Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2395AFF49D7C11F0B435D5D4DAE4EC9C.roa
File: 2395AFF49D7C11F0B435D5D4DAE4EC9C.roa (raw, json)
Hash identifier: FeBOSDPIcJLgsKgI7MyWiOnswYLoa58szPMFNVo+4Ek=
Subject key identifier: 65:DC:E1:78:B5:16:BE:43:03:C0:19:FF:88:17:46:2C:FC:32:A7:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A191
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2395AFF49D7C11F0B435D5D4DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 21:34:55 +0000
ROA not before: Mon 29 Sep 2025 21:34:50 +0000
ROA not after: Tue 04 Nov 2025 21:34:50 +0000
asID: 399195
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106897 (0x1a191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 21:34:50 2025 GMT
Not After : Nov 4 21:34:50 2025 GMT
Subject: CN=68dafb7f-8fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:b8:4d:f4:6c:9c:63:bb:c1:88:77:48:ba:
84:77:8a:93:e5:93:1b:7e:39:b7:ff:93:4a:c1:c0:
62:99:51:d5:d5:3d:ea:ba:3e:44:0a:0b:d0:83:0d:
cd:2a:29:2c:00:e4:c1:53:d4:a2:08:2d:36:5d:c0:
72:55:6f:19:48:43:c2:d7:f3:ad:38:fc:97:07:c6:
9a:23:bd:64:b8:6d:6f:62:5e:51:ff:75:c9:2a:8d:
d5:57:9b:4e:fd:d7:4e:56:f3:07:29:0a:9a:70:d9:
44:e6:80:de:c9:c3:8a:fd:63:af:71:d9:7d:e4:05:
fe:29:a0:42:87:fc:59:c0:95:51:ab:70:f3:ea:1f:
f3:65:97:bd:1a:92:ac:1a:3f:2f:a5:08:12:53:55:
f5:93:79:7e:e2:9d:81:56:71:64:cd:d7:e6:dd:60:
6d:b5:93:b5:b7:de:30:06:dd:87:e2:30:f8:36:31:
51:07:ba:22:8f:95:22:30:5c:63:bc:a9:0c:0c:ca:
52:23:0e:66:ca:70:81:5b:9a:97:db:c0:f0:4a:de:
26:43:6d:04:f6:b8:c3:06:6c:eb:01:6b:09:a8:66:
60:d6:f5:91:8a:49:ab:19:31:a9:c4:91:3c:86:0f:
19:0c:ee:8e:86:47:8a:94:2c:c7:ec:33:39:57:e0:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:E1:78:B5:16:BE:43:03:C0:19:FF:88:17:46:2C:FC:32:A7:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2395AFF49D7C11F0B435D5D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:76:17:6e:a4:5b:70:14:55:b3:51:68:8f:34:78:fc:19:a7:
23:85:5e:73:e9:8a:fd:b7:b7:df:a2:da:fd:2d:d0:6d:dd:83:
f5:71:f4:ec:35:84:7f:80:61:d5:bd:fa:43:e9:2d:1f:5a:4f:
ce:c5:ca:63:7b:b9:8c:85:57:e6:ba:ac:81:28:e7:3b:0b:ad:
46:d1:90:0d:d4:0e:b4:6d:f8:24:bf:dd:51:36:e9:9f:22:ea:
7d:ae:34:83:18:ab:b0:64:1f:0f:7f:db:fa:9e:c8:99:0f:6e:
3b:2e:09:ef:c8:bf:c9:ba:b0:b9:55:2b:2d:43:c1:e6:14:9b:
f0:4b:ac:02:c2:8c:40:9a:0b:55:4b:03:7d:f2:1f:6d:50:cd:
a2:5a:a6:c2:9a:1e:2d:c0:c2:ef:6c:8f:96:2a:2c:e2:36:6e:
81:8c:28:0d:85:37:ed:82:c0:5d:83:08:42:4c:81:9d:93:1b:
12:eb:66:54:10:9a:05:83:be:f6:34:b8:bd:54:86:1f:62:92:
98:72:74:e8:d5:a2:83:4d:ae:cb:1d:38:00:d1:b6:b3:15:0a:
e0:c5:63:c3:2c:1b:30:3f:63:14:6c:9e:8f:68:2a:51:a8:1c:
bc:93:45:8d:00:d3:a9:cb:7f:f4:a8:57:2e:05:7c:75:c4:42:
93:65:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:02 2025 by rpki-client