Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAED6766630811F0BA46F9E9DAE4EC9C.roa
File: AAED6766630811F0BA46F9E9DAE4EC9C.roa (raw, json)
Hash identifier: 94hbruDBqssginlGQONmWsiQCTn1jAwwOnyN/9HSDCk=
Subject key identifier: 9B:37:C5:F4:FC:3B:67:CC:84:D4:F9:0F:DB:1A:60:59:52:5D:31:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAED6766630811F0BA46F9E9DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 12:22:13 +0000
ROA not before: Thu 17 Jul 2025 12:22:08 +0000
ROA not after: Wed 27 Aug 2025 12:22:08 +0000
asID: 137899
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101926 (0x18e26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 12:22:08 2025 GMT
Not After : Aug 27 12:22:08 2025 GMT
Subject: CN=6878eaf5-6bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:06:aa:0a:16:da:d5:4d:07:1f:5c:09:44:
b0:a2:f1:42:ea:7c:d7:c2:b8:56:98:32:70:7a:e4:
ab:10:d7:3c:cf:f9:bd:7f:64:22:93:8b:4e:6c:65:
56:6d:fc:0e:60:fe:10:07:e4:f3:4e:38:86:b0:5a:
5d:41:aa:a4:a8:b7:56:3b:44:1e:7c:04:94:ec:09:
7b:8f:16:56:ff:f6:a3:2a:68:ab:f5:ef:6b:98:b1:
24:26:f7:89:2c:dc:09:9c:1c:9b:53:06:76:57:fb:
35:af:0e:2f:b1:05:fd:a8:b4:b4:c6:9e:e1:aa:9f:
e7:93:b2:5f:16:51:83:4d:c0:02:4d:b2:0b:22:3b:
f6:ee:67:36:a8:f0:5b:50:e3:0b:8e:b7:e3:0c:88:
c8:59:f8:5f:b8:7d:27:b2:7a:84:f8:af:b4:c7:b6:
4f:d0:10:df:77:ef:14:b6:85:88:ae:ad:78:8e:d9:
e8:5d:6c:75:05:0a:eb:cf:43:ba:82:fc:58:8f:27:
fe:e3:4c:b6:18:52:47:56:40:2f:e4:90:93:02:2c:
4a:f3:e1:09:1d:ed:78:7c:57:7d:c1:0a:57:ed:2d:
6d:6c:3d:44:ea:6f:0f:89:c9:ae:f1:2b:b9:6e:9f:
1f:83:39:62:48:64:0a:98:7d:f3:51:8e:a6:d0:6c:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:37:C5:F4:FC:3B:67:CC:84:D4:F9:0F:DB:1A:60:59:52:5D:31:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAED6766630811F0BA46F9E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
04:27:a0:05:65:0f:b0:5c:10:86:62:6c:43:c6:f1:73:dc:31:
c4:2a:86:7a:76:36:f1:c8:ef:d7:e0:5a:e9:05:93:07:1b:d1:
32:a6:0a:9a:b9:ce:d9:19:0a:08:f1:51:33:4c:a8:39:2f:9c:
7f:3b:0b:c8:2d:6b:ae:05:cd:8f:dd:4b:a2:f8:b0:57:9d:ae:
fa:b6:00:8c:68:9a:e7:eb:b0:18:d3:63:7a:54:1a:d4:ee:47:
14:d7:91:01:eb:f9:f9:eb:a1:be:2a:19:4d:2c:c8:92:ec:e7:
5f:4b:e3:0d:23:6d:b6:93:9a:5b:9f:63:3f:61:a8:11:a3:0f:
54:96:da:21:bc:6f:52:94:28:01:e8:a7:e8:96:2e:1a:3b:e6:
ff:24:44:4c:8e:28:de:51:06:35:b7:d4:2a:7a:87:ad:ff:b0:
2f:85:1f:ec:47:36:7c:37:59:dc:2d:fa:02:a2:c4:07:19:0e:
6b:35:db:c3:4f:9c:9f:cb:9d:3a:1f:cc:e8:0f:eb:bc:07:ba:
f0:68:2c:0b:ac:75:eb:bb:5a:8c:1a:32:07:2b:ff:fc:7e:b1:
41:73:ff:af:c8:45:e2:bd:c1:8f:6f:d0:6a:15:91:fa:10:59:
18:fd:4c:3d:37:3a:68:ef:93:9b:cb:c2:05:f8:ed:40:de:ce:
0b:79:52:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:46 2025 by rpki-client