
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AFCA613A2FF011F0B54E8CB4DAE4EC9C.roa
File: AFCA613A2FF011F0B54E8CB4DAE4EC9C.roa (raw, json)
Hash identifier: VxZqnllPmTwAJe+1K1EViQhrFOo4/Xy/xE72Mf2Fo0U=
Subject key identifier: 0B:04:E9:E4:9C:37:89:84:69:C5:1B:64:3F:21:86:64:85:B0:17:C1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1ABF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AFCA613A2FF011F0B54E8CB4DAE4EC9C.roa
Signing time: Tue 13 May 2025 11:52:04 +0000
ROA not before: Tue 13 May 2025 11:51:59 +0000
ROA not after: Thu 13 May 2027 11:51:59 +0000
asID: 46337
IP address blocks: 154.16.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 07:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6847 (0x1abf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 13 11:51:59 2025 GMT
Not After : May 13 11:51:59 2027 GMT
Subject: CN=68233264-0cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:da:fd:72:bb:80:b9:99:7f:ad:44:14:10:
65:73:02:b2:4d:02:be:33:54:73:90:7d:83:fe:0b:
b1:56:33:68:06:1c:54:6d:ef:3a:ab:9d:89:fa:ba:
00:d8:66:00:59:56:09:b3:27:ea:98:4a:37:9c:2e:
5d:81:7d:7b:73:02:06:28:2e:5c:fd:ff:75:0f:40:
75:5e:ed:3c:ed:66:2c:b3:8e:b0:2b:bc:90:0e:f5:
d6:9e:b2:39:55:18:ee:53:a4:41:29:44:eb:95:2b:
bd:45:f6:5b:c6:45:77:4d:55:b6:1b:ad:ad:3d:f8:
22:99:a8:9e:65:f1:e0:02:dc:2a:a9:85:23:6f:27:
87:96:bf:2f:18:cb:12:65:4c:9f:b0:7c:ca:19:38:
41:b4:c6:1e:c4:fa:59:c5:ed:66:3a:a0:ef:70:8d:
0f:a1:dd:7d:ad:4e:12:dc:15:70:f9:e6:9f:7d:50:
31:09:c8:dd:7c:ad:ce:0a:7d:65:f0:28:02:18:f2:
4c:fb:bf:5c:33:90:1a:04:e7:7c:ec:91:06:34:18:
25:bb:80:a5:53:80:19:7e:94:2a:06:81:04:3a:00:
cf:0f:72:ea:09:20:b2:fd:38:c9:3c:1e:ac:3a:b8:
9f:e8:37:80:b5:67:30:43:0c:fe:a9:3b:6c:5e:d2:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:04:E9:E4:9C:37:89:84:69:C5:1B:64:3F:21:86:64:85:B0:17:C1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AFCA613A2FF011F0B54E8CB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.118.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c0:cd:38:94:e3:bb:f6:7a:33:80:df:74:9d:82:cc:a4:41:
ac:a2:22:97:0f:7d:ca:d1:3e:fa:84:27:34:90:d1:23:4e:4f:
2c:9b:9c:25:97:f6:7e:f3:7f:09:9c:9d:f1:00:7c:70:c3:97:
3e:88:f5:16:15:f6:e9:b1:1d:81:8a:96:75:d0:b0:18:63:ee:
bd:8e:80:19:3c:41:eb:e3:e9:47:cf:5e:c1:ed:e8:d6:2c:89:
f8:d0:24:2e:5d:69:10:51:ca:d2:0b:70:49:4a:fe:35:83:7d:
c0:5b:9c:91:21:9e:db:30:73:ea:76:1a:14:a3:7e:3e:8d:2e:
95:d0:1b:41:d0:21:ec:b8:b6:e9:95:7f:e9:00:dc:7e:c1:f1:
ed:26:a5:4f:1a:87:18:53:f8:d3:9c:0f:8b:3a:a5:f2:3d:cd:
a9:52:f5:f2:90:f9:03:3c:81:8a:3e:10:17:69:22:73:b8:31:
97:c0:3b:f0:8d:12:29:02:9e:bc:da:b9:89:86:08:e8:d0:66:
c0:6e:60:18:d7:9c:48:1a:21:73:0f:5e:25:7e:9f:2a:d3:5e:
e7:dd:7f:9c:65:15:86:1e:c2:15:7d:9d:d7:e2:12:90:d8:b5:
f7:46:76:40:fc:65:68:a0:11:ff:cf:43:59:03:2b:df:eb:a5:
52:33:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:31:19 2025 by rpki-client