Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/116EBB58630811F0BF65B7E5DAE4EC9C.roa
File: 116EBB58630811F0BF65B7E5DAE4EC9C.roa (raw, json)
Hash identifier: FsW7MRqqsRFKUh2vfE82Gd+KNtKIej8ZKoUvcAPntBU=
Subject key identifier: 55:69:25:89:78:44:9F:90:F3:0E:FC:99:3B:CA:30:23:B3:93:C9:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/116EBB58630811F0BF65B7E5DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 12:17:56 +0000
ROA not before: Thu 17 Jul 2025 12:17:51 +0000
ROA not after: Wed 27 Aug 2025 12:17:51 +0000
asID: 395886
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101924 (0x18e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 12:17:51 2025 GMT
Not After : Aug 27 12:17:51 2025 GMT
Subject: CN=6878e9f3-3610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:70:96:b8:ba:a5:61:fa:39:d2:aa:bb:6d:
7e:06:30:63:31:61:7d:f7:3c:ee:54:a1:35:29:9a:
4f:fa:a8:66:13:84:d3:9f:c6:01:1a:23:48:1a:c1:
05:d7:14:4d:71:d3:25:4d:57:8a:26:85:3d:58:05:
17:93:1f:e4:a8:0e:49:3f:a6:bb:93:e2:c9:a4:da:
10:18:5b:e4:01:51:56:f0:4d:e3:c6:21:9f:57:2f:
0f:b1:10:15:ef:39:2f:79:8c:24:7a:c3:be:9d:40:
97:a2:c2:ff:28:59:7d:e8:59:73:0b:4c:d3:8d:dc:
f3:17:0b:5b:21:45:eb:0b:bb:36:79:de:1e:de:94:
52:10:09:f1:fc:2a:77:69:c0:b4:05:a2:9d:03:c4:
d1:d0:28:89:de:0c:e6:68:47:ef:2a:27:34:23:a5:
25:90:8b:3a:3b:f0:44:88:05:97:27:c2:e0:6f:3e:
94:b0:52:b0:34:2e:be:54:ed:75:eb:2a:12:60:31:
cd:04:ce:bc:58:47:36:b8:14:3d:f7:64:ce:9e:d5:
69:03:56:48:7a:12:6c:9a:7c:22:df:c0:ae:40:76:
4a:c7:21:9b:f9:5c:d4:81:f8:2c:b8:55:8c:5d:d5:
5a:8d:18:0e:f7:8b:f1:2c:fa:86:95:e3:e9:81:e4:
b8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:25:89:78:44:9F:90:F3:0E:FC:99:3B:CA:30:23:B3:93:C9:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/116EBB58630811F0BF65B7E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:73:1f:35:83:b9:62:e4:66:99:72:78:04:34:94:f9:64:09:
7f:12:65:e3:d5:57:6c:af:70:01:c9:c8:b0:bd:be:0d:e5:94:
d2:33:21:ad:60:2a:75:a5:e4:3d:08:ac:f3:f7:68:bb:58:23:
ad:9a:ec:4e:f8:8b:93:36:d5:2d:bd:20:47:88:fb:4d:1b:ef:
52:be:c0:f1:60:11:46:6b:aa:6a:2d:ad:ea:f9:da:f3:d0:5b:
2c:32:3f:00:06:2c:27:cf:26:f4:0a:56:f3:19:7c:8a:d5:89:
19:13:c4:4c:27:b7:76:b9:24:25:25:2b:7f:b6:4c:b2:dd:c5:
dc:c2:cc:83:e6:1e:a7:ab:fa:95:81:a8:be:3e:85:2d:46:cf:
d8:55:14:75:b1:5c:79:cc:c2:94:50:fb:8f:09:33:32:56:bb:
9c:d5:ba:97:d5:2a:63:8a:b5:8f:2e:63:06:5a:d8:a1:24:de:
be:bc:bb:c4:40:f7:96:d4:fe:cf:e6:64:55:a1:9c:40:8b:11:
08:80:10:f2:88:98:e5:0e:a3:de:46:0e:89:f9:c1:35:27:47:
6f:44:e5:7d:a5:df:1e:e0:c7:ba:54:46:1d:1f:fb:7b:85:9e:
7d:38:dc:07:22:72:01:17:26:08:36:7c:b7:01:3f:34:56:60:
bb:10:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:04 2025 by rpki-client