Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C756A7C259AE11F0B6C3E0A6DAE4EC9C.roa
File: C756A7C259AE11F0B6C3E0A6DAE4EC9C.roa (raw, json)
Hash identifier: JtyYaXl+xojjhqJKOnomIXxfh3/48C5eTcSatpYyWww=
Subject key identifier: E2:77:49:5F:CB:10:D4:52:20:68:AD:F9:C3:06:28:DD:08:B0:8E:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C756A7C259AE11F0B6C3E0A6DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 14:46:06 +0000
ROA not before: Sat 05 Jul 2025 14:46:00 +0000
ROA not after: Sun 24 Aug 2025 14:46:00 +0000
asID: 40065
IP address blocks: 154.89.160.0/19 maxlen: 24
154.89.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101132 (0x18b0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 14:46:00 2025 GMT
Not After : Aug 24 14:46:00 2025 GMT
Subject: CN=68693aad-2ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:1d:78:57:0c:72:6c:f9:74:3b:87:e2:4a:
d5:90:5c:5c:0e:08:e8:d0:5b:be:5e:40:7c:90:1b:
0a:3d:02:6a:40:e9:e0:87:97:e8:df:c8:5c:7e:26:
62:05:81:6c:1c:81:5b:65:38:1d:36:c2:9f:63:c8:
10:b7:38:ba:e9:56:2a:3c:83:13:bc:5d:34:7c:6c:
54:ef:77:34:01:86:3f:7c:c5:02:25:97:be:37:81:
9d:3c:2c:51:af:5e:44:83:26:e7:2b:1a:2b:ab:23:
5e:ec:36:bf:b8:75:bd:3e:6a:de:38:b8:eb:6b:7a:
3f:a6:fc:70:c5:4c:81:b4:32:c7:dd:93:6a:53:4b:
ee:ba:e8:b0:ab:64:62:db:00:b1:f6:4e:30:27:ef:
1a:63:c4:71:a7:ab:05:1f:a5:74:7f:8d:66:9f:fd:
10:4d:13:56:3c:62:55:73:07:fe:77:69:be:2b:f1:
40:8f:6e:ad:19:eb:b4:cf:05:f3:7c:7a:4b:a5:fd:
d4:69:7c:57:d6:c8:16:74:96:f8:90:08:bb:01:f1:
c0:17:85:b9:96:80:cd:7d:ca:5d:86:4d:a8:5d:b5:
c0:28:c6:93:6e:05:fd:c4:4b:67:4a:c8:87:2d:0b:
94:c1:be:b5:14:44:4b:97:95:45:d1:59:16:55:cb:
64:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:77:49:5F:CB:10:D4:52:20:68:AD:F9:C3:06:28:DD:08:B0:8E:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C756A7C259AE11F0B6C3E0A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
154.89.200.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:c1:3a:fe:4b:49:83:29:ac:60:56:f6:63:c0:5d:c6:b7:8b:
0c:a0:55:bf:b3:6a:ed:f3:f5:96:f1:f2:a9:bd:9c:55:f9:95:
d1:08:ac:98:2a:51:7d:35:d2:0a:60:6d:d1:67:26:e2:e8:18:
93:a7:87:fb:70:ab:bb:60:50:c1:51:43:d3:04:23:d8:ef:99:
d5:08:b4:0a:49:76:35:ca:2b:c2:06:38:dc:89:bf:35:b4:9c:
b8:9c:57:d9:99:59:ef:fd:2d:4a:bf:ec:f9:b7:7b:13:f5:f3:
73:98:27:89:4c:2f:9a:c2:dd:59:71:04:ef:02:62:3b:73:b1:
84:5b:f0:0a:7b:22:6a:48:6b:7c:c1:94:6a:42:2d:ca:f0:48:
7b:5a:0c:53:ae:6f:c9:16:ce:86:9f:f1:89:b5:c3:0f:3c:34:
67:4e:6e:10:52:55:5b:f2:87:5d:e5:7b:33:d6:91:11:9e:7d:
f4:81:07:c6:db:b2:30:e6:2e:5d:dc:ec:b8:ea:96:9b:61:34:
89:d8:e8:8f:83:09:4f:d1:e9:b1:56:13:24:e6:dd:a0:22:83:
d0:73:96:64:1c:53:83:a3:1a:da:53:8f:1a:8c:76:37:52:2f:
23:16:34:9d:95:2a:23:26:24:ca:af:32:13:be:52:bf:40:bb:
95:e2:64:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:45:20 2025 by rpki-client