Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04A3FE7A946C11F0818EBEB7DAE4EC9C.roa
File: 04A3FE7A946C11F0818EBEB7DAE4EC9C.roa (raw, json)
Hash identifier: tV5hgs1G2bIZrtulUiTh18/Gqbc2XF0pde+fWtQOA6M=
Subject key identifier: F5:D7:F0:03:A1:FA:D3:12:CE:A7:1A:3F:FA:88:2D:48:DA:EE:56:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A005
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04A3FE7A946C11F0818EBEB7DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 08:46:51 +0000
ROA not before: Thu 18 Sep 2025 08:46:44 +0000
ROA not after: Sat 25 Oct 2025 08:46:44 +0000
asID: 272854
IP address blocks: 154.194.13.0/24 maxlen: 24
154.194.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106501 (0x1a005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 18 08:46:44 2025 GMT
Not After : Oct 25 08:46:44 2025 GMT
Subject: CN=68cbc6fb-d392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:c8:17:8b:5a:ef:ba:e0:30:ec:5d:75:01:
f8:37:89:98:bb:df:16:4a:17:3f:1e:00:66:33:cb:
56:d1:0d:62:ae:7e:30:e5:68:d3:3b:49:55:fa:2e:
f0:63:bf:16:d2:3e:d3:6a:c1:56:fc:36:c0:7b:d4:
35:66:37:e3:09:b6:82:ff:4e:e7:cb:7c:b8:63:09:
a8:88:40:df:bf:b3:0f:97:7c:81:ab:2f:c1:b8:d2:
4e:a8:dd:eb:ff:b5:aa:2d:9c:0d:41:e1:ad:05:00:
5f:8e:64:ec:67:6f:bc:7b:17:0e:51:bd:3c:8e:c6:
78:9a:7b:db:ff:30:1c:b1:a8:a4:d9:9c:33:98:42:
6f:ce:e0:68:98:de:a5:70:54:61:c5:81:ca:1e:2b:
82:fa:cd:cd:ea:42:d7:ea:46:5d:2d:e3:42:94:e6:
fd:6b:29:18:7c:5d:6c:50:0b:c2:94:df:21:65:2d:
f6:08:44:12:8f:cf:12:0d:75:22:27:5b:f4:4d:ba:
9c:8b:f5:b2:d7:e9:86:fa:88:bf:f6:a3:c1:a9:5d:
99:6e:30:51:61:e0:8b:b7:ed:d4:2f:dc:77:a6:76:
f8:a4:5e:db:c5:eb:32:01:d3:87:35:51:38:14:fe:
17:9b:60:96:75:d3:e0:c3:12:fa:4b:ba:9d:38:da:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D7:F0:03:A1:FA:D3:12:CE:A7:1A:3F:FA:88:2D:48:DA:EE:56:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04A3FE7A946C11F0818EBEB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.13.0-154.194.14.255
Signature Algorithm: sha256WithRSAEncryption
45:4b:51:f4:89:72:e6:f8:8b:60:02:e9:76:49:a7:4e:8f:99:
40:58:e1:d2:d6:42:c6:d4:61:0c:68:fb:0f:94:f3:ea:38:b5:
be:ab:75:ba:19:70:1c:ba:8d:5e:e1:6e:db:9e:45:75:ce:ce:
1d:a2:a4:13:99:e6:20:c9:54:38:17:7c:55:cc:09:1c:be:d2:
de:58:1d:e8:ee:39:56:70:2f:65:68:6f:39:98:23:10:05:13:
19:b6:d4:c5:a8:5e:84:23:93:34:72:22:a4:82:87:0b:93:03:
32:10:40:5a:d9:05:fe:55:ce:50:06:33:a8:01:49:cd:fe:87:
7c:54:8e:12:e2:d2:cb:70:1e:f2:f0:cb:e7:e5:b5:14:31:19:
f2:de:cb:fd:72:07:43:80:36:bc:72:e9:05:d2:c5:d2:b1:0f:
56:c4:b7:b4:f0:0c:f0:5c:9b:b1:36:e2:50:b4:ec:9b:6a:f6:
3f:72:4b:c4:16:02:f0:2d:38:0a:e5:59:f9:a9:a6:38:82:fd:
95:c8:05:32:dc:fd:f8:f1:a5:f3:d8:6e:ea:4c:67:0e:ba:c8:
e8:79:25:15:e6:27:e8:a8:b7:fa:9b:6d:04:7d:fe:a9:8e:12:
1e:b0:d3:88:bd:f1:b8:bd:3b:4e:76:fc:a4:25:ef:cb:a0:d7:
31:e5:44:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:59 2025 by rpki-client