Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACA0DBE88A4911F09BB095DBDAE4EC9C.roa
File: ACA0DBE88A4911F09BB095DBDAE4EC9C.roa (raw, json)
Hash identifier: L9av8WSOnWZQZ2C66CkXbtK/u1dwHYEnChaFsDzA170=
Subject key identifier: 5B:88:25:E7:9D:4B:67:CE:31:38:4A:84:4F:21:50:FE:6E:D2:2D:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACA0DBE88A4911F09BB095DBDAE4EC9C.roa
Signing time: Fri 05 Sep 2025 11:15:48 +0000
ROA not before: Fri 05 Sep 2025 11:15:43 +0000
ROA not after: Fri 05 Dec 2025 11:15:43 +0000
asID: 135845
IP address blocks: 154.210.226.0/24 maxlen: 24
154.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 13 Oct 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106008 (0x19e18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 11:15:43 2025 GMT
Not After : Dec 5 11:15:43 2025 GMT
Subject: CN=68bac664-c0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:7a:fe:5d:f7:7b:93:56:36:c9:14:20:6b:
46:54:72:bc:39:31:ad:9e:4a:42:9a:fb:a2:70:aa:
fc:07:c9:15:b7:a6:ce:da:1b:00:96:11:d6:f8:6e:
24:81:db:aa:b3:8c:a1:29:8e:09:8b:42:b0:a2:ea:
89:fb:b3:42:9e:14:67:68:1f:ef:71:ce:1d:61:d2:
f7:49:85:c9:c8:b5:6e:d9:8d:33:c9:ab:8c:47:11:
ab:08:18:26:d7:d0:04:73:20:8d:15:14:ce:97:82:
f5:f1:ed:8b:e4:53:92:14:57:ea:69:f9:9e:d9:ce:
18:f1:39:9d:68:80:fb:6e:a5:a2:1d:a0:b1:3c:6d:
06:1a:cc:cc:54:75:7e:37:88:b1:dc:f4:c3:a1:87:
63:d0:0b:a0:b7:03:aa:a8:f8:4e:48:dc:e8:3c:75:
16:45:3a:a3:cf:0c:1a:7d:e3:61:15:19:d8:50:91:
12:86:50:4d:26:ab:06:2b:14:8c:9f:e6:45:ed:16:
c4:37:40:57:1f:ec:e1:87:68:60:c2:e5:7e:d1:72:
1e:21:a1:e0:e0:6b:bf:c3:21:33:c7:0c:2c:b1:6b:
51:87:98:0c:c7:2b:35:7d:16:aa:a4:7d:d4:76:2d:
8a:02:da:ed:c7:8f:c0:de:a8:86:e7:5a:19:77:05:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:88:25:E7:9D:4B:67:CE:31:38:4A:84:4F:21:50:FE:6E:D2:2D:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACA0DBE88A4911F09BB095DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.226.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:21:94:95:b0:8e:d5:07:32:ff:55:04:59:93:82:b1:d4:e3:
f3:8c:eb:25:4c:98:a8:89:a1:47:06:de:17:a0:bc:8a:e7:1a:
07:44:ae:af:c2:e5:54:ae:95:1e:1d:af:0a:2b:0d:82:49:0d:
42:4a:34:03:07:6a:ca:e3:98:00:8f:76:3f:97:97:bf:22:e4:
05:a4:60:4b:f3:c0:10:7b:7f:d8:bc:c8:f9:56:d7:1f:33:44:
5b:0a:df:8f:3e:f9:69:3d:f5:d3:f5:2d:03:de:55:e3:4d:87:
49:07:04:59:14:46:57:9a:69:e1:1b:e3:5e:7c:59:11:e7:89:
82:01:9e:08:8a:c5:9c:60:b6:56:c4:77:8e:89:b0:05:62:22:
54:b8:70:a7:9d:3d:70:53:35:f5:3b:17:ed:21:27:c5:e1:b7:
4c:69:a9:3e:d3:32:7a:ed:59:5f:1e:0a:7d:9f:e4:7f:36:27:
d5:2b:68:cb:bf:e3:0f:c0:22:9b:67:8e:6d:9e:94:56:cd:dd:
d0:d6:4b:c3:e4:5d:52:33:5c:1f:99:ae:a3:4e:b1:60:af:b4:
b2:47:ce:db:35:c2:6f:15:40:ab:f2:6c:57:7e:96:1a:4d:10:
67:cd:2e:77:e3:3a:20:0d:78:a9:0c:5b:c9:61:6f:96:14:17:
52:f1:08:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 18:56:36 2025 by rpki-client