Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C858E06AA29511F096E5057EDAE4EC9C.roa
File: C858E06AA29511F096E5057EDAE4EC9C.roa (raw, json)
Hash identifier: Add92jFGlFLHwYCMHMK3E6oDL54NgVMnJCUEfVuWBW8=
Subject key identifier: B5:2F:95:AF:CB:FE:14:16:A6:90:F5:FA:D3:CE:B2:EC:49:AC:44:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A26D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C858E06AA29511F096E5057EDAE4EC9C.roa
Signing time: Mon 06 Oct 2025 09:21:05 +0000
ROA not before: Mon 06 Oct 2025 09:20:58 +0000
ROA not after: Thu 13 Nov 2025 09:20:58 +0000
asID: 20457
IP address blocks: 154.198.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 12 Oct 2025 06:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107117 (0x1a26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 6 09:20:58 2025 GMT
Not After : Nov 13 09:20:58 2025 GMT
Subject: CN=68e38a01-e3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:a0:bc:c2:dc:8b:03:da:a2:dd:f5:50:b1:
77:d7:f9:c6:f3:90:85:82:4e:79:43:d4:43:c5:9f:
34:05:c6:93:5a:fc:dd:ae:d5:8b:c4:a4:e2:c8:11:
80:36:25:ea:54:5d:42:9b:fe:a6:61:e3:31:9c:f5:
e5:97:f8:ec:41:0c:c9:7d:52:53:20:9d:0a:d0:ce:
b0:9c:1e:36:da:04:4c:3a:b0:3e:fc:57:4a:5a:04:
5c:b6:f9:6c:a4:16:72:91:b4:4e:5b:fa:0c:b0:f3:
c7:24:ca:47:1b:16:f0:94:ea:92:23:9e:ea:70:65:
86:43:a3:4e:48:f5:41:67:b4:3d:4e:a8:58:db:bd:
92:ad:2b:1d:a1:9a:24:7d:3f:c5:cb:e3:ae:11:6e:
76:8b:c6:08:13:e6:39:42:33:88:7d:2a:00:03:8e:
2b:b3:e7:17:3a:a6:d7:ad:cd:5f:b9:f6:e0:49:71:
9d:d0:63:f6:9a:a4:0f:3a:1c:10:12:97:73:af:00:
48:29:e9:44:60:01:d9:60:b4:2d:c6:ef:cb:94:5d:
1f:15:71:57:0e:dc:83:85:67:8e:8f:15:18:fb:02:
a1:09:f6:80:3f:f2:ab:1b:45:9a:f7:0b:10:04:8e:
a7:29:37:88:68:d6:62:c5:96:eb:e5:cc:57:ce:a5:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2F:95:AF:CB:FE:14:16:A6:90:F5:FA:D3:CE:B2:EC:49:AC:44:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C858E06AA29511F096E5057EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.11.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fb:d7:e8:0a:c6:ae:9d:5a:32:55:1a:33:ba:8b:b2:dd:6f:
90:82:af:dd:f5:98:e3:4a:59:a1:c8:17:fb:5c:2e:35:f0:9f:
b8:10:95:0b:05:a8:84:9d:2b:5c:12:68:9e:a8:f1:08:bc:a0:
64:b1:ed:ea:5c:06:9e:84:e0:c9:0a:36:70:88:e0:9f:9e:6c:
34:58:1a:e9:cb:80:b0:2a:42:25:6a:a7:81:cd:25:ed:57:fe:
44:50:74:90:19:3e:a4:64:ae:e3:0b:82:10:3f:85:75:20:80:
ee:aa:42:b8:96:77:60:43:1c:57:1f:63:97:34:51:c7:a9:d4:
33:79:6f:c7:39:30:e8:6c:64:92:fa:94:64:e9:f6:e5:5e:14:
0e:6f:8f:ac:36:a0:c6:6f:d7:02:93:b7:6d:b1:7f:ab:bb:ae:
08:c4:94:6b:0b:e3:a6:01:ad:fb:27:11:a0:5d:f5:8a:2c:2f:
e9:3f:24:d6:1a:d7:6a:17:67:c2:fb:c9:60:61:00:17:dd:45:
5e:b2:44:a0:71:8f:1b:47:b0:3f:2b:81:4f:d6:5f:2c:3b:d4:
49:b4:e9:24:36:23:4f:3c:9b:c8:c8:f5:4f:5b:63:56:0b:b6:
15:b7:34:03:f5:2a:e3:3c:2e:17:56:6a:1b:72:b3:30:36:61:
c7:17:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 09:48:10 2025 by rpki-client