Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A6FAB38C3CD11F09B9DD6CBDAE4EC9C.roa
File: 1A6FAB38C3CD11F09B9DD6CBDAE4EC9C.roa (raw, json)
Hash identifier: 0lqMSukbowEvsUmf95WcmzMPn0i19gym7E06sXgty7A=
Subject key identifier: F9:1E:48:3C:B0:0F:38:AA:09:B5:A2:9D:6D:95:8D:A7:E0:B5:E7:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A97B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A6FAB38C3CD11F09B9DD6CBDAE4EC9C.roa
Signing time: Mon 17 Nov 2025 15:50:13 +0000
ROA not before: Mon 17 Nov 2025 15:50:05 +0000
ROA not after: Sat 27 Dec 2025 15:50:05 +0000
asID: 3257
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 19 Nov 2025 09:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108923 (0x1a97b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 15:50:05 2025 GMT
Not After : Dec 27 15:50:05 2025 GMT
Subject: CN=691b4435-f214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:f1:d2:06:b6:41:38:ff:33:89:4a:fd:7a:
32:91:a3:81:76:a3:c6:12:32:c2:cf:21:45:a6:6a:
13:f5:af:2b:61:d2:2d:68:26:0c:df:e7:20:c4:99:
09:8e:d0:5c:ec:5a:65:ba:60:c6:18:9e:35:51:e0:
89:9f:7a:e7:9c:e4:9a:e9:d9:14:31:29:ae:ce:3d:
d2:4d:ed:31:cb:e8:0c:13:50:c3:f7:7d:7d:4c:7b:
d1:85:5a:4e:10:dc:58:f5:c3:d7:47:cb:04:ef:b8:
65:66:5a:69:c1:80:c0:34:fb:15:78:86:79:06:70:
c4:9d:c3:c6:3c:4f:1e:69:d7:0d:6e:51:2c:14:74:
ca:95:f3:d8:96:aa:b5:32:81:f2:02:3b:15:c2:37:
04:49:2d:0d:5f:78:e1:c5:32:0f:ce:17:a9:3f:ce:
59:43:b7:a8:26:5b:ec:90:41:19:fd:d9:d4:dd:58:
f0:d2:22:09:62:ae:b0:a3:b8:dd:82:11:45:28:cf:
04:c4:bc:07:34:bb:c8:77:bc:bd:8c:11:92:57:78:
45:69:23:24:dd:51:96:30:e3:09:bf:74:47:59:ec:
45:26:ce:cd:72:b1:ff:52:f1:b3:96:b0:de:94:85:
34:18:81:41:5f:c3:a7:db:22:70:94:71:12:94:59:
f5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1E:48:3C:B0:0F:38:AA:09:B5:A2:9D:6D:95:8D:A7:E0:B5:E7:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A6FAB38C3CD11F09B9DD6CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5a:d3:2d:6f:71:95:f2:8b:0b:eb:de:e9:5d:58:50:15:17:
88:19:ea:85:f2:eb:07:a6:a3:09:2a:22:a4:28:91:87:d2:7e:
9f:0d:40:66:d1:a7:51:3c:56:a8:c6:40:f9:9c:75:83:24:72:
d8:98:56:81:79:1b:fe:3b:e3:c0:0d:12:bc:ff:43:37:30:44:
a9:fd:6d:2f:b3:b7:1c:af:76:e7:f4:fd:0c:08:e6:bf:bf:be:
d2:ad:74:0b:84:98:e7:b1:92:88:90:21:9a:33:91:a9:d7:56:
e5:54:4b:84:ec:4d:b8:21:03:92:ea:b4:4d:2d:53:42:96:b6:
15:aa:7a:dc:24:0f:b1:f5:b5:35:13:e2:36:7c:e1:d1:c5:e0:
a8:78:13:db:d3:53:f7:b7:ff:b7:e3:7f:ef:e0:a5:49:29:51:
eb:68:33:9d:a1:5a:39:7f:1a:53:23:8c:ef:ba:ce:bf:87:1f:
ec:fb:66:c3:15:d0:90:82:6a:03:66:8a:16:ff:5a:45:70:84:
b8:ea:dd:65:ae:4b:2f:8a:94:f2:d7:ef:0d:dc:5c:fa:a9:a8:
06:4f:8f:33:04:d7:94:36:58:f9:de:6c:59:a9:4a:d7:0b:fb:
f8:9d:2e:70:28:8b:2a:4e:c7:bc:9f:d8:95:f2:0b:3c:63:aa:
1b:6e:98:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 23:50:23 2025 by rpki-client