Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22C20916AA8711F0B9951FB0DAE4EC9C.roa
File: 22C20916AA8711F0B9951FB0DAE4EC9C.roa (raw, json)
Hash identifier: KWGwLRvku2w5fdrAwJigGIYE4Km43GXog7wIAATi+M0=
Subject key identifier: 51:1F:21:9E:14:FC:4B:86:D1:A5:BF:0E:BE:5B:0E:24:0B:24:65:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22C20916AA8711F0B9951FB0DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 11:56:23 +0000
ROA not before: Thu 16 Oct 2025 11:56:18 +0000
ROA not after: Wed 19 Nov 2025 11:56:18 +0000
asID: 395793
IP address blocks: 154.92.205.0/24 maxlen: 24
154.92.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107516 (0x1a3fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 11:56:18 2025 GMT
Not After : Nov 19 11:56:18 2025 GMT
Subject: CN=68f0dd67-6360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:cb:a5:27:23:fb:25:cf:03:9e:50:3b:e2:
65:c6:7d:32:e0:db:7b:83:dc:3b:2c:4e:b2:54:4a:
15:79:26:5a:59:f5:69:65:8c:9b:c0:a0:26:1e:7a:
08:da:b6:11:82:96:6f:36:4d:60:01:ab:b7:15:b4:
8c:1b:e6:a4:7f:5f:0e:f9:64:1e:13:7f:6f:2a:16:
13:7c:d4:78:5f:c6:69:8a:e5:6c:2a:f2:74:ed:81:
e0:2f:2e:68:15:c1:2e:9a:62:8b:ca:9a:6d:27:a9:
cc:62:d9:78:d4:9f:58:78:99:56:32:c5:4e:49:2c:
b4:82:40:cf:f9:83:ca:65:6e:7f:fe:3a:d5:fc:2d:
da:d3:7e:62:44:54:05:2a:06:6b:ee:d4:4c:bb:c5:
fe:0f:67:09:da:d2:fa:47:88:97:af:ed:7b:99:ba:
d5:f8:d9:d1:0b:9a:68:bf:69:22:dd:dc:b1:7e:e7:
70:2c:94:81:f3:a0:d6:82:cf:48:f4:ee:44:e0:64:
33:0b:88:57:2e:e0:a8:a3:cc:32:28:40:ae:5c:b1:
5e:c4:5e:0c:54:b3:b9:bd:41:70:9a:99:09:2d:7c:
b7:ec:05:f6:bd:82:26:5a:8c:ab:de:34:b2:fd:4c:
d8:71:c6:75:78:30:01:12:34:53:f2:5d:a1:c5:70:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1F:21:9E:14:FC:4B:86:D1:A5:BF:0E:BE:5B:0E:24:0B:24:65:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22C20916AA8711F0B9951FB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.205.0/24
154.92.207.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1b:27:dd:ef:c3:b6:e8:24:08:10:19:cc:d6:a9:3e:84:28:
ce:7a:5a:e4:0a:40:72:96:02:7f:5a:88:33:bf:0d:30:82:2d:
72:59:ec:48:22:47:e4:4e:b9:a3:9c:ad:34:16:bd:a4:17:54:
c1:8f:0b:dd:e2:2b:fc:33:de:6d:f3:19:a1:1e:c1:af:60:59:
fb:29:8e:45:d0:d7:de:3f:06:84:55:ed:57:98:b7:de:12:eb:
89:24:7b:f4:02:51:41:dd:64:c7:28:d3:09:fc:ec:6f:f5:9f:
7f:8c:8b:6a:07:20:d7:90:38:57:63:a2:07:c1:34:0d:61:87:
d4:24:1a:90:51:70:a7:06:89:8f:ad:a6:ba:63:a9:b8:cd:99:
01:80:76:88:64:8b:c7:97:7a:d4:dc:be:78:80:88:f9:50:73:
6d:02:a1:c2:de:42:9b:37:44:db:d7:15:ca:cf:25:fd:d1:1a:
7e:e5:48:f9:ed:cf:c0:6b:0a:c9:13:07:ac:de:72:74:50:17:
7f:ea:aa:a1:b0:26:20:62:5c:71:16:a8:9e:c2:12:46:e3:d3:
a1:97:7d:54:92:c6:10:9a:e5:fb:99:d6:b7:54:9a:64:c0:96:
40:1a:5b:5d:c4:7b:52:3d:a4:c1:2c:18:a8:20:86:5a:4d:54:
b5:8d:00:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:10 2025 by rpki-client