Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/009B347C92CA11F0A9784CA5DAE4EC9C.roa
File: 009B347C92CA11F0A9784CA5DAE4EC9C.roa (raw, json)
Hash identifier: PAtfyqBAlMAe0R0Mx852P4kp9ShJmR9D2eb/TbCVzb8=
Subject key identifier: 34:8F:64:A9:86:A8:01:BF:01:99:A8:FE:99:99:89:E1:E4:D4:E4:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/009B347C92CA11F0A9784CA5DAE4EC9C.roa
Signing time: Tue 16 Sep 2025 06:54:34 +0000
ROA not before: Tue 16 Sep 2025 06:54:30 +0000
ROA not after: Thu 25 Sep 2025 06:54:30 +0000
asID: 135391
IP address blocks: 154.222.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Sep 2025 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106435 (0x19fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 16 06:54:30 2025 GMT
Not After : Sep 25 06:54:30 2025 GMT
Subject: CN=68c909aa-70b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:3b:3a:60:51:67:de:ea:f0:1e:6d:77:26:
51:97:32:e7:e8:1f:70:e5:b9:7c:38:27:a5:1b:ed:
4e:b9:04:ef:9c:23:8f:2f:df:a8:e4:82:0d:1e:55:
07:12:64:cd:24:89:76:d7:f0:b6:59:1f:d6:22:04:
d5:26:f2:dd:2c:05:8a:98:f8:c3:c4:e2:b6:42:09:
8f:f2:12:f9:df:26:a0:c6:c0:71:f6:c9:9d:de:42:
58:9a:73:0e:4f:f6:61:8e:66:2e:23:c5:07:94:e6:
65:9b:1f:0c:d3:74:28:30:c0:db:83:6e:38:e6:2a:
f8:3c:3f:34:82:8b:88:99:ea:91:f7:30:68:0d:61:
b8:9b:47:9a:c2:a7:84:a1:f9:60:59:de:90:c1:51:
db:18:95:69:e0:10:53:c8:f6:cf:f1:32:7f:ef:28:
11:85:54:4b:ae:c6:0f:aa:30:69:6d:c6:52:a2:2e:
6c:fb:b7:24:e7:43:1a:23:d8:fa:f9:41:66:00:8b:
d9:ac:34:b3:44:f7:6a:1b:2e:49:05:df:8b:a9:81:
7b:ce:19:d1:11:d4:2a:8a:3b:fb:97:ea:e7:c0:f1:
cc:dc:cb:c5:36:e5:31:73:a6:22:ed:b5:65:5b:c1:
28:15:33:e3:e2:18:0f:2c:2e:2c:f7:8e:c9:86:7b:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8F:64:A9:86:A8:01:BF:01:99:A8:FE:99:99:89:E1:E4:D4:E4:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/009B347C92CA11F0A9784CA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.36.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a9:60:09:bb:d7:74:1d:ac:24:63:ab:b6:79:46:91:d3:0f:
ac:45:1e:0b:43:b7:6f:7c:94:3c:36:c0:c0:5f:d5:c4:3d:b2:
fd:b0:00:76:dd:bc:d6:6e:62:a8:a1:d2:08:d5:c6:e0:23:6b:
23:28:2d:f7:62:90:0f:a8:a2:15:a2:cc:79:bd:00:42:03:08:
10:29:a1:53:fd:66:30:c4:55:43:6a:cf:f9:57:3e:81:03:d3:
cc:6e:cb:b7:20:76:ab:e0:6c:59:aa:7b:a2:35:d7:bc:aa:e2:
51:01:f8:d8:d9:5a:2f:f6:2c:22:0c:d5:58:7f:9c:79:fa:68:
67:2a:0e:20:5d:c9:d3:2c:ed:36:b9:95:40:87:b6:1d:d2:f4:
ae:41:99:3a:cd:cf:87:9b:a6:00:0e:24:02:f7:13:64:ff:73:
83:44:0a:78:1b:aa:5d:45:be:e2:9d:85:dc:8f:5d:49:a9:85:
f0:7e:1b:ec:c5:ac:00:67:1e:d3:84:45:3b:73:15:31:aa:e4:
16:eb:13:e6:4f:b2:9c:65:6c:ce:15:de:0b:b0:e3:16:e8:19:
31:e3:03:78:29:d9:fb:66:bf:29:cd:a0:6a:fc:19:7f:66:92:
8e:9b:29:f5:4d:a8:0d:b9:1e:b2:d0:4b:77:1d:68:f0:25:35:
9b:23:7e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:59:36 2025 by rpki-client