Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AABA1A9A706511F0811F1EF5DAE4EC9C.roa
File: AABA1A9A706511F0811F1EF5DAE4EC9C.roa (raw, json)
Hash identifier: 7MTXynk6k7k+zXL4ELRKmxkC2KiGrFS7w9wPqV3nEds=
Subject key identifier: 03:81:B9:DE:C6:0F:2F:1E:35:A0:A9:63:D3:0A:C4:92:E7:AB:7E:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019099
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AABA1A9A706511F0811F1EF5DAE4EC9C.roa
Signing time: Sun 03 Aug 2025 12:30:41 +0000
ROA not before: Sun 03 Aug 2025 12:30:36 +0000
ROA not after: Sat 06 Sep 2025 12:30:36 +0000
asID: 141883
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102553 (0x19099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 12:30:36 2025 GMT
Not After : Sep 6 12:30:36 2025 GMT
Subject: CN=688f5671-5754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:8c:5f:14:fb:86:08:e1:fd:7a:17:54:95:
80:a8:9a:7e:ba:74:27:be:c3:85:94:ab:ef:fa:7b:
28:ad:0c:39:c0:0d:ce:47:33:a5:98:77:85:a5:34:
18:1e:41:d8:cb:f2:62:9c:96:95:d9:d7:f7:e2:cb:
74:70:5a:90:e8:c6:2a:53:5a:76:97:66:e5:42:0c:
f1:08:40:60:b3:34:a7:e0:cf:b7:60:29:e9:49:83:
8a:77:72:91:ab:cf:fe:36:e1:ec:ae:ee:55:5e:33:
e1:40:08:2c:0e:97:47:69:69:dd:52:7a:58:52:f8:
bd:59:b8:5a:ce:34:88:68:d8:3f:f4:47:95:2c:60:
8e:83:f3:05:43:e1:5d:27:fc:cb:c5:a8:c0:33:49:
1f:ac:b2:48:b2:3c:52:20:e6:f9:57:98:86:21:91:
ba:00:ab:65:82:8f:f2:fe:43:b4:cc:bf:73:b4:6a:
c7:63:ce:90:02:be:10:28:df:b9:70:a8:f4:17:85:
81:00:fc:49:19:44:ed:a7:5f:09:8e:8a:7c:7e:c7:
ef:c1:28:05:d5:87:4b:87:1a:b4:a9:a4:c6:f5:51:
08:84:d6:08:f9:6b:5f:51:8a:71:06:69:1a:5a:8e:
32:36:92:f7:a3:38:90:a4:20:8e:a8:e4:46:22:a8:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:81:B9:DE:C6:0F:2F:1E:35:A0:A9:63:D3:0A:C4:92:E7:AB:7E:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AABA1A9A706511F0811F1EF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
03:50:f9:dd:d6:af:71:04:58:ec:01:7c:63:ec:c0:0a:2a:75:
bc:32:64:3f:98:b1:1c:18:23:dc:1e:13:5b:56:d3:83:f8:1f:
c1:3a:dd:29:00:93:c7:11:da:33:94:e9:a1:c3:54:c3:93:2a:
d7:0f:6f:5f:db:e6:7e:8d:ed:e6:a0:f6:01:7c:74:6b:07:e0:
3e:63:7f:ec:dc:29:19:f9:88:bf:6a:ca:02:7e:32:7b:62:b0:
d5:8f:bc:02:74:ee:f7:28:80:f1:45:b6:1c:09:75:80:7c:3d:
d7:0a:4b:1e:53:ba:1a:5b:1c:61:a5:00:c5:86:52:88:04:8a:
57:d9:ec:6f:ae:15:54:b3:a9:3c:bc:4b:e6:15:cb:d2:af:a5:
de:cb:3a:b7:1c:53:5e:44:df:f7:34:26:bd:45:32:c1:6c:a8:
7b:4f:c7:d5:92:8a:96:c7:a2:62:ab:90:07:8c:db:dc:7d:22:
d9:c6:41:db:e9:e3:73:b6:cd:18:43:3d:39:70:14:82:9e:53:
82:09:f9:c1:22:22:b2:a8:be:65:36:79:6c:4d:71:36:db:67:
9b:fe:c6:c4:92:c0:64:5e:e7:54:e3:76:8d:fc:a7:27:68:71:
1a:7e:fb:a9:6d:c5:0f:23:32:44:e3:ea:15:3d:09:a1:e2:c2:
70:53:36:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:44 2025 by rpki-client