Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6BEDB585B4D11F0956E03B1DAE4EC9C.roa
File: D6BEDB585B4D11F0956E03B1DAE4EC9C.roa (raw, json)
Hash identifier: sbXb9yyOQpm0tVYDEdTb6LkTAS3TqXBzqnCaj2/Jx9s=
Subject key identifier: 96:63:A7:0F:51:D2:00:9C:4A:DF:D3:F7:68:58:38:F3:74:A5:2E:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6BEDB585B4D11F0956E03B1DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 16:17:13 +0000
ROA not before: Mon 07 Jul 2025 16:17:07 +0000
ROA not after: Sun 17 Aug 2025 16:17:07 +0000
asID: 6079
IP address blocks: 154.210.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101426 (0x18c32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 16:17:07 2025 GMT
Not After : Aug 17 16:17:07 2025 GMT
Subject: CN=686bf309-4801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:73:45:20:5c:06:8f:b6:b1:23:04:1e:08:
f7:39:fd:7e:2a:51:61:57:04:05:c1:e5:93:b5:4c:
04:97:86:54:1d:6e:aa:e7:70:ea:a1:be:db:d3:08:
e8:5b:5e:03:8c:97:89:4b:97:59:7c:40:1c:96:43:
89:e8:34:c6:87:89:5c:85:6d:11:1e:d7:99:72:f1:
79:dc:56:9a:52:54:f7:c9:3b:22:b6:27:ae:53:ed:
ba:66:44:f8:95:63:7c:a1:42:e2:cb:1c:21:dc:9d:
63:af:6b:ee:5d:f2:46:11:95:ff:bd:4e:23:8a:41:
69:48:ad:c7:6a:6c:55:fc:3c:52:1c:dc:85:5e:5a:
01:24:bc:fc:20:eb:c8:cf:a1:25:4d:2e:2b:45:cf:
b2:5f:88:7d:da:12:07:f3:5b:83:ff:c0:f2:a3:90:
42:f0:19:68:36:1f:a1:ae:10:ef:31:47:b9:27:70:
39:a1:c1:6d:bf:dc:6d:c4:76:13:2d:c6:fc:c3:1f:
00:bd:bf:5e:9c:7e:b7:f5:d3:65:96:f7:d9:d8:e2:
02:a7:f2:12:a6:d7:f2:85:eb:db:33:b2:3a:0f:ee:
40:40:aa:5c:dc:39:49:5d:d5:4e:30:97:d5:d0:4c:
bf:c5:82:b6:23:53:d4:a3:d1:4f:de:35:84:b4:2f:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:63:A7:0F:51:D2:00:9C:4A:DF:D3:F7:68:58:38:F3:74:A5:2E:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6BEDB585B4D11F0956E03B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:5e:66:74:9a:82:2d:23:63:64:67:a7:c5:0b:52:74:0b:47:
6d:ab:6a:51:dc:7f:d9:b7:44:1c:e7:94:76:79:2d:2d:89:e3:
11:5f:a6:c5:71:65:61:62:ce:fd:9a:76:30:81:37:b6:06:17:
04:32:74:4c:e3:97:c6:d4:9c:be:f9:69:4f:2b:77:63:ca:04:
f7:0f:5b:74:74:ce:ce:00:c0:63:8f:ba:6c:04:57:a1:63:94:
4d:78:25:0c:42:f2:cc:32:72:8c:7e:86:c3:9f:88:a1:d5:1a:
95:95:9d:b0:0d:0f:83:bc:39:8f:a6:e9:28:13:77:f9:ef:28:
ef:5b:db:4d:0f:9f:cb:75:b2:be:2a:4d:b7:2e:10:da:68:23:
6a:e8:b9:6d:28:0d:14:86:e5:72:d5:40:a6:88:26:46:c9:d9:
4c:83:08:ca:24:15:46:4c:21:78:0a:ce:9a:01:36:c5:85:aa:
3f:7c:f0:a2:79:87:90:22:fb:56:52:b0:1c:e0:06:cf:48:2a:
84:a0:01:02:91:50:37:af:59:5f:a3:45:ac:a3:20:06:47:d3:
40:62:ef:44:0a:c1:0d:48:c8:59:e9:c8:17:f8:5b:aa:29:cc:
0c:83:84:26:b8:48:a1:c9:08:9c:c8:73:b5:8f:2d:99:1b:0c:
a5:44:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:09 2025 by rpki-client