Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CACB56A828B11F0AA9616D1DAE4EC9C.roa
File: 4CACB56A828B11F0AA9616D1DAE4EC9C.roa (raw, json)
Hash identifier: 3WF/AK2ivO6B025DFI/3Y4//RpymwlVORdOKoO6/Phs=
Subject key identifier: 4A:A2:F3:17:5B:E1:4C:6B:46:32:0A:4D:07:CC:DA:C0:72:A6:60:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0197D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CACB56A828B11F0AA9616D1DAE4EC9C.roa
Signing time: Tue 26 Aug 2025 14:45:25 +0000
ROA not before: Tue 26 Aug 2025 14:45:18 +0000
ROA not after: Thu 02 Oct 2025 14:45:18 +0000
asID: 57043
IP address blocks: 154.222.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104407 (0x197d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 14:45:18 2025 GMT
Not After : Oct 2 14:45:18 2025 GMT
Subject: CN=68adc885-931d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:8b:fa:1e:85:bf:5a:18:08:ee:de:df:10:
a0:3a:6c:22:ff:2d:b5:57:fa:cf:37:c7:39:f5:3a:
45:c9:14:77:37:42:c2:e6:aa:ed:28:a4:00:25:a0:
ed:c6:3b:f2:c0:1d:20:cc:44:48:91:e5:04:e9:a4:
2a:30:d8:cb:bf:74:6a:b2:0c:bd:78:55:bc:59:9e:
eb:e5:30:78:3d:f7:b4:d2:61:3b:b9:fe:ce:31:09:
f6:1c:1a:f7:fa:84:7a:ab:0f:9d:ea:96:21:21:98:
5a:14:fb:79:14:7f:2d:91:83:50:aa:76:78:4d:4a:
54:af:49:40:8a:50:b9:b4:ca:09:5d:c0:73:60:73:
9c:b2:8a:c9:30:75:8b:44:c2:1b:25:69:8f:3e:eb:
b3:4f:24:49:99:f8:e3:97:ed:2e:1c:74:03:c7:7c:
50:3a:12:1d:b0:40:f5:ab:95:f4:75:ba:c7:23:9c:
0d:59:6f:b8:8b:6e:49:22:8f:ad:06:87:7a:f9:67:
9e:b8:1d:12:0b:6f:75:a9:97:8c:9f:ba:6b:13:f4:
e1:77:02:e6:2b:ea:cf:e4:3d:32:84:cb:bb:64:03:
1e:bd:71:30:c8:df:a6:45:28:72:e2:5e:c4:16:f3:
0f:ac:a9:4f:d7:ed:2a:b1:30:85:5c:67:03:1a:ff:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A2:F3:17:5B:E1:4C:6B:46:32:0A:4D:07:CC:DA:C0:72:A6:60:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CACB56A828B11F0AA9616D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:98:c4:16:e4:80:70:79:02:5c:cd:ed:74:4f:73:89:73:95:
c6:39:db:40:f6:3e:03:41:f0:3f:d2:3e:bd:8a:53:f9:83:cb:
24:a1:84:95:1c:eb:58:84:53:49:35:f0:7f:46:96:b3:b8:3d:
8a:cc:5d:66:79:50:ac:e3:ad:92:02:44:b4:6e:26:82:3e:ff:
10:fa:a1:9a:25:b6:12:78:10:f3:ac:07:c1:c4:7f:60:14:d4:
02:b9:6a:c5:d1:ca:fc:5f:d4:12:bd:55:66:cd:6c:41:92:71:
a8:87:3d:e5:89:7b:20:96:13:72:c2:0b:62:bc:4f:6f:d6:ef:
9b:8b:f1:3b:80:af:71:b8:d8:cd:fb:05:c8:d3:6a:81:98:b9:
ef:2a:c7:80:1c:51:7d:55:d0:10:fc:1e:4d:bf:76:94:ed:fe:
17:01:0e:7f:95:2a:2c:f4:f5:45:00:f7:ba:b9:39:ea:0b:df:
21:66:92:ec:57:e8:f8:25:35:51:d1:25:47:aa:00:86:4b:d1:
98:5a:ad:19:11:4c:ff:1e:40:95:1d:90:cd:7f:61:39:64:24:
e6:bd:49:ad:6b:cc:ea:0d:66:a0:d2:8e:c6:e2:82:28:51:8d:
d7:ff:68:e8:46:bd:d5:bb:c0:52:cb:82:5c:f1:57:ea:18:d7:
28:4a:ca:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:34 2025 by rpki-client