Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F8A8076A28A11F09AAB54B1DAE4EC9C.roa
File: 0F8A8076A28A11F09AAB54B1DAE4EC9C.roa (raw, json)
Hash identifier: xYtKZf8PV/0kcsx0W3Jdiuw0gkgVi87pQfou5k4ULSU=
Subject key identifier: 48:FF:9D:61:A1:18:9F:56:0F:7B:66:76:15:19:78:56:9B:C8:55:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A25D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F8A8076A28A11F09AAB54B1DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 07:57:10 +0000
ROA not before: Mon 06 Oct 2025 07:57:05 +0000
ROA not after: Sun 09 Nov 2025 07:57:05 +0000
asID: 147176
IP address blocks: 154.212.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107101 (0x1a25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 6 07:57:05 2025 GMT
Not After : Nov 9 07:57:05 2025 GMT
Subject: CN=68e37656-3b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:35:3d:91:20:ef:a3:cb:8a:d6:a1:8a:0a:
e6:69:01:ba:db:c0:0a:2d:85:53:ac:db:9b:99:04:
08:d5:e7:70:dd:f8:a7:c6:c6:be:24:12:60:bd:ce:
f4:8d:71:f8:ce:f0:f6:f6:ad:87:a2:67:bb:30:0c:
5c:02:75:99:c5:73:a3:e0:fc:bf:3d:d0:92:46:d6:
4a:3c:d4:b8:22:aa:c9:62:11:82:19:4c:a2:53:34:
3f:99:47:e5:0a:0a:04:ca:d1:99:48:06:e5:e3:90:
3e:a2:d9:63:46:52:b0:39:46:ad:13:73:82:ca:7a:
5f:b0:d7:0a:d2:f3:85:19:cd:d5:fe:13:f0:f8:e3:
4b:a0:ec:67:b0:b1:b2:1d:62:aa:08:d1:bc:9b:33:
96:5a:9d:3e:c5:16:e6:af:77:ed:be:00:ab:15:50:
73:41:ce:32:92:34:d0:b5:4b:b1:30:c5:bf:50:b7:
bb:57:96:e7:9e:43:5c:e0:c2:fa:89:18:64:08:20:
fc:01:62:72:40:c3:ab:b8:3b:0a:90:5d:64:ee:83:
cf:01:13:7b:32:fd:12:f7:43:4d:7a:44:38:06:3d:
55:8b:2b:2d:f8:c5:a0:e5:8a:e9:c6:66:b3:bb:b5:
b7:9c:b1:6f:e7:db:eb:b0:a2:78:c1:c6:b2:1f:5e:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:9D:61:A1:18:9F:56:0F:7B:66:76:15:19:78:56:9B:C8:55:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F8A8076A28A11F09AAB54B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:1b:39:5d:50:74:f6:bd:de:54:f9:ee:32:e8:10:ae:c2:38:
e0:bd:7e:46:b4:45:0a:a7:1a:6c:4c:94:11:3f:ba:a3:54:91:
59:5f:52:59:00:8e:b5:89:92:87:99:6b:69:65:0c:1c:d1:49:
f9:28:b9:57:b0:b6:15:40:ba:50:61:54:73:fe:be:54:0c:4c:
7c:b4:02:08:b4:4d:4c:9e:35:bc:b5:f0:29:34:43:ce:71:6b:
2a:71:4f:15:8e:1d:5a:9e:e5:c7:72:b0:0e:0b:6d:c7:94:28:
39:59:a3:2a:d1:f8:8c:30:32:fc:bc:f7:29:0a:a5:ea:2d:69:
f8:09:c8:0c:e0:66:1e:bb:3a:e5:51:0c:2e:26:bf:ca:2f:f1:
4b:dc:4e:bf:f6:92:f2:2d:11:66:63:dd:c4:31:23:12:e9:10:
5c:ef:8b:29:84:79:26:32:3d:b7:9b:bc:98:7f:50:f9:35:ef:
98:39:8d:35:39:1a:78:f6:05:26:c3:5f:11:19:0d:68:ce:cb:
86:68:ec:61:b9:83:f9:67:8a:95:39:cb:0b:4c:05:99:23:0d:
3f:01:00:23:ee:6b:45:a8:0a:b2:c8:76:af:81:8f:f8:f9:83:
a7:1e:78:3d:98:3e:6e:56:cc:eb:32:a4:15:61:5d:12:f9:5e:
c0:f2:b9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:03 2025 by rpki-client