Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56ABB4B666DA11F0AE5C24CFDAE4EC9C.roa
File: 56ABB4B666DA11F0AE5C24CFDAE4EC9C.roa (raw, json)
Hash identifier: agZ4kbiVoAmTPNyJ4b6VrSzcnmBGyAVrvKwe2yP57zY=
Subject key identifier: 98:D1:87:E4:C9:9A:02:A9:77:7E:8A:2B:3C:BE:63:F8:8B:01:C9:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018ED2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56ABB4B666DA11F0AE5C24CFDAE4EC9C.roa
Signing time: Tue 22 Jul 2025 09:00:40 +0000
ROA not before: Tue 22 Jul 2025 09:00:34 +0000
ROA not after: Sat 30 Aug 2025 09:00:34 +0000
asID: 18013
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102098 (0x18ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 09:00:34 2025 GMT
Not After : Aug 30 09:00:34 2025 GMT
Subject: CN=687f5337-7e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:fa:f1:d6:e9:01:ab:03:51:98:99:08:50:
0d:73:c6:1f:42:e3:f9:54:d2:45:fb:90:77:f7:78:
12:87:9e:ee:dc:d2:a7:56:df:01:46:03:fe:a2:d4:
14:1b:aa:e3:1c:bc:ee:02:5b:ae:09:ae:87:b0:07:
12:3c:f4:b0:5f:61:97:8d:97:bc:1f:02:7d:68:a3:
22:86:3b:f1:b5:96:8f:c8:ca:fc:0f:bc:36:75:b4:
0c:46:2f:32:69:fb:7b:1b:08:31:e5:f5:14:a4:70:
47:6b:9f:8c:f6:53:92:df:69:79:27:d6:b0:9b:89:
93:28:93:e5:c6:1a:15:91:7a:ea:ff:e6:6b:7f:36:
fa:3d:90:fe:cd:01:a8:73:9c:5b:98:a2:28:dd:37:
93:83:51:57:a6:1a:2a:82:6f:a8:87:9a:46:c3:d4:
fb:ce:31:25:73:ea:f9:a7:3f:38:7c:2d:9c:13:38:
68:60:d1:4a:58:3a:a5:5b:ea:f6:20:9b:c9:bb:e5:
f0:44:a4:bf:84:c4:f2:95:cd:0f:7e:24:46:6b:95:
48:2d:58:3c:7d:8b:a0:31:87:ec:b6:d2:c2:43:b0:
aa:83:8d:d5:e7:8d:96:5e:6d:56:f6:fa:e6:dd:59:
8e:97:18:5f:48:5e:27:ea:a9:f9:6e:52:07:87:c1:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D1:87:E4:C9:9A:02:A9:77:7E:8A:2B:3C:BE:63:F8:8B:01:C9:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56ABB4B666DA11F0AE5C24CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:83:fb:af:68:26:f3:bf:2e:6c:f3:7d:80:0f:e0:6d:03:16:
3a:19:4a:5e:48:17:c8:c6:48:d3:d6:8e:e5:e4:a5:48:d2:9c:
6b:aa:20:61:78:86:c9:38:33:e1:52:cb:72:ac:22:a3:52:fc:
f7:8d:25:22:09:08:83:02:ae:b4:db:fa:19:a1:5b:c7:f1:7c:
6a:20:00:88:6b:ba:61:be:d7:6c:3a:86:b4:f2:0a:90:65:d0:
bf:76:6e:a1:cc:bb:e1:9a:7a:22:ed:8d:cc:81:33:b7:1f:91:
65:2d:bb:af:23:99:b3:4a:ea:2f:bf:58:ad:6f:79:89:39:a8:
14:d6:cb:5a:1b:d4:e6:ec:de:ca:01:46:7a:a7:ba:9e:b7:61:
93:16:84:c8:10:5e:ff:c2:a4:f8:6e:fe:18:96:e5:bc:b7:ca:
72:08:96:74:f6:ba:19:54:5a:61:8e:a2:cc:61:28:fc:74:76:
e1:4a:78:92:2a:f0:80:1e:c2:20:d5:d3:15:1c:7a:72:92:5c:
09:28:58:ad:69:5d:9a:d2:fc:e7:1f:88:b1:1f:82:33:c7:05:
de:c3:2c:6b:a8:61:72:11:0e:3a:f6:77:b4:73:31:4f:a2:8f:
78:bd:a3:2e:0c:e8:80:d2:eb:38:12:77:f6:b9:3c:5e:f5:c0:
24:88:be:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:04 2025 by rpki-client