Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/136A96509AB911F096FAE581DAE4EC9C.roa
File: 136A96509AB911F096FAE581DAE4EC9C.roa (raw, json)
Hash identifier: cRO+ujY/IOokNOho40J+1dfr1Ir3FQK6XFvy1bMUxCQ=
Subject key identifier: D3:22:3F:A0:8C:93:D1:AB:44:0D:09:5B:44:DE:F9:A5:9E:0F:2F:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A11D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/136A96509AB911F096FAE581DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 09:13:34 +0000
ROA not before: Fri 26 Sep 2025 09:13:29 +0000
ROA not after: Sun 02 Nov 2025 09:13:29 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106781 (0x1a11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 09:13:29 2025 GMT
Not After : Nov 2 09:13:29 2025 GMT
Subject: CN=68d6593e-9dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:c1:8f:87:6a:08:4a:0b:16:19:b4:8e:27:
e5:93:c8:a2:a2:9e:56:8a:7a:6c:d5:08:5c:8e:4d:
f4:f0:92:dc:97:48:e0:cc:4c:9b:3d:09:f0:d8:90:
37:db:eb:9c:37:ea:91:e5:f9:67:0a:a8:10:aa:f6:
6d:1e:93:2c:58:a8:10:85:11:86:c6:78:88:49:84:
e9:f7:8e:99:0a:cc:83:17:ef:16:20:c3:82:58:5f:
2a:18:3d:c5:1f:e7:6d:d1:66:d6:c5:2a:de:41:7b:
d0:c3:4d:e4:54:e5:aa:65:8f:3a:98:79:5d:bd:1d:
c7:1c:e5:86:dd:49:77:de:9a:24:fe:eb:1e:dc:64:
e7:65:06:cc:77:e8:bf:82:09:b9:d2:96:f4:f7:66:
e2:9e:06:1c:aa:e4:75:44:d3:a3:2c:54:1a:f5:69:
4b:dd:92:16:22:a4:c6:71:8f:75:00:1e:df:3d:12:
a1:e3:fd:a7:22:23:41:b3:54:77:8d:03:42:4d:1c:
2c:02:c7:33:c4:2c:10:fc:ab:75:a4:b1:24:51:70:
e5:c0:a6:65:d6:6f:1c:b3:ab:9e:d7:f3:ef:c7:4b:
b2:c2:b3:20:fd:6f:6b:b3:05:dc:6d:bc:4e:7a:e7:
25:c5:f7:a5:22:2a:50:df:52:10:7d:25:a0:1b:86:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:22:3F:A0:8C:93:D1:AB:44:0D:09:5B:44:DE:F9:A5:9E:0F:2F:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/136A96509AB911F096FAE581DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
be:46:de:4e:4e:ce:df:ad:e2:7a:74:89:e3:3e:29:9e:99:4c:
21:9e:e1:55:c9:74:06:53:98:87:0b:46:da:11:3b:ae:04:4b:
01:e0:36:1e:4c:4f:ab:31:d5:75:2d:d9:29:35:c1:12:cf:94:
22:79:70:6c:4d:33:9c:51:e2:9a:4c:55:91:e2:88:fc:74:a0:
8a:fb:e6:96:cb:3b:c8:ee:8e:a3:76:e1:23:54:39:d6:57:17:
58:60:9d:45:db:60:21:3e:0c:b9:d7:c6:7d:00:f8:c9:29:94:
74:8a:50:fd:c4:88:ef:19:bb:02:61:a2:e6:7d:4e:13:96:5c:
9e:7d:d2:34:c5:bd:46:c6:87:cf:15:03:8b:e3:a0:dc:2b:e5:
29:1f:5a:12:42:79:8c:b6:21:5b:57:56:76:f9:4b:0a:fd:d7:
49:6f:79:c1:c7:a8:4b:9c:f3:90:92:b9:4c:4b:5c:fa:b9:d8:
3c:9c:cf:98:9d:d5:00:be:de:10:5b:a7:ad:8a:db:bc:9e:6c:
f0:4b:e1:a7:31:da:65:1a:fc:26:be:f8:b7:14:89:6e:bb:67:
26:e1:91:cc:92:af:65:8b:db:bc:c1:7f:7e:c8:60:81:06:fb:
3d:af:a9:da:3a:8b:06:68:72:c9:14:22:dc:24:a3:ab:0f:08:
5c:a4:b5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:15 2025 by rpki-client