Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56BE8DB2889411F088AB2DBADAE4EC9C.roa
File: 56BE8DB2889411F088AB2DBADAE4EC9C.roa (raw, json)
Hash identifier: d3wHfMZgAdIKW1pyAv5wT8AVaPEP1WOqqYBay/uAlaU=
Subject key identifier: E6:50:CC:3B:BE:E1:60:A2:C0:E8:EF:0B:AA:F1:13:FE:9B:92:C6:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019C95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56BE8DB2889411F088AB2DBADAE4EC9C.roa
Signing time: Wed 03 Sep 2025 07:05:14 +0000
ROA not before: Wed 03 Sep 2025 07:05:10 +0000
ROA not after: Thu 05 Mar 2026 07:05:10 +0000
asID: 30083
IP address blocks: 154.88.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105621 (0x19c95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 07:05:10 2025 GMT
Not After : Mar 5 07:05:10 2026 GMT
Subject: CN=68b7e8aa-e261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:94:eb:99:83:e6:da:bd:4c:f4:41:d5:13:
d5:65:82:ee:5f:48:e1:8c:3d:07:15:30:3e:8c:be:
0a:4b:8d:b3:b2:a8:04:79:bf:2e:0f:3f:ef:d3:73:
2e:ee:07:60:af:04:5b:00:dc:2c:ef:7b:a6:8c:55:
0f:e0:f5:df:66:31:bd:a7:28:33:4a:39:0e:02:78:
5e:43:7f:39:16:ac:cf:6a:ba:ce:61:7e:65:56:c1:
e6:8c:7e:d1:a0:5a:5a:61:2b:99:7a:cd:f0:10:94:
68:f3:c0:52:89:ef:67:96:9f:6c:a9:03:cb:b6:30:
43:4a:22:9f:bb:ed:38:c3:24:1e:84:6f:07:b4:e6:
55:16:29:15:5c:95:49:70:d3:4f:cb:ac:8d:73:f4:
67:1d:e3:db:7b:54:5b:a1:a4:ea:a9:be:f8:a3:60:
51:58:36:f7:43:34:78:87:bd:bf:0c:e0:f3:fc:f2:
cc:81:cf:0d:4c:61:5a:af:2b:07:57:6e:b1:4a:17:
76:af:2d:52:57:9d:5e:f2:41:ca:b3:58:6f:2a:00:
7e:02:58:dc:d4:d8:db:95:9d:48:e3:fa:d7:25:0a:
22:48:88:ea:ec:c0:9f:a8:f8:c9:c6:8a:ab:c1:4b:
25:af:a1:80:52:d4:81:e1:5b:94:89:5e:14:cd:92:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:50:CC:3B:BE:E1:60:A2:C0:E8:EF:0B:AA:F1:13:FE:9B:92:C6:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56BE8DB2889411F088AB2DBADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.3.0/24
Signature Algorithm: sha256WithRSAEncryption
37:57:e4:ae:43:00:2e:f7:cd:17:8b:9a:68:92:c4:d0:f0:f5:
79:0c:4b:54:1b:86:a4:61:02:41:c3:c5:ed:6a:19:bb:0a:4d:
e3:18:60:5a:9a:ad:22:71:6e:b7:dd:9f:30:20:ce:63:fc:09:
57:8a:90:a6:58:fd:a8:56:e4:e8:fb:b8:58:4f:72:48:30:77:
90:45:95:d1:ee:08:42:2b:25:71:1b:ba:f2:df:b9:bd:79:80:
62:7e:55:7e:a8:10:e1:94:23:d5:75:e7:6f:26:3c:73:02:6b:
be:2b:cb:00:d8:92:c1:9c:48:8a:91:af:3b:dc:d6:1f:7f:06:
e5:1b:69:a3:eb:56:a4:41:85:21:15:72:7e:b8:a4:17:08:d2:
ee:76:7e:ba:f1:93:db:5b:ff:d0:69:ce:65:75:6e:e3:fe:65:
52:5c:77:3e:31:b3:6e:53:d8:9a:4f:9e:f7:72:7a:cd:d4:fd:
83:ea:8e:c9:d7:e0:ef:94:19:21:06:a9:4b:59:e0:82:8d:7c:
f1:ca:c9:82:0e:6f:79:a9:00:bf:bf:b0:03:71:f5:c7:63:2c:
42:c6:40:f2:ad:87:da:29:99:d7:2c:ac:24:ed:7a:2b:5b:66:
3e:0b:94:d8:70:a5:49:27:63:fc:e2:a6:b6:f4:2a:ba:0c:32:
e9:d8:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:30 2025 by rpki-client