Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE8B56F67CDC11F09B86A1B9DAE4EC9C.roa
File: AE8B56F67CDC11F09B86A1B9DAE4EC9C.roa (raw, json)
Hash identifier: qlWw7Iz4KXeHVsWOIv4GmNgDht+vc5LH2fwxvAX2LnY=
Subject key identifier: 92:22:F9:E4:8D:1D:B0:E7:18:04:19:B4:45:58:63:4A:34:D5:16:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019238
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE8B56F67CDC11F09B86A1B9DAE4EC9C.roa
Signing time: Tue 19 Aug 2025 09:12:51 +0000
ROA not before: Tue 19 Aug 2025 09:12:46 +0000
ROA not after: Tue 09 Sep 2025 09:12:46 +0000
asID: 136907
IP address blocks: 154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Aug 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102968 (0x19238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 19 09:12:46 2025 GMT
Not After : Sep 9 09:12:46 2025 GMT
Subject: CN=68a44013-13fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:0a:6d:69:57:32:9f:e4:30:07:26:0b:96:
b0:15:22:90:e2:32:86:12:36:b9:aa:e1:09:4b:1c:
75:c7:8d:46:a1:4a:f0:64:82:2c:a6:61:e3:f9:29:
07:16:e3:a1:71:db:9b:03:d2:e4:48:bb:c3:02:41:
0d:e9:16:76:4c:3a:0d:86:b5:bf:13:c2:94:59:fe:
f2:c8:06:f0:c6:a6:ae:7c:ce:b5:42:51:9f:70:ba:
a5:e2:30:fd:78:9f:f3:65:f2:34:bd:eb:f8:00:b8:
38:53:e9:1b:71:11:75:f0:03:22:f9:ea:6b:2b:67:
7d:23:5c:07:8f:d2:0a:ef:5c:f4:c0:61:11:0f:15:
50:3d:c4:ed:15:e5:ef:47:b0:fb:49:49:f8:b1:ce:
be:77:89:84:f7:30:a8:3a:95:98:95:e4:5e:5c:bf:
7a:0b:9d:5b:b0:08:8d:1d:cc:ff:27:e1:db:a3:50:
a1:ee:3c:01:dd:29:b1:32:01:11:46:3e:d4:64:9c:
db:ca:96:0d:05:f9:c1:b8:88:57:2c:58:14:35:be:
08:60:fd:3c:4a:03:b1:da:2c:37:a4:b7:98:e1:3a:
b8:6e:33:ce:05:2d:1e:86:69:d7:ae:94:db:25:57:
5d:a3:09:72:6b:6f:2d:a4:d9:20:64:f1:40:27:87:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:22:F9:E4:8D:1D:B0:E7:18:04:19:B4:45:58:63:4A:34:D5:16:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE8B56F67CDC11F09B86A1B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
154.95.96.0/21
Signature Algorithm: sha256WithRSAEncryption
76:03:d1:3d:db:7d:8d:e1:0a:0b:2e:91:42:f3:1f:f4:97:95:
0d:e7:f0:aa:f4:a8:0d:01:14:fb:31:16:1c:43:0c:80:59:bd:
7c:78:a7:6e:77:69:07:9d:87:4f:32:d9:5f:f5:2e:67:d2:a1:
d8:eb:8c:c5:50:38:6d:38:6a:da:ed:6c:4d:c6:2e:c8:ae:b9:
27:02:26:87:ba:64:ea:d7:fe:d1:32:86:97:ab:c0:b7:71:e6:
97:c5:43:e7:92:dc:96:20:97:5f:4b:33:5b:92:48:d7:32:0c:
5a:69:b4:15:ba:e1:0c:e9:4e:5e:bd:38:41:be:2c:8b:5a:79:
e5:5f:cd:f1:78:e9:57:d6:fe:0c:64:f5:c1:5a:9d:38:18:1b:
db:94:13:17:8d:59:22:8c:be:99:e3:72:f9:c1:79:f7:ad:32:
cf:90:39:bc:38:23:32:c0:b5:dd:96:1e:23:05:a4:46:06:4f:
f9:19:4e:e3:4a:37:64:88:8d:be:05:f4:07:3d:a2:b1:ab:df:
6a:f9:98:5c:f4:e8:d0:8e:4f:fa:ec:44:b1:f6:66:bb:ed:f7:
8e:a5:35:bb:5a:a4:21:60:ec:37:38:77:94:9c:d8:33:76:e3:
f5:d0:ec:48:d0:da:6f:f4:02:c8:3d:64:4d:b1:9a:8a:14:49:
31:0d:db:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:54:31 2025 by rpki-client