Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/073988B6AA7F11F08999707BDAE4EC9C.roa
File: 073988B6AA7F11F08999707BDAE4EC9C.roa (raw, json)
Hash identifier: 4MCsWXOJox6ToKGAi9CqCgu63KG3dcC9OOcYiLD1SDI=
Subject key identifier: 4D:90:20:A0:18:AC:D7:25:E6:01:05:64:DB:97:6B:1A:C0:79:A9:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/073988B6AA7F11F08999707BDAE4EC9C.roa
Signing time: Thu 16 Oct 2025 10:58:21 +0000
ROA not before: Thu 16 Oct 2025 10:58:14 +0000
ROA not after: Thu 22 Oct 2026 10:58:14 +0000
asID: 58944
IP address blocks: 154.91.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107500 (0x1a3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 10:58:14 2025 GMT
Not After : Oct 22 10:58:14 2026 GMT
Subject: CN=68f0cfcd-12e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:9e:74:ee:07:92:0a:56:6c:b0:1b:83:72:
74:99:c0:2a:c1:d0:96:4f:d1:71:45:64:06:c7:dc:
b0:fe:fe:27:31:a2:af:ca:65:d5:f4:c7:7a:dc:b0:
8a:d9:5d:02:71:5b:77:1f:6a:f7:88:06:84:10:ac:
11:d4:96:08:8d:d5:db:61:5f:a3:ac:0c:72:89:f3:
72:dd:c6:4f:c2:ed:16:53:0c:80:09:2d:04:17:32:
6b:f8:17:a6:30:42:aa:9f:e1:60:91:4f:41:56:41:
ca:d5:f0:e1:a6:af:59:18:ce:0c:c2:45:2e:86:d8:
64:7b:e0:e8:90:67:10:fb:87:be:88:ef:97:ce:a2:
23:02:31:31:7f:73:c2:ed:de:84:8e:93:8b:c2:bf:
84:83:3c:4e:3d:46:08:9b:6a:f7:c6:dd:74:01:74:
82:a5:a4:3d:51:5e:29:de:ee:55:01:b8:79:1b:83:
0e:fb:fa:77:39:3f:6e:ce:25:7a:1c:38:24:c5:64:
e1:91:0f:23:d7:25:6d:61:72:cc:0e:9a:cc:39:fe:
9e:a5:16:e3:83:2b:6b:36:d6:55:36:1b:65:00:f3:
30:f8:5d:aa:9b:d3:14:fc:18:53:3e:d4:80:9a:4a:
b2:43:df:7a:f5:5f:4d:83:37:c1:c7:a3:02:50:27:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:90:20:A0:18:AC:D7:25:E6:01:05:64:DB:97:6B:1A:C0:79:A9:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/073988B6AA7F11F08999707BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.1.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3c:b4:d9:11:9c:59:63:79:c3:b4:1f:85:a2:08:56:32:a8:
5b:ce:bf:1a:43:c8:05:da:7a:fa:7b:9c:57:de:f3:8e:43:1c:
be:ae:fd:02:75:80:da:0a:7a:9c:83:25:34:0d:db:7e:36:a1:
85:18:55:80:a0:fc:04:f7:a0:33:61:30:e4:df:ee:db:17:ae:
39:e2:c2:05:09:78:cb:40:af:60:e6:85:46:aa:3c:e8:f1:bb:
81:e1:f3:f9:c4:00:aa:1c:54:64:ec:e6:f9:ed:1f:ae:e9:b8:
4c:cd:05:04:51:f9:fb:ba:47:02:75:43:bb:4e:00:25:eb:22:
13:e5:c6:98:3a:92:94:37:ca:2e:fc:af:82:78:39:9b:b3:76:
4a:2d:4c:9b:aa:c1:33:e0:9e:5a:7e:1c:ae:3d:7e:ae:79:cf:
66:a5:65:bc:8d:d3:08:38:88:19:c7:f7:36:c7:17:bc:e5:2a:
03:f9:e9:3f:b2:c4:f8:a5:02:c9:5e:80:e6:11:54:74:59:44:
b6:34:9f:b5:d2:be:b7:04:77:d1:42:d2:43:10:63:5b:90:0a:
32:c0:24:5c:23:b9:5e:9d:22:af:c1:3b:14:ca:73:0b:48:05:
62:3f:5b:d4:5f:64:06:2c:13:2a:eb:81:3c:f6:69:8e:13:cc:
29:a5:56:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:35 2025 by rpki-client