Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24854E5E896011F08E2B2BE9DAE4EC9C.roa
File: 24854E5E896011F08E2B2BE9DAE4EC9C.roa (raw, json)
Hash identifier: GAMOG1zm+BlbBhT1SVupiN9uO9+Oa4pnft1XOD8U7dk=
Subject key identifier: B4:38:3F:AD:33:39:8A:E8:7B:DD:58:AF:B4:2B:A9:63:03:A1:31:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D69
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24854E5E896011F08E2B2BE9DAE4EC9C.roa
Signing time: Thu 04 Sep 2025 07:24:07 +0000
ROA not before: Thu 04 Sep 2025 07:24:03 +0000
ROA not after: Sun 08 Mar 2026 07:24:03 +0000
asID: 400999
IP address blocks: 154.196.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105833 (0x19d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 07:24:03 2025 GMT
Not After : Mar 8 07:24:03 2026 GMT
Subject: CN=68b93e97-6f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:2c:30:31:99:51:2e:c5:8d:90:1d:c5:76:
ed:84:10:70:ac:3d:7c:43:3e:b0:84:af:a1:23:95:
10:67:d7:2c:a3:30:80:d4:ef:95:d0:03:59:e3:8e:
92:50:95:59:6b:ec:b6:8e:34:3e:51:22:67:fa:20:
65:fa:49:4f:7e:ec:13:83:b7:c9:60:fc:26:e0:e7:
b6:2e:38:38:e4:0a:6b:22:88:97:d4:46:60:b7:37:
03:98:e1:65:f7:42:04:40:3b:c5:25:c8:8c:27:c2:
ef:bd:57:64:df:3c:a5:7a:de:31:38:7c:be:0f:d6:
3a:e9:f9:24:91:a7:ff:db:b4:54:d6:6f:34:e8:e3:
69:cb:d1:5f:9e:37:63:9a:37:92:d4:8b:bb:86:67:
28:59:8c:2d:8a:6d:9b:5f:b8:70:1d:50:de:94:d6:
98:3b:84:8c:58:2f:df:f1:8f:fd:85:55:85:85:c4:
e1:cb:34:ba:8d:8d:77:5e:59:28:d3:fb:4a:c7:47:
65:32:4e:ee:7d:ee:56:ff:1d:a0:b8:9b:c7:9d:f6:
b6:a5:d2:93:a7:12:2d:7d:05:15:ba:78:14:8c:f2:
03:38:bc:c7:f7:c8:9f:e5:e9:02:ae:34:b1:22:60:
d0:8c:19:f6:6b:38:a7:5f:eb:9d:06:8e:9a:7c:bd:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:38:3F:AD:33:39:8A:E8:7B:DD:58:AF:B4:2B:A9:63:03:A1:31:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24854E5E896011F08E2B2BE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.15.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:cb:99:03:df:cc:37:44:56:44:28:7f:d5:5b:e4:3d:6c:9f:
f0:38:4f:3f:19:2c:e3:0c:11:62:05:d3:8f:d5:b7:35:84:c8:
2b:68:23:e4:ad:e4:4f:c1:81:39:ba:ef:f4:22:27:8f:4c:80:
57:4c:18:09:e3:20:74:1b:1f:03:03:3c:b3:28:95:90:1f:a9:
df:f7:fe:d7:4b:f1:97:2f:a7:6d:de:db:69:7a:c9:b2:cb:2a:
96:96:ae:5c:67:49:48:1b:6b:1a:dd:bc:1a:0a:91:69:f0:ec:
39:73:5b:be:72:d1:18:86:35:5a:f0:a3:7e:06:cb:c4:d8:e4:
b9:7a:b5:0f:73:f4:c0:c4:b6:48:a8:c4:73:3f:7b:e1:35:17:
f4:0e:e5:a1:a4:2b:79:7c:df:3d:61:4a:56:85:31:33:3c:96:
fd:91:e0:53:f2:59:46:51:ed:25:bd:bd:d8:20:6e:2c:4a:53:
e2:40:f2:52:2b:c3:0d:9a:06:2d:cf:02:3d:b6:d9:ff:23:86:
08:44:97:6c:6c:c2:c3:c0:b1:31:f7:d4:1b:1c:e9:d7:b1:9a:
8a:de:80:64:cb:aa:de:6d:62:ae:44:db:b3:bd:40:15:a9:bb:
27:86:51:cd:19:7e:e0:93:e3:5d:9f:4e:dc:e1:0f:93:5f:e3:
56:ab:af:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:05 2025 by rpki-client