Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1259A268910611F0845914A5DAE4EC9C.roa
File: 1259A268910611F0845914A5DAE4EC9C.roa (raw, json)
Hash identifier: qVkHlxjuf9TUE0Ern+Lt3uQ14YeZKNWMNyoIsWwqY5s=
Subject key identifier: 2E:88:04:5F:1E:AE:C8:97:15:FA:C1:F8:F3:23:34:D2:58:66:D8:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1259A268910611F0845914A5DAE4EC9C.roa
Signing time: Sun 14 Sep 2025 00:59:31 +0000
ROA not before: Sun 14 Sep 2025 00:00:26 +0000
ROA not after: Wed 22 Oct 2025 00:00:26 +0000
asID: 203020
IP address blocks: 154.90.192.0/19 maxlen: 24
154.94.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106395 (0x19f9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 00:00:26 2025 GMT
Not After : Oct 22 00:00:26 2025 GMT
Subject: CN=68c61373-d5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:80:e6:eb:9d:e3:52:76:16:3b:fd:02:0f:
0d:6d:b9:4b:82:18:79:ac:a4:ff:9d:87:e3:90:81:
ef:f3:66:15:8f:d1:67:3f:5e:07:3d:0b:29:6e:a7:
80:60:88:84:1d:82:d9:8f:2e:96:3a:26:f5:91:3e:
ec:3c:b0:8b:1f:b4:7f:da:19:52:ff:2e:f9:41:3d:
bc:eb:95:84:b0:f6:1a:f7:7b:1d:1f:65:48:e0:b3:
a5:92:18:f0:e3:78:76:6d:e1:ea:70:09:86:34:4e:
3d:af:4b:c5:34:7d:40:c4:0d:99:53:90:e2:3a:17:
99:1f:42:77:2a:ba:5b:35:0c:ee:e7:4c:09:a8:9e:
3a:4d:f9:66:ff:6b:8e:46:fa:0f:8a:f8:c2:4a:c3:
9e:3a:d9:6b:52:10:79:b2:83:a3:93:72:11:74:36:
0c:47:a4:90:ff:9e:6b:fa:77:a2:8a:0e:6a:bf:0b:
f6:a2:8a:fc:62:c0:4b:82:42:2f:62:0d:5a:e2:d5:
4d:da:de:34:3d:6e:6c:44:65:60:18:a3:1a:61:54:
09:42:2b:e8:ed:90:5c:1f:60:95:e8:b1:6f:65:4d:
c9:f9:82:40:54:7c:3b:d4:e1:16:78:8a:4a:76:45:
34:fc:60:a3:78:d1:72:48:eb:ad:29:32:6c:ba:a7:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:88:04:5F:1E:AE:C8:97:15:FA:C1:F8:F3:23:34:D2:58:66:D8:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1259A268910611F0845914A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.192.0/19
154.94.128.0/18
Signature Algorithm: sha256WithRSAEncryption
be:a6:18:9c:4b:f6:21:c5:5b:48:1a:63:0b:9a:be:f5:26:c2:
64:3e:65:d1:4e:0f:3c:6c:30:2f:ea:5e:69:41:b9:3b:03:31:
c9:3d:34:67:c6:44:77:92:df:4a:13:0f:9c:30:31:d1:8a:ab:
21:24:24:70:f9:0a:68:21:a4:e3:7e:fd:f7:99:6b:18:05:15:
8a:19:7a:ed:25:ff:69:cd:8b:f4:91:86:d1:cf:9a:0d:0b:42:
91:70:7f:60:0b:20:42:33:d7:75:1c:64:54:ac:3a:5e:13:56:
06:10:bf:48:3e:67:0f:09:68:09:63:8b:7d:7f:e9:01:55:fc:
f3:16:39:a8:c6:52:4f:a9:65:b8:5e:b7:cf:85:8f:e8:53:50:
95:22:4c:cd:cb:0b:e4:6e:66:1b:0f:8c:be:b1:49:0d:b0:17:
5e:9a:f6:33:44:89:30:8d:9d:46:f5:c5:e9:a1:e6:1b:3f:fe:
ea:0c:b6:04:b8:11:f8:32:15:54:76:2b:d9:e0:4d:da:97:47:
22:16:71:7a:fa:3e:ab:d6:39:e7:c6:9b:52:9a:96:a3:2f:11:
e1:e4:6c:71:4e:24:7a:98:41:69:c0:0e:42:cc:a2:d2:5c:f2:
d6:46:56:cd:9d:7a:81:dd:f9:83:3f:1e:a3:c4:a8:4b:32:4d:
0e:39:13:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:03 2025 by rpki-client