Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C955602AD8C11F08CA550C1DAE4EC9C.roa
File: 2C955602AD8C11F08CA550C1DAE4EC9C.roa (raw, json)
Hash identifier: bX4yjTGSSKJ+VWpF83QFbqJmMVRf/RIwTgSS4R6LKBY=
Subject key identifier: 1E:71:1B:CD:AC:62:D7:93:20:E6:0F:24:08:22:E4:95:76:EB:27:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A449
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C955602AD8C11F08CA550C1DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 08:10:01 +0000
ROA not before: Mon 20 Oct 2025 08:09:56 +0000
ROA not after: Tue 25 Nov 2025 08:09:56 +0000
asID: 272854
IP address blocks: 154.194.13.0/24 maxlen: 24
154.194.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Nov 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107593 (0x1a449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 20 08:09:56 2025 GMT
Not After : Nov 25 08:09:56 2025 GMT
Subject: CN=68f5ee59-c487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:0d:58:74:32:17:a0:07:78:a5:9c:48:43:
5d:2d:be:07:e9:01:76:27:40:fb:79:be:00:e3:b4:
db:ee:b4:6f:74:60:9d:e0:43:56:af:fd:a4:a2:0c:
47:b3:6d:c9:98:4d:c7:6b:09:79:d3:a1:83:44:98:
8b:3b:d7:89:47:0a:ef:a1:39:b7:3a:ee:b0:ec:64:
d4:00:d2:cc:35:db:1f:ad:93:74:8d:15:ed:3f:3c:
bc:48:0b:4c:a0:f8:ff:8b:5c:6d:b2:49:92:09:7d:
d5:7d:ad:9a:48:1e:43:db:2a:2f:38:4e:38:85:06:
54:1a:27:ba:20:ab:38:2b:97:36:2a:f5:0f:f2:3d:
4a:43:62:cc:02:05:68:61:92:7f:17:9e:39:9c:6a:
27:3e:1b:de:48:0d:b9:0d:a5:ad:78:8a:56:69:d1:
10:45:1c:93:f1:91:68:7b:a8:07:44:05:91:01:80:
13:74:e8:cc:db:22:1d:9e:85:b9:78:54:71:b9:e8:
40:00:2e:96:51:4e:45:1d:03:cd:71:39:9e:11:9f:
8a:d6:f6:4a:58:40:fb:c4:30:bc:13:28:ef:76:87:
d8:67:f7:b3:36:f0:79:ce:99:95:1f:02:23:7c:2f:
cf:0e:23:15:6c:36:cf:81:00:ea:3b:ca:3a:c1:ad:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:71:1B:CD:AC:62:D7:93:20:E6:0F:24:08:22:E4:95:76:EB:27:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C955602AD8C11F08CA550C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.13.0-154.194.14.255
Signature Algorithm: sha256WithRSAEncryption
4e:f8:06:90:75:1b:35:48:64:dd:34:f6:2c:c7:5e:89:32:42:
30:31:4d:03:cc:b5:75:29:7b:05:20:e2:51:d2:60:27:3e:cd:
16:dc:1b:12:2f:3b:27:69:e7:60:3d:6a:aa:26:af:f1:30:85:
6d:4f:0c:82:5c:5a:e6:4c:fe:56:48:ff:67:6f:76:d9:d3:b9:
0a:ca:93:0d:d4:2e:2b:13:ef:38:63:a6:89:04:e1:6e:57:ce:
1f:b5:19:98:90:d7:2d:b5:4d:ac:d5:b9:e2:4d:03:9d:86:29:
e9:a1:f8:4e:82:7b:8e:73:cb:61:4d:f5:45:6a:7a:51:fa:97:
e8:57:66:e5:3f:05:1e:e7:fe:f0:e1:05:ba:3f:1e:6c:03:84:
f6:d8:d4:85:77:d6:83:72:c8:e4:0c:e4:d1:21:33:64:2b:3d:
92:2c:34:39:a5:07:0f:4d:06:7e:5c:17:5b:ce:84:dd:fb:7d:
39:58:44:3e:ce:0e:e5:71:17:6b:b1:ed:7c:ff:43:78:4c:76:
38:1c:81:08:c4:d8:8f:0b:20:f2:d3:67:0a:3b:99:9d:5c:33:
17:79:71:ed:4a:9a:17:21:7a:42:2f:5f:85:e6:bb:43:de:fa:
d0:09:4c:f9:6b:d5:9c:42:21:5c:cb:84:29:b2:04:f6:f7:91:
20:4c:47:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 21:20:33 2025 by rpki-client