Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25580C06BAF011F09B2F87DDDAE4EC9C.roa
File: 25580C06BAF011F09B2F87DDDAE4EC9C.roa (raw, json)
Hash identifier: rm1dI9jlaLf/5ZY0S7WABm5QKUnDOACA5HbW9trPilk=
Subject key identifier: 1D:82:C1:EE:13:E5:3E:AF:D8:41:C7:4A:69:02:C4:AD:32:F4:3B:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A7A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25580C06BAF011F09B2F87DDDAE4EC9C.roa
Signing time: Thu 06 Nov 2025 09:08:23 +0000
ROA not before: Thu 06 Nov 2025 09:08:18 +0000
ROA not after: Thu 20 Nov 2025 09:08:18 +0000
asID: 213736
IP address blocks: 154.92.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 13 Nov 2025 11:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108450 (0x1a7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 09:08:18 2025 GMT
Not After : Nov 20 09:08:18 2025 GMT
Subject: CN=690c6587-eb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:85:9c:c4:15:1b:47:61:07:22:31:aa:8d:
2f:bf:e0:aa:41:41:1d:a7:97:20:c5:a2:38:5c:11:
ee:da:a6:36:fa:5b:30:70:d5:a4:b8:ad:ab:a8:11:
8c:84:b8:c0:ee:72:8b:9e:83:ca:2b:40:ad:0b:97:
6b:76:b1:65:55:c1:fa:c7:0b:ad:96:bc:83:4e:5f:
64:e7:62:43:0f:a8:20:d5:b2:c1:eb:93:20:9d:4e:
07:74:c6:c8:9f:45:6a:ba:ab:3f:e4:23:4c:d1:1c:
83:f0:6a:61:61:5b:64:4b:04:f9:6f:cd:c3:c7:e9:
30:a7:de:25:13:86:03:cb:ac:e4:e3:e8:c4:fe:27:
41:92:3b:1f:ae:37:60:0e:08:80:85:ab:45:a4:d8:
e9:4f:67:a0:ea:9b:8b:f6:76:a4:5d:f5:98:15:6e:
1f:69:97:62:71:97:03:db:04:19:70:1d:3f:76:de:
d7:0a:cf:ee:a7:71:8d:87:95:83:ae:23:ee:9d:98:
fc:ba:a7:81:ce:3b:75:68:15:94:28:a8:3a:ab:66:
14:e9:cc:39:2b:be:ce:48:b4:2a:c3:f0:99:40:8a:
49:43:95:b1:1d:3b:45:0c:84:fe:7d:90:1a:de:b4:
ad:fa:a6:18:17:9d:85:12:4e:b9:30:2d:61:b8:4d:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:82:C1:EE:13:E5:3E:AF:D8:41:C7:4A:69:02:C4:AD:32:F4:3B:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25580C06BAF011F09B2F87DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.31.0/24
Signature Algorithm: sha256WithRSAEncryption
09:83:f7:c6:ff:1d:75:31:45:3b:4f:be:b0:96:f3:d6:a5:96:
5a:77:80:f9:23:20:94:28:ba:bf:e9:02:3f:46:1b:0a:ac:5e:
2c:96:76:2b:d2:27:19:b4:25:b7:7e:a4:45:08:26:ce:68:f9:
bf:a0:d6:03:c0:35:2e:84:8f:a8:da:0f:ad:35:6a:59:35:de:
e7:fd:b9:39:11:34:2a:2a:a2:1c:0d:2b:18:7b:cb:7b:11:d8:
1e:c7:83:e6:5b:ae:b8:04:b7:7d:bf:86:b5:eb:31:23:cb:a3:
29:25:e3:ec:01:63:01:4e:02:4d:e2:ba:5d:84:1f:79:f8:16:
b9:59:27:87:fa:e2:db:53:cc:62:fd:e4:6e:60:fb:20:e9:82:
af:7d:7b:45:5c:75:2e:df:4c:8b:32:d7:a9:6a:31:99:2e:43:
3e:b5:fe:dd:2f:87:84:6d:95:17:db:63:0e:3f:24:4c:3a:de:
aa:9f:b5:d9:fc:e7:6f:c9:1d:9f:82:c9:9d:01:e5:e8:ed:9d:
89:bc:85:c1:76:21:e8:1a:be:f5:e6:7b:18:64:9a:ae:e1:75:
2b:c5:09:ba:96:c0:50:85:f6:b4:60:89:f5:57:73:ef:7e:03:
3f:cc:a4:7b:cc:c3:31:7b:d2:5e:10:20:a1:bd:40:b7:9c:97:
e2:e7:7c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:11:11 2025 by rpki-client