Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11C0C57AAA6511F0B24635D4DAE4EC9C.roa
File: 11C0C57AAA6511F0B24635D4DAE4EC9C.roa (raw, json)
Hash identifier: 3LkuNA9YlSbepRsfrvzif/GFnwLNc38qMRdOXSi7UOE=
Subject key identifier: C5:91:91:D0:C1:4F:AE:41:7E:2C:7C:CF:DB:1A:2D:C5:09:F8:35:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11C0C57AAA6511F0B24635D4DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 07:52:32 +0000
ROA not before: Thu 16 Oct 2025 07:52:27 +0000
ROA not after: Mon 20 Oct 2025 07:52:27 +0000
asID: 5650
IP address blocks: 154.194.20.0/22 maxlen: 24
154.205.176.0/22 maxlen: 24
154.205.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 07:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107456 (0x1a3c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 07:52:27 2025 GMT
Not After : Oct 20 07:52:27 2025 GMT
Subject: CN=68f0a440-2100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:60:68:8b:2f:2f:56:aa:99:14:3f:e0:01:
a1:cd:3d:b7:ba:ce:59:5d:a6:76:70:08:1d:ab:a1:
6f:51:b9:27:a9:14:13:19:3a:82:07:bc:28:37:db:
f8:1c:12:99:f9:6e:e9:c8:5d:f2:2b:b4:1b:53:d9:
f4:e6:c1:a4:1d:06:a8:12:aa:35:66:bf:41:b6:a3:
89:13:45:3d:a2:60:74:d9:ff:87:f0:a1:e7:38:60:
47:f7:52:cd:fa:f5:ca:c8:fe:fe:e3:96:b0:36:33:
c5:a0:57:93:2c:92:28:36:aa:8a:67:f6:ac:1a:b8:
83:28:43:77:a4:f3:51:b9:55:b9:b7:1c:7a:d6:23:
8f:a5:e2:aa:bc:92:71:ff:55:28:77:fc:d6:9a:f4:
14:a7:f5:3f:b7:8d:2b:b9:c4:08:63:d7:85:0f:f0:
50:d9:55:97:b1:e5:f6:96:d5:79:bf:ad:ff:e0:32:
ba:45:8c:d4:1a:ba:84:84:99:c6:48:1c:4c:76:97:
cb:29:53:05:df:b6:77:3d:5c:ad:24:ab:2c:71:ac:
bd:1b:53:f1:1e:f5:ff:2c:91:92:cd:fc:68:8c:e3:
b8:9a:8a:ae:af:59:b7:1c:a4:61:8e:22:96:78:6a:
c0:07:82:9a:4d:9e:09:f4:00:3f:df:5f:af:84:8b:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:91:91:D0:C1:4F:AE:41:7E:2C:7C:CF:DB:1A:2D:C5:09:F8:35:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11C0C57AAA6511F0B24635D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.20.0/22
154.205.176.0/21
Signature Algorithm: sha256WithRSAEncryption
96:20:c3:02:11:cb:bd:5f:63:2e:f6:08:61:7d:8e:36:2c:18:
a0:19:7e:8b:cd:cd:bb:94:44:a6:24:a1:79:cd:4c:a5:55:a0:
69:3e:59:b7:76:ef:19:ff:b5:b2:bb:0d:71:4e:80:85:cc:ff:
3d:1b:18:9a:35:88:fd:49:e5:fd:53:d3:5e:a2:04:39:65:df:
de:b4:f2:93:ea:06:43:35:75:d2:f6:ac:f8:e4:93:c3:83:f9:
c7:a7:08:ef:ca:ae:b3:47:37:fb:e1:69:c2:10:b5:ef:18:f1:
62:48:85:ae:13:18:07:97:96:19:e9:81:14:2b:53:d0:a1:1c:
0e:8b:28:e0:92:d3:77:6e:88:43:91:48:21:f3:fd:dd:b2:43:
12:7a:b1:f1:b0:9e:ef:c2:66:7d:d6:6e:27:90:1a:6e:5f:ec:
af:96:a0:7d:ad:b5:ed:a8:92:c0:84:20:c7:5c:53:e9:75:4b:
a7:81:47:b2:ec:34:b3:c8:e8:18:19:54:fc:9b:20:11:d7:10:
27:72:6d:a5:a8:ea:a5:68:9f:16:86:48:66:bb:b1:63:4e:67:
c1:04:ba:ee:92:00:d2:61:b0:4d:f2:64:c7:dd:13:b7:b6:fd:
3d:05:1f:fe:ca:64:bd:e3:ca:c6:ab:51:62:10:ee:eb:a9:5f:
97:c4:4c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:40 2025 by rpki-client