Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/556F32047F5211F08FAF6FDFDAE4EC9C.roa
File: 556F32047F5211F08FAF6FDFDAE4EC9C.roa (raw, json)
Hash identifier: xDrxTkQdjOW/KsEM8i8gHbuUMQmkKfYRFhOARe4Fkq0=
Subject key identifier: BA:3B:27:33:59:15:EE:14:14:8C:B7:79:DE:60:0A:D9:F7:3A:17:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0194A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/556F32047F5211F08FAF6FDFDAE4EC9C.roa
Signing time: Fri 22 Aug 2025 12:20:05 +0000
ROA not before: Fri 22 Aug 2025 12:20:00 +0000
ROA not after: Tue 30 Sep 2025 12:20:00 +0000
asID: 18013
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103586 (0x194a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 22 12:20:00 2025 GMT
Not After : Sep 30 12:20:00 2025 GMT
Subject: CN=68a86075-2794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:f9:2a:e0:45:f6:dc:41:e2:aa:b1:b4:10:
f4:a4:fc:c1:d8:53:c3:e5:81:78:d7:8d:f5:3a:3c:
15:c1:5e:c2:4e:c2:88:8f:77:75:19:8a:1a:f1:62:
e1:39:9a:a2:4f:58:e1:2d:15:6c:8a:a5:5b:4f:72:
9b:1a:92:e1:8d:cc:af:36:79:29:73:27:91:12:ad:
10:31:00:24:60:4d:a4:a0:04:5a:67:a5:c1:b5:61:
d1:ed:26:44:d1:03:92:18:de:0b:44:37:84:97:05:
4a:be:9e:6d:2a:9a:37:cb:2f:c5:86:0a:76:e1:2c:
dc:8f:90:71:0d:44:a9:a7:41:1c:97:62:83:8c:51:
32:49:64:22:30:8e:d9:33:e7:ec:e4:4d:0d:d6:66:
a9:13:a6:d5:24:ac:ec:e7:9e:49:2b:70:c4:c7:54:
88:9f:14:00:6d:fd:04:42:82:53:ef:45:8a:5d:ca:
59:1f:13:ef:b5:f8:eb:46:28:f5:0c:3b:c5:8b:e2:
d7:4a:ba:88:4c:16:43:aa:ad:e7:ef:0c:ff:e6:bc:
05:2d:ab:a3:c4:03:36:15:a7:e7:aa:b4:e2:61:12:
2c:64:ab:4d:f1:d7:fc:de:f2:a4:75:61:35:84:9c:
4b:17:25:61:21:ba:5a:aa:cc:18:02:f3:58:c8:32:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3B:27:33:59:15:EE:14:14:8C:B7:79:DE:60:0A:D9:F7:3A:17:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/556F32047F5211F08FAF6FDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
c4:fd:3c:20:d6:bd:1c:5c:9e:d8:09:96:54:5f:e4:46:4b:71:
43:77:b1:7f:61:98:64:60:f8:2b:57:80:37:92:3f:4d:37:da:
76:43:32:23:a1:d9:c0:91:f3:af:d8:a0:ed:01:af:4a:ce:d1:
04:44:d2:4e:d5:7a:8e:66:59:37:53:7c:69:e6:5a:44:df:76:
63:50:80:a3:99:62:69:e3:94:de:d0:97:16:10:87:d2:b9:03:
54:4e:67:34:a6:4c:c9:e0:72:be:14:07:87:19:eb:e5:7a:11:
64:dc:d8:f0:0b:97:40:d8:43:62:89:fb:12:37:fc:82:ba:b1:
f8:07:ee:de:70:d5:7a:1e:11:c0:89:6b:d1:7d:c6:c6:96:d5:
66:16:a1:51:06:6b:d1:f0:d6:86:63:6d:74:c6:6f:e5:0d:60:
0e:5c:05:0e:33:4c:1c:7b:eb:b1:7b:68:68:29:6d:71:f8:63:
33:c3:b8:35:15:fb:f5:51:ec:6d:d7:6d:ed:cf:20:fc:48:a0:
16:30:c3:06:3b:65:7d:77:73:fc:e9:e6:c4:09:89:73:6c:ac:
26:b2:1f:56:d4:2c:9d:df:1c:e3:14:e8:70:66:7c:4f:36:f1:
22:44:e5:53:ea:3f:28:89:05:06:82:88:31:47:d8:bc:da:95:
0a:7f:50:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:38 2025 by rpki-client