Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E92EC92754011F09FEFAD91DAE4EC9C.roa
File: 6E92EC92754011F09FEFAD91DAE4EC9C.roa (raw, json)
Hash identifier: 2+47Ru2OzsY6Q2X6h3Wqg9+Jv6uRikZMCrkaE3Y0OAo=
Subject key identifier: 75:61:A1:D1:43:3B:40:D3:4F:1E:74:D7:50:97:74:F3:32:9A:66:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019137
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E92EC92754011F09FEFAD91DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 16:46:44 +0000
ROA not before: Sat 09 Aug 2025 16:46:36 +0000
ROA not after: Sat 27 Sep 2025 16:46:36 +0000
asID: 8796
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102711 (0x19137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 16:46:36 2025 GMT
Not After : Sep 27 16:46:36 2025 GMT
Subject: CN=68977b74-7ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:27:3c:29:f7:42:df:6b:05:dd:6d:19:b2:
bb:23:88:ef:d3:5b:af:07:92:5e:45:f7:d3:ee:b0:
d3:17:e0:d9:85:1e:02:28:14:fe:b4:e4:d2:e9:f8:
ad:34:c8:b8:e1:d2:0a:6e:3a:7e:19:ea:85:b2:4e:
65:bf:a3:e4:45:fc:12:6b:87:8e:d7:eb:db:61:0e:
20:89:6e:7e:0a:a8:e8:ca:c5:e3:0e:16:14:1d:e0:
ad:25:81:ad:38:00:5d:e0:b3:0a:ef:a9:fb:89:66:
80:2d:5b:fb:05:6c:68:50:15:49:5e:a5:da:e4:d2:
a0:f9:e1:4e:36:b5:37:ce:9f:10:f7:ad:a1:e4:b0:
43:d8:2f:1d:0b:72:74:30:d7:4e:8f:0c:b3:61:1a:
b6:66:e0:ba:f6:df:31:44:34:a3:c6:95:b6:f9:8d:
e0:ca:43:cc:5d:6a:8d:54:8e:3d:c3:3c:c2:03:4a:
2d:46:61:cf:0c:9b:a8:65:dd:50:69:36:ee:8c:e7:
49:cf:b7:8e:1f:00:17:89:02:fa:d6:09:5c:ed:8c:
19:38:f8:f1:87:88:ae:6e:d0:4a:5c:d3:ff:81:48:
7c:a0:1a:15:0c:10:54:3e:7f:44:eb:f5:04:b3:07:
af:c7:bd:51:52:0b:23:53:c1:1e:f3:3b:43:16:e6:
0e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:61:A1:D1:43:3B:40:D3:4F:1E:74:D7:50:97:74:F3:32:9A:66:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E92EC92754011F09FEFAD91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
95:e7:57:48:d2:7c:bf:6b:83:ab:fd:cb:cb:36:7a:62:ef:aa:
cd:d3:dc:c6:e5:ac:f9:94:47:09:16:b3:87:13:51:a3:1c:f5:
6b:e2:c3:82:71:5e:3b:89:9a:11:bb:35:e8:58:45:6a:1c:0a:
40:e9:09:a4:53:67:0c:4d:48:09:6b:a5:0f:46:13:68:ba:8f:
08:f4:60:01:db:04:e5:63:c7:7d:eb:66:8f:e2:14:f9:4d:f9:
87:85:db:b7:5c:e5:ed:76:e6:a0:86:ec:13:cb:bc:f1:49:e9:
64:76:e7:11:2d:cb:e4:5f:ad:5c:24:08:c1:59:49:6d:9d:72:
c4:4a:4b:97:6a:71:ed:a7:79:ae:26:73:8b:07:01:ba:43:7d:
9a:c9:2a:ee:ca:09:70:8a:38:9a:c7:cc:ad:82:05:9a:2d:0e:
d9:40:07:36:97:4c:25:11:d6:8c:a6:b3:1a:75:0a:d3:64:a4:
a4:c1:22:e7:87:fb:ee:20:d1:a1:e2:41:e3:c3:b7:0d:fb:e7:
5c:cd:ae:5e:4c:45:1a:fd:ab:52:9d:23:a3:71:33:4b:d4:06:
a5:84:44:f3:e2:8c:01:ba:f5:6b:af:0d:b0:16:f8:9f:dc:cd:
3e:44:09:c9:fa:95:a9:fa:a8:62:70:55:fd:52:9b:9a:49:fd:
8c:55:de:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:35 2025 by rpki-client