Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00D75FD6A5AF11F0B7E7BD91DAE4EC9C.roa
File: 00D75FD6A5AF11F0B7E7BD91DAE4EC9C.roa (raw, json)
Hash identifier: 8wWgAFoz0YupJkhoKQ8SGOakGuVxqoZ5UEfnay2C3U0=
Subject key identifier: A6:69:6E:02:89:86:CF:16:55:35:F9:BD:10:B4:05:70:1F:E6:8E:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A327
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00D75FD6A5AF11F0B7E7BD91DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 07:59:10 +0000
ROA not before: Fri 10 Oct 2025 07:59:05 +0000
ROA not after: Wed 05 Nov 2025 07:59:05 +0000
asID: 274035
IP address blocks: 154.88.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107303 (0x1a327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 07:59:05 2025 GMT
Not After : Nov 5 07:59:05 2025 GMT
Subject: CN=68e8bcce-c3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:3c:b2:97:e8:d4:9f:90:35:ec:46:ff:9e:
a8:0f:bc:9e:87:bf:68:32:30:2d:0b:68:76:ba:cc:
da:af:16:1f:a2:3e:55:96:50:7a:fd:26:0c:ea:85:
c9:8b:fd:a3:3d:9d:e9:11:97:a9:31:64:ea:7d:72:
3a:f4:80:77:e7:83:21:9a:a3:55:c0:5d:88:96:30:
49:7c:4f:fe:d3:5f:f3:e8:65:18:0f:cf:db:10:56:
c5:18:e5:5f:71:1a:86:71:c9:2f:6c:6f:6f:bd:7f:
d5:38:a4:a6:f3:41:82:ce:7e:3c:8c:2e:bb:92:89:
de:0a:2b:68:62:3b:cb:9b:d3:1c:fc:22:e3:78:a1:
d2:99:4c:98:72:7c:fc:61:22:7c:46:91:95:3a:ae:
7d:1a:ec:33:fa:30:4a:e9:59:65:75:2c:13:26:e3:
1a:3e:c2:95:e5:e2:51:4d:ca:79:22:09:3d:49:83:
b2:6b:cf:04:44:1f:98:76:25:9d:1b:95:53:9c:f7:
64:53:25:ba:99:8e:03:bf:f1:ae:bc:36:e9:97:d3:
31:34:32:59:bf:ed:8a:c5:80:cf:70:21:c4:52:e3:
af:2e:af:90:2a:9d:ac:e5:d7:a4:58:4a:7e:d2:73:
58:20:6b:de:68:9e:61:74:a3:28:c4:0b:20:c0:51:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:6E:02:89:86:CF:16:55:35:F9:BD:10:B4:05:70:1F:E6:8E:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00D75FD6A5AF11F0B7E7BD91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.188.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:27:92:5e:e1:23:3e:a1:71:a8:ea:dc:4b:bc:26:14:66:a0:
bd:3b:e6:8d:06:73:97:ed:e8:41:92:1f:34:d6:1a:e0:c7:73:
d8:b0:ee:69:94:8f:06:ef:e1:d6:ed:b3:28:e2:d4:4a:1b:37:
79:08:de:a5:93:80:17:4b:4a:df:b0:4a:94:ed:2f:5f:da:3b:
0f:b1:3f:ba:e3:04:26:70:e3:45:2a:37:65:6e:11:47:c5:ff:
17:24:ab:18:92:1c:e0:c0:0f:4c:1e:95:c8:31:43:3d:62:66:
e7:73:6e:c5:16:49:2e:f0:53:78:e5:27:b6:e3:04:18:b8:64:
06:9e:68:98:ea:b4:13:e2:24:84:75:02:e5:47:10:b0:29:53:
86:75:e8:07:21:a5:87:b6:54:44:a4:6b:7d:bc:55:4e:67:e2:
07:a7:b3:86:87:d6:22:f7:d5:53:0a:44:75:58:87:21:bb:16:
25:5d:c7:ff:be:fb:44:5f:2a:02:14:71:26:26:52:78:cd:3f:
5d:29:fb:cd:f6:7c:97:08:91:d8:a7:cc:25:a3:4b:5e:f4:b4:
27:d5:42:24:a8:27:ac:f0:44:89:b4:fc:fa:8f:9b:9a:c9:7d:
dd:08:3a:e3:28:cf:b7:fe:47:f9:b7:1d:b8:7b:6b:fb:3f:de:
1a:ff:ec:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:54 2025 by rpki-client