Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CEFE8EA889D11F0BCF05EF1DAE4EC9C.roa
File: 4CEFE8EA889D11F0BCF05EF1DAE4EC9C.roa (raw, json)
Hash identifier: 6sGzTk2kRikQfxTrs8S9HlIpz1ZBGj3kKfZErT6ekRk=
Subject key identifier: F5:D2:F7:EB:60:25:F7:8A:4E:12:E7:58:3F:5C:CF:5B:24:AB:D5:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CEFE8EA889D11F0BCF05EF1DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 08:09:23 +0000
ROA not before: Wed 03 Sep 2025 08:09:17 +0000
ROA not after: Tue 07 Oct 2025 08:09:17 +0000
asID: 20326
IP address blocks: 154.202.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105651 (0x19cb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 08:09:17 2025 GMT
Not After : Oct 7 08:09:17 2025 GMT
Subject: CN=68b7f7b3-475b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:9e:9a:6d:3f:9e:ec:35:fd:ed:bc:59:2e:
d9:18:57:8e:77:c9:fe:20:f9:10:e2:76:22:49:9f:
75:99:91:d2:1b:c8:e2:a6:85:bb:11:8c:23:c7:f8:
cf:28:fd:ea:6b:61:f4:b9:27:4d:87:87:65:a2:c0:
1f:2d:72:00:7f:75:a7:16:b3:89:de:ae:71:10:fd:
13:a7:1b:7c:d1:8a:60:f8:54:47:62:b9:ae:d3:a0:
0b:f6:24:0c:88:ab:bf:c9:c2:37:94:7c:81:3a:2f:
1a:ca:ff:e7:ab:26:4c:0c:6c:b8:7e:e7:08:4e:f6:
a0:7f:ae:13:1b:2e:de:c7:9f:3c:8b:e5:bc:5b:87:
34:1e:6c:d4:00:a4:9b:ac:ce:c8:f6:4a:05:11:0c:
e2:c1:75:12:37:25:0e:e7:17:63:82:57:b6:ee:bf:
f3:d0:0b:be:a7:98:06:07:e2:9a:19:77:33:df:a2:
91:c0:22:4b:e7:3f:f6:ee:90:e0:cf:cd:84:fa:25:
00:68:a6:91:13:26:eb:99:13:4a:11:ad:15:4d:25:
99:37:12:47:61:e1:ed:a3:01:1e:b5:7e:5d:a6:f7:
ed:a2:a0:5b:be:04:b2:29:25:3d:09:92:19:04:61:
41:60:76:ce:3c:f5:35:81:95:ba:c1:5e:1d:bb:d7:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D2:F7:EB:60:25:F7:8A:4E:12:E7:58:3F:5C:CF:5B:24:AB:D5:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CEFE8EA889D11F0BCF05EF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:dd:16:eb:57:7b:26:94:48:4b:41:3b:84:44:74:d9:5c:a6:
24:81:1a:05:5b:03:a0:fe:74:aa:41:ce:60:36:09:f8:7f:77:
10:fc:9b:e4:f4:44:4e:f0:4c:56:39:fe:11:50:56:2a:7c:1e:
55:64:1a:31:a9:92:44:25:3e:1b:e3:e4:70:c8:74:d9:12:2a:
c4:d9:48:8f:de:04:e5:0b:4e:d5:08:d4:c5:01:6b:b4:d2:92:
0f:6f:9f:1f:4c:52:f9:e3:c7:82:7a:e9:a6:74:21:59:34:43:
3a:f3:08:90:f7:54:ba:71:9b:27:56:61:76:9c:a0:20:2b:9c:
09:9e:6d:2b:83:7d:88:4d:3c:e4:d4:58:bd:8c:d0:36:ac:7b:
28:32:6b:d2:18:6d:73:b4:2a:97:63:96:4f:f7:3d:7f:ba:f8:
cb:fb:37:c5:5b:07:48:bf:8c:c9:e5:80:d6:61:8d:94:be:3c:
c0:91:9a:37:af:13:9a:96:1b:fc:49:10:e0:46:66:e5:80:ef:
73:1c:bc:59:74:ff:4d:ff:10:d1:21:c8:d3:85:44:6d:0e:87:
e0:4b:51:c5:12:fd:dc:94:75:51:d2:b2:85:b6:46:dc:3c:cb:
e7:0a:3a:fe:1e:a7:23:ff:95:64:91:03:f0:e8:c0:69:38:7f:
b4:b5:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:40 2025 by rpki-client