Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56AEB3188CAB11F08B3537C7DAE4EC9C.roa
File: 56AEB3188CAB11F08B3537C7DAE4EC9C.roa (raw, json)
Hash identifier: n3ZLMAgYKef2X2qeZIuwTfjfSXPVbshqylf48fiDS08=
Subject key identifier: 82:6E:BD:80:48:7C:54:26:88:BA:18:42:F4:C9:7B:78:8B:D5:3E:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019ED1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56AEB3188CAB11F08B3537C7DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 11:59:57 +0000
ROA not before: Mon 08 Sep 2025 11:59:53 +0000
ROA not after: Mon 27 Oct 2025 11:59:53 +0000
asID: 395886
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106193 (0x19ed1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 11:59:53 2025 GMT
Not After : Oct 27 11:59:53 2025 GMT
Subject: CN=68bec53d-08fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:6f:be:9f:64:dd:24:05:e9:1f:54:69:53:
f2:f8:3e:68:ca:50:78:ff:69:b3:38:19:ac:ce:7b:
1b:7a:43:ac:60:b3:02:7c:cf:3d:7f:25:e0:19:1f:
1e:f2:3c:14:d7:12:35:49:a1:e3:4e:07:86:85:be:
c1:18:ea:bb:e4:2a:9a:25:c7:84:26:74:0a:85:6a:
45:71:19:49:0f:b5:9a:87:e0:0d:1f:78:05:2a:4a:
45:29:5c:71:35:18:1b:cd:bc:00:9f:d7:b0:66:d4:
85:33:f1:2f:91:af:5b:1d:df:bd:b0:22:58:e6:51:
e8:d0:0a:d4:37:23:b9:2c:96:07:30:da:7c:e0:d4:
e2:88:a8:c3:15:95:96:36:3f:25:12:b6:54:f8:db:
74:ff:7f:82:11:c3:f8:e7:bf:1f:93:63:9a:e2:05:
79:97:b0:29:ce:13:1d:05:16:31:2c:be:e0:7c:25:
5f:8b:3f:37:4e:37:f3:62:08:90:a2:cd:56:fa:f9:
21:c5:df:12:f8:80:f8:63:a2:29:b4:cc:c6:fa:27:
81:a8:1f:0e:dc:5c:a2:71:3d:f6:f0:5c:08:9c:ed:
53:c3:66:b2:c3:33:e6:dd:24:dc:b4:ee:f4:d9:bc:
36:64:a9:9f:49:78:d2:a6:9e:32:8a:56:30:77:30:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6E:BD:80:48:7C:54:26:88:BA:18:42:F4:C9:7B:78:8B:D5:3E:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56AEB3188CAB11F08B3537C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
14:66:9a:9d:2a:e1:e6:c3:fc:0e:fb:4c:9a:1f:29:8b:7f:7b:
38:97:4c:77:03:b2:ca:1a:50:3b:b0:3c:d5:9f:e2:12:8d:9a:
1f:9b:ea:20:ce:5c:0c:70:dc:c9:30:70:00:70:87:90:c6:05:
31:ec:53:3f:99:64:18:9d:f3:f0:ff:44:28:e7:0d:c4:55:e5:
cb:e7:34:0f:05:8b:77:7a:51:7a:ac:91:61:16:69:9a:0d:c2:
1f:93:36:71:21:8e:c4:d5:18:84:ba:80:e1:ef:58:57:99:f3:
b7:52:c7:d7:37:8b:75:1c:f2:b6:a2:d8:d7:4c:99:15:6f:42:
d7:74:7a:d9:9a:f8:c5:89:ee:a2:ce:66:01:77:96:53:69:f2:
75:6f:3e:cc:01:53:4c:6d:45:ff:b7:51:99:05:29:d9:f8:7a:
1f:89:fd:ad:b2:3e:40:97:af:8a:52:2d:a5:f6:8f:85:ca:58:
90:06:ed:59:9c:4c:0b:d5:7d:1f:7c:3c:01:4b:d0:12:61:f3:
a1:32:9b:1d:55:6c:24:58:1f:91:d2:2e:81:f5:7d:fe:d2:e4:
2d:60:62:b4:dc:85:b5:25:99:86:6c:65:92:42:a7:5b:80:29:
4c:1f:c6:88:a5:9d:b5:d2:a6:53:ea:b6:fd:8a:f5:16:89:54:
7b:04:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:38:02 2025 by rpki-client