Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/212F8C00996511F09D9192DADAE4EC9C.roa
File: 212F8C00996511F09D9192DADAE4EC9C.roa (raw, json)
Hash identifier: mQEEMLnK9QQ2kHSu5VNgHnfoFBD6ZEIWmTZZ6UP2YeE=
Subject key identifier: E9:92:38:20:76:97:26:D4:E2:70:9D:A7:2B:60:D3:30:5F:8D:30:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A094
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/212F8C00996511F09D9192DADAE4EC9C.roa
Signing time: Wed 24 Sep 2025 16:40:08 +0000
ROA not before: Wed 24 Sep 2025 16:40:00 +0000
ROA not after: Mon 29 Dec 2025 16:40:00 +0000
asID: 29802
IP address blocks: 154.202.100.0/24 maxlen: 24
154.223.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106644 (0x1a094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 16:40:00 2025 GMT
Not After : Dec 29 16:40:00 2025 GMT
Subject: CN=68d41ee8-fd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:6d:73:a6:c9:98:d5:bd:75:25:c5:bd:6d:
24:a5:85:76:6f:2b:82:8c:dd:53:85:20:7f:d4:a1:
f5:47:6a:2e:86:d4:bb:60:66:47:03:a9:54:30:4b:
fb:a0:c0:d7:55:bc:8f:94:f9:98:3c:1d:ae:d1:89:
81:c1:0e:1f:f5:03:73:72:6e:0c:f7:36:f4:21:aa:
e1:77:c2:c9:28:aa:dd:45:80:2a:12:a6:12:c3:e4:
af:6a:dd:ca:0b:64:a2:a1:07:e6:51:e3:bb:93:91:
68:a3:88:fe:df:7f:aa:57:4d:d0:33:78:88:1c:59:
b2:30:cd:c4:f8:b9:02:bf:81:96:76:9e:1f:8b:e1:
29:e2:4b:a0:e8:e9:f2:f8:e6:b4:97:26:f5:d5:1a:
22:99:5f:9c:a1:7c:c6:17:c9:b4:a2:3d:3a:31:20:
e4:57:15:95:c2:bd:71:c9:47:41:1c:70:41:bb:2b:
c5:11:11:c1:31:b6:3c:ec:4d:db:b2:e7:d3:2b:19:
f9:10:e7:2e:34:27:69:98:57:0b:7f:63:e1:9e:e8:
e0:3a:9c:89:20:71:7b:bb:0d:a1:f7:58:8c:26:02:
8d:ac:0f:60:21:83:da:8f:d4:5b:b5:df:8c:5f:6f:
3d:3d:42:bc:26:08:06:75:4b:5a:e2:1c:bd:e4:23:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:38:20:76:97:26:D4:E2:70:9D:A7:2B:60:D3:30:5F:8D:30:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/212F8C00996511F09D9192DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.100.0/24
154.223.90.0/24
Signature Algorithm: sha256WithRSAEncryption
74:80:55:2a:9c:3d:96:48:4a:21:2d:6a:a1:30:0c:0c:3c:95:
e2:bb:16:4f:e2:6b:2a:d9:70:e8:6d:f5:f0:1f:a8:34:76:c9:
77:2b:80:8a:57:de:cc:b2:c1:2b:ea:3a:13:41:fe:c6:cd:74:
03:b6:ef:c6:0d:5b:bf:72:6a:51:35:a4:02:c3:ae:79:8c:7d:
4c:e3:ab:4f:7e:a9:ce:5a:91:1c:b5:c7:75:97:62:76:4c:eb:
7a:55:86:84:8b:66:a7:90:67:51:c8:99:7b:a1:7c:c9:7c:36:
69:50:a0:d5:f7:0d:36:40:5e:b9:71:ea:4d:78:0d:80:cb:fb:
13:2b:75:34:94:6d:6f:58:e6:66:c8:0d:c7:ea:b5:53:61:66:
34:7a:a7:3b:80:d1:6e:7b:01:d7:13:21:31:41:a0:e3:44:ec:
12:72:4e:1b:ce:88:e0:7e:4d:d5:33:d7:a1:2e:98:03:09:30:
5e:2e:bb:2f:70:ed:51:6d:89:d1:88:19:c3:e1:3b:5d:74:93:
47:59:df:4f:94:9d:0c:c6:ae:44:f9:b3:c4:eb:9a:ab:f6:43:
0a:23:11:92:e9:21:6c:e5:ac:e7:76:ab:ef:41:4b:97:92:75:
e0:77:fd:0b:4a:a9:fc:62:5a:0d:ed:bc:d5:ed:d0:a1:cf:50:
a5:b6:c8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:36 2025 by rpki-client