5:4D:A4:D0:A5:13:00:93:F8:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE43A87859B311F08F1426C6DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 15:22:05 +0000
ROA not before: Sat 05 Jul 2025 15:22:00 +0000
ROA not after: Fri 17 Jul 2026 15:22:00 +0000
asID: 400619
IP address blocks: 154.204.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101140 (0x18b14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 15:22:00 2025 GMT
Not After : Jul 17 15:22:00 2026 GMT
Subject: CN=6869431d-b3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:f2:5d:f9:50:3e:00:63:80:fe:31:99:f7:
a8:9b:16:8f:16:38:85:93:fa:43:81:5c:35:87:57:
f0:95:92:17:12:f7:5c:24:56:86:96:2e:07:cd:45:
d0:52:76:0a:8e:0b:d4:0c:31:0b:b2:aa:cf:e2:8f:
36:b3:6b:58:4a:f3:06:85:2b:e1:41:41:91:3f:15:
2c:bd:31:e3:a4:69:27:36:ea:c6:90:39:b6:5d:ba:
ab:83:f4:e7:e9:a0:24:2e:73:eb:fc:1d:d6:5a:81:
58:0a:da:ee:ee:10:a3:0e:4b:d6:38:99:a2:07:20:
49:e9:17:63:b2:52:a1:34:ce:f3:50:09:fe:8f:fb:
2a:b0:e5:52:c7:56:ca:9e:de:56:70:4c:4f:89:fd:
4f:df:f6:b1:73:7e:64:d9:c3:c6:ce:d0:3e:87:d0:
7c:93:8b:7a:1b:eb:14:3d:05:69:3a:4e:80:c8:bd:
cc:a8:5f:05:74:d4:39:30:63:cd:3c:e3:1b:64:00:
dd:e4:b6:bd:d4:eb:bc:96:54:e6:95:b1:1f:7b:e0:
9a:f4:51:f0:f5:4e:e7:c3:a5:4f:cc:19:0c:d3:93:
23:df:88:98:08:6f:9c:9c:97:fa:ea:b6:1f:af:cc:
2d:88:a5:3f:50:4c:43:17:f1:f1:1c:46:59:d4:1a:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:74:80:5E:D2:7C:4B:9C:53:16:E5:4D:A4:D0:A5:13:00:93:F8:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE43A87859B311F08F1426C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.8.0/21
Signature Algorithm: sha256WithRSAEncryption
14:97:ac:11:13:02:a2:62:60:42:23:91:fe:b2:3a:8d:93:62:
e7:b8:59:b2:20:22:b2:bc:9e:07:39:18:2e:ad:7c:89:6c:cb:
25:4f:70:7f:2e:ab:d0:ff:80:eb:d4:8f:e7:7a:13:ae:37:7d:
ef:aa:f1:2d:e1:42:7c:f6:17:f2:e0:9a:83:f1:81:d3:47:45:
c5:71:4d:94:4c:e5:c6:5a:ee:cf:c7:81:2f:ea:b3:3f:2a:40:
38:92:a5:58:f3:25:07:9f:98:d9:12:55:69:d1:6b:99:87:25:
ce:64:9c:ef:2e:a2:af:62:64:66:9d:0d:62:77:1e:7d:20:15:
37:56:77:11:bc:76:6a:61:2c:d5:dc:25:8a:ee:a5:e9:03:4f:
c8:a5:2f:ef:88:96:7c:99:c1:a6:07:5f:1a:86:8c:d4:c1:dc:
71:57:a4:0d:31:32:1a:43:78:14:97:7a:0c:61:22:b9:fa:05:
1e:1b:64:93:ab:a5:25:64:21:97:94:3d:38:25:1d:a0:49:4a:
cf:45:97:4f:38:d0:4c:b5:10:50:86:a7:a1:35:d7:83:17:c0:
64:33:2d:dd:9d:ec:cc:37:77:be:c2:fa:e5:c0:ea:63:b4:e3:
33:7f:ae:33:71:f9:22:33:a1:b0:b6:e9:40:d9:55:49:d0:fc:
a2:2b:af:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:07 2025 by rpki-client