Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/48F867A2456E11F087ADB5BEDAE4EC9C.roa
File: 48F867A2456E11F087ADB5BEDAE4EC9C.roa (raw, json)
Hash identifier: HniBxFhWa7ObvtrnCe1j4K1yPR5biH+9y8X7bi0+ZtY=
Subject key identifier: 3C:55:F3:1A:39:91:84:68:35:A9:8F:9D:9F:59:11:CF:B5:08:55:B0
Certificate issuer: /CN=F363BEDEAF/serialNumber=E8F1B1249BE5C2AA56F39B75B04EBD01E4C69D13
Certificate serial: 0116
Authority key identifier: E8:F1:B1:24:9B:E5:C2:AA:56:F3:9B:75:B0:4E:BD:01:E4:C6:9D:13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6PGxJJvlwqpW85t1sE69AeTGnRM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/48F867A2456E11F087ADB5BEDAE4EC9C.roa
Signing time: Mon 09 Jun 2025 20:14:03 +0000
ROA not before: Mon 09 Jun 2025 20:13:58 +0000
ROA not after: Tue 09 Jun 2026 20:13:58 +0000
asID: 37515
IP address blocks: 196.250.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.mft
rsync://rpki.afrinic.net/repository/afrinic/6PGxJJvlwqpW85t1sE69AeTGnRM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 19 Jul 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BEDEAF, serialNumber=E8F1B1249BE5C2AA56F39B75B04EBD01E4C69D13
Validity
Not Before: Jun 9 20:13:58 2025 GMT
Not After : Jun 9 20:13:58 2026 GMT
Subject: CN=6847408a-2b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:a1:68:e5:7d:18:3a:fd:e2:9a:9f:c2:00:
c6:1a:21:fe:ce:65:e9:1e:84:aa:c1:1a:97:95:5c:
03:6b:99:6b:3d:74:29:2e:5a:bc:19:0d:29:af:eb:
0f:b6:d7:43:78:88:b9:11:b7:17:a5:88:ee:00:e6:
56:2b:83:0d:6b:95:d9:4e:60:35:74:07:b5:9b:3c:
b9:3c:4e:87:18:85:3d:99:7c:2e:6f:0a:03:92:57:
d4:8f:99:da:4c:e0:e2:bd:f1:84:38:03:4b:62:81:
9b:ad:1b:c6:15:6e:1d:5b:77:4c:6a:80:aa:a1:3c:
e7:49:53:f0:b3:bb:16:db:1d:71:f5:b9:35:11:82:
01:86:3c:ec:b5:06:53:3d:27:5a:d5:aa:76:77:5d:
c0:5a:f6:c4:33:31:c1:86:45:30:b3:28:d6:eb:9a:
b0:3d:c9:cc:31:47:95:15:d0:42:84:73:e8:3a:c6:
e7:6e:44:e8:d3:76:9a:74:58:60:a4:cc:b3:f4:05:
fc:66:be:c0:0c:91:e9:c1:c5:bb:36:df:f8:1d:dc:
bf:8a:45:4f:cd:b3:0c:60:97:c2:b3:06:d2:40:d1:
7a:29:4c:2e:8c:33:3a:72:0b:6d:c8:8d:33:a1:e7:
e7:ad:ed:a4:3f:83:50:2b:0e:89:6f:f8:0e:50:69:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:F3:1A:39:91:84:68:35:A9:8F:9D:9F:59:11:CF:B5:08:55:B0
X509v3 Authority Key Identifier:
keyid:E8:F1:B1:24:9B:E5:C2:AA:56:F3:9B:75:B0:4E:BD:01:E4:C6:9D:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6PGxJJvlwqpW85t1sE69AeTGnRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/48F867A2456E11F087ADB5BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.250.0.0/18
Signature Algorithm: sha256WithRSAEncryption
99:4b:a2:36:75:64:77:63:77:16:0c:b4:a4:fc:24:41:68:50:
33:4c:c6:39:35:5e:4f:ec:23:e9:3e:b2:6d:ce:68:d0:1b:83:
9d:7f:05:c7:02:dd:6f:a2:bb:99:98:26:3e:f0:83:37:20:f4:
c8:f0:73:cc:88:45:b2:32:6a:8f:85:03:25:07:68:df:22:65:
a5:64:56:14:42:64:9e:52:f0:46:6a:96:50:64:44:96:84:e8:
c6:30:93:91:f3:6b:1e:74:46:ba:ec:50:84:be:43:83:6c:b9:
5f:1a:a8:07:b9:a3:82:a2:d4:c6:e7:e3:f7:f5:28:10:d6:a3:
8f:b9:c0:af:28:de:ea:ee:84:ba:d2:81:16:c7:ee:14:e0:c1:
c3:8f:83:b3:1a:0b:ff:bf:0f:5f:78:af:dd:9a:85:e6:2b:75:
24:05:29:c6:34:88:2d:43:04:a4:27:52:7c:99:8f:d2:ed:d3:
76:eb:6a:53:a6:f5:59:90:34:d6:1d:0d:a2:41:4d:63:6c:8e:
21:88:78:8a:ba:86:cb:bc:d1:bd:98:b0:22:7e:52:c4:f4:72:
d1:78:79:f4:be:fc:e4:bb:87:2e:a0:91:1a:0f:5e:10:7a:3d:
48:de:c9:67:c4:45:16:9b:8d:a4:b6:77:47:f7:ff:8e:f4:f6:
f5:28:21:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 17 11:06:50 2025 by rpki-client