
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE63266A581611F094BD16BFDAE4EC9C.roa
File: CE63266A581611F094BD16BFDAE4EC9C.roa (raw, json)
Hash identifier: WdMYcIsm53g0LnQcz+66ASzLSrIBu98DjBQyy7T/Ugk=
Subject key identifier: C1:D0:EC:A7:CF:74:10:46:0A:B3:A8:0E:12:AE:2B:E5:9C:AE:EA:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE63266A581611F094BD16BFDAE4EC9C.roa
Signing time: Thu 03 Jul 2025 14:05:43 +0000
ROA not before: Thu 03 Jul 2025 14:05:38 +0000
ROA not after: Sun 10 Aug 2025 14:05:38 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100897 (0x18a21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 14:05:38 2025 GMT
Not After : Aug 10 14:05:38 2025 GMT
Subject: CN=68668e37-4f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:18:ac:89:5f:0b:9d:d8:de:b6:d4:f3:4e:
40:1f:f1:16:fe:6e:f7:aa:99:fd:9c:bf:5e:6e:fa:
1a:96:68:a2:38:47:4d:65:a8:9d:e3:c5:ce:69:0a:
d2:76:ad:35:66:78:47:39:ed:b6:73:f0:ff:7b:8a:
93:60:b2:aa:49:9b:81:f2:da:d5:07:e2:74:5f:bc:
e7:12:a7:51:f5:bc:c1:b5:8c:1f:b9:de:08:cc:93:
df:3f:d3:65:b8:db:99:41:cd:4a:9e:55:a2:25:7a:
a7:44:83:6e:11:68:d8:23:e4:6d:a9:d5:4c:f9:67:
84:ce:85:83:ef:ff:ae:48:5a:06:46:bd:83:5d:c3:
ca:3a:04:5b:19:36:9a:7c:79:68:03:5a:ae:41:b0:
c3:cc:f4:15:a7:d9:87:ab:41:f0:26:42:a1:8d:2e:
9a:d4:43:5d:70:99:72:fd:82:43:7a:20:e0:d7:8b:
af:4a:d2:31:97:5e:83:79:6d:e9:07:6b:e4:3e:80:
3c:8e:8a:9e:f6:8d:fb:86:14:82:5b:c7:77:f4:25:
07:b6:2d:aa:b8:4f:c5:12:4a:65:11:36:13:d4:8d:
ac:c5:1f:68:7d:94:cb:2b:e2:42:35:49:12:89:45:
77:eb:f2:6b:5c:24:7f:3a:7d:56:fe:ad:7d:ec:f2:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D0:EC:A7:CF:74:10:46:0A:B3:A8:0E:12:AE:2B:E5:9C:AE:EA:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE63266A581611F094BD16BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:92:cc:e9:8a:06:00:05:71:ce:51:80:31:53:38:7a:cf:2e:
fc:ff:7f:1d:b4:08:5b:37:d7:9c:65:3e:67:cc:f2:b6:b3:47:
4f:e3:46:d8:66:fc:15:84:ec:3c:4a:a2:8f:77:2e:c7:0a:47:
69:f6:63:59:d9:48:a7:9e:a6:50:ae:23:fc:76:21:8b:1a:ea:
f4:2f:8f:b4:c3:a9:ee:a4:1d:a1:81:08:3b:da:8b:32:3a:cd:
f5:01:18:34:8d:1a:6d:3a:67:71:df:25:c9:09:65:e3:f2:f3:
c2:f4:92:67:5d:04:34:21:c9:36:3d:e9:84:69:15:ba:e9:f8:
c7:04:8d:77:03:82:4d:f7:fb:94:cf:7d:40:f8:8e:5f:89:d9:
e8:2f:ba:bf:63:d7:f4:c1:c9:85:8d:22:de:ed:24:97:29:4e:
ed:76:6a:ba:f3:41:a1:8b:f0:b1:46:74:f5:5d:14:9b:4a:c0:
f3:ea:5b:81:e4:84:f7:13:55:f6:f5:3f:25:2d:1b:c9:4f:0d:
d0:8e:74:b7:fd:e5:85:55:1d:dd:08:43:14:45:17:d9:fc:a8:
c0:49:3c:66:88:89:f6:bc:9a:f8:d4:02:36:2c:60:b5:9a:c8:
fd:6c:a7:b5:ad:8a:3d:c0:71:56:b2:f8:7a:61:50:93:d3:dd:
9d:3e:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:13:54 2025 by rpki-client