Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A788C24AFEE11F0BE7A71A7DAE4EC9C.roa
File: 0A788C24AFEE11F0BE7A71A7DAE4EC9C.roa (raw, json)
Hash identifier: gXeoSFOgmPqi61aeyQaBf6G3K30rgJcuWfzfijFpesM=
Subject key identifier: FC:59:B2:F1:DD:9A:E1:E2:38:1F:BB:CC:63:AB:B4:EA:26:40:08:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A788C24AFEE11F0BE7A71A7DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 08:55:36 +0000
ROA not before: Thu 23 Oct 2025 08:55:32 +0000
ROA not after: Fri 31 Oct 2025 08:55:32 +0000
asID: 140403
IP address blocks: 154.89.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Oct 2025 00:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107704 (0x1a4b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 08:55:32 2025 GMT
Not After : Oct 31 08:55:32 2025 GMT
Subject: CN=68f9ed88-090b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:68:20:08:13:5b:9d:c5:9b:84:9a:14:be:d4:
9a:4e:53:37:c1:5c:cc:6c:f4:6e:18:48:bf:05:82:
02:35:89:b0:47:06:c8:0b:82:64:40:12:31:aa:0e:
63:d6:1f:18:b1:d2:8d:f6:d7:f5:30:4e:b9:2d:1d:
f8:14:11:b6:3a:fe:bb:c6:a2:7c:e6:b4:52:4a:01:
0e:04:10:59:3e:a7:0c:69:51:9e:8c:a5:de:7b:1f:
98:7a:14:92:15:3a:b4:71:b5:d1:a8:55:c1:aa:3c:
bf:32:91:c8:f1:c1:68:00:66:1c:d5:41:5e:d6:4e:
01:c9:7e:0c:92:4c:9c:c7:52:e2:74:32:b6:47:49:
4c:90:24:e3:cc:9b:ca:95:f6:33:e5:eb:8c:01:38:
1b:e3:9e:22:12:d6:f9:3a:f5:7a:15:01:aa:ca:43:
87:f1:61:f5:f2:be:cb:de:75:82:02:c9:13:6b:10:
33:e0:40:dd:11:65:8d:af:79:00:1c:c8:7f:35:22:
6e:49:fc:56:9f:2d:c5:c8:98:b8:d4:95:75:db:b9:
87:a7:20:88:96:67:35:ea:ee:d5:bf:7f:67:2d:76:
34:36:d1:b2:61:4a:c2:5f:0b:94:0d:ec:72:57:cf:
0a:dc:10:49:56:02:e1:45:67:5c:a1:a4:73:f7:9e:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:59:B2:F1:DD:9A:E1:E2:38:1F:BB:CC:63:AB:B4:EA:26:40:08:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A788C24AFEE11F0BE7A71A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2a:de:6b:10:a8:fa:4e:ca:0d:9d:c0:6f:5c:35:2f:c1:5a:
6e:89:ea:6f:54:e6:5f:cd:a0:8f:b1:bb:c2:7e:bd:6d:dd:ac:
a6:d7:16:0a:28:48:1f:70:89:d7:9a:a1:71:08:f4:a4:e1:eb:
bb:d8:26:0f:6f:b7:25:fb:fa:65:b0:ba:af:6a:f0:35:78:ee:
2e:5a:21:b2:07:19:72:05:25:1c:36:f2:44:a4:6b:11:f6:bf:
7e:c3:36:40:77:1e:7f:85:0e:2f:0c:34:78:6a:df:34:b4:6a:
db:47:fa:c4:10:3c:1c:5e:6d:34:0d:21:7b:0c:98:fe:e9:39:
8b:d8:5c:30:3b:3c:de:dc:8a:7c:21:4b:91:6e:62:94:8d:f7:
ad:51:ef:88:73:d3:31:a8:ac:6f:27:fe:af:92:41:80:ae:5b:
27:80:ae:99:dc:8a:19:a5:06:c9:ca:bd:e0:02:59:b5:40:7b:
eb:21:89:a0:2e:d7:03:a4:9f:96:cc:b8:54:9a:85:27:91:0d:
28:15:a6:be:cb:40:3c:6d:74:e0:77:af:96:7a:0d:f9:a3:52:
5f:ad:65:a4:50:27:f2:7d:ec:e9:05:2e:1e:a7:45:69:30:b7:
28:5c:e3:0b:08:fa:49:fb:a1:91:fc:a6:d7:56:8e:d2:39:f1:
46:e3:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 16:54:11 2025 by rpki-client