Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20C97D0A8B5211F081683D82DAE4EC9C.roa
File: 20C97D0A8B5211F081683D82DAE4EC9C.roa (raw, json)
Hash identifier: ufCzWeR2Xm8wpTbmSc6uv1KOEjLBv155RKPkweSAV5k=
Subject key identifier: C9:54:0E:EE:9A:09:CC:FD:A8:B8:C8:69:DC:F7:4B:55:84:0D:E3:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20C97D0A8B5211F081683D82DAE4EC9C.roa
Signing time: Sat 06 Sep 2025 18:48:51 +0000
ROA not before: Sat 06 Sep 2025 18:48:46 +0000
ROA not after: Fri 05 Dec 2025 18:48:46 +0000
asID: 135845
IP address blocks: 154.210.226.0/24 maxlen: 24
154.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 13 Oct 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106102 (0x19e76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 6 18:48:46 2025 GMT
Not After : Dec 5 18:48:46 2025 GMT
Subject: CN=68bc8212-c556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5a:2d:ba:f5:2c:7e:f2:21:7a:e1:c4:f7:f0:
ea:a5:03:72:f3:21:b1:91:ea:5c:6a:22:20:40:59:
8b:b7:c9:e4:bc:e1:60:e5:79:5c:cf:b4:c0:c1:26:
98:69:f3:e4:39:6c:d3:f4:af:42:cc:30:27:16:db:
99:35:42:f2:d0:26:36:ed:ce:bd:3b:47:44:28:f0:
c2:5c:0c:9c:18:46:bd:a1:a8:f1:37:a9:d0:32:29:
92:09:ea:64:b5:d9:62:3d:d3:d6:5f:a0:d6:24:fd:
1c:49:60:56:0f:86:16:c1:9b:46:14:db:8a:0d:62:
a5:f3:6e:5e:3a:89:d2:a2:ed:0a:32:09:b6:af:1a:
69:50:1e:62:05:da:1f:b8:d7:53:ad:81:fe:48:a9:
4f:2d:4d:2d:c7:83:ae:6c:2b:14:99:b7:f7:31:a5:
40:fc:64:3d:66:f7:93:b1:fc:90:d7:7d:12:b0:a0:
6b:8f:24:d7:31:ed:c8:6b:d5:ba:80:4d:7b:4c:91:
44:af:ea:a8:7d:95:87:a2:71:eb:5a:77:2d:3a:3b:
c3:d2:86:3b:5f:72:f9:8f:6d:10:fb:c3:38:59:c0:
11:1d:b6:d9:a4:59:17:f9:7f:31:36:ee:20:78:14:
bd:dc:3a:1f:6c:22:ce:db:8f:c8:c3:f9:5f:b8:3f:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:54:0E:EE:9A:09:CC:FD:A8:B8:C8:69:DC:F7:4B:55:84:0D:E3:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20C97D0A8B5211F081683D82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.226.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:c4:a3:3e:c0:93:4f:fd:f8:aa:de:ab:71:de:49:14:e2:be:
19:12:00:da:0f:29:4d:7c:68:ef:12:f1:d7:92:f4:61:15:0c:
ed:13:ca:67:a3:9b:54:56:3d:c4:b7:dd:00:f6:d3:75:b1:72:
2c:dc:ee:44:ac:fc:82:74:50:b5:47:ac:e6:f7:44:44:a8:7e:
53:39:5a:e2:7f:2e:7d:38:25:e9:b0:d4:bd:41:57:ed:ac:a8:
4b:3f:91:72:1b:28:ea:a4:8c:bf:84:99:30:12:28:de:a4:c2:
1a:50:41:9b:90:59:bc:e5:63:5f:7d:0e:c1:0a:39:10:5d:07:
c3:ba:7e:25:50:12:b5:4a:d0:2b:7a:83:36:84:1f:76:00:ef:
24:e4:b1:d6:6f:d6:82:02:3d:c7:f2:40:27:4e:5d:98:04:a4:
9d:18:87:c8:f2:db:5e:b8:86:3f:b6:2b:d7:4a:44:97:bc:74:
dd:2e:d1:03:79:cb:81:36:a2:ec:de:ce:46:cb:57:8a:f5:bc:
61:14:42:9e:39:eb:c4:cf:61:80:95:9e:b9:ca:ce:3c:5f:34:
46:b0:2f:60:d7:6a:66:30:d3:b8:9a:32:7c:94:2f:27:77:40:
ef:af:0d:d9:d1:a5:a8:d3:c0:6f:90:6b:33:4f:b8:32:46:78:
f9:e1:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 18:56:36 2025 by rpki-client