Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2607BC8E921211F0A8346D7EDAE4EC9C.roa
File: 2607BC8E921211F0A8346D7EDAE4EC9C.roa (raw, json)
Hash identifier: zU5HSkVZZJ4z6JXOJrq8R/pw+8Xz8wGvlKmqFUg2tnA=
Subject key identifier: 5E:49:83:44:02:73:7E:B3:14:5E:9A:71:60:0D:93:7F:1C:32:24:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2607BC8E921211F0A8346D7EDAE4EC9C.roa
Signing time: Mon 15 Sep 2025 08:58:30 +0000
ROA not before: Mon 15 Sep 2025 08:58:24 +0000
ROA not after: Sat 25 Oct 2025 08:58:24 +0000
asID: 61112
IP address blocks: 154.85.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106416 (0x19fb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 08:58:24 2025 GMT
Not After : Oct 25 08:58:24 2025 GMT
Subject: CN=68c7d536-60b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:06:74:4d:30:67:a0:4a:44:14:4e:53:20:
71:58:10:aa:9d:d3:d0:88:ac:9d:24:1a:fa:9e:91:
c8:37:6d:2c:5d:b0:b5:6a:2f:47:85:0c:af:fe:6c:
d1:81:8f:23:dd:72:39:09:e3:2b:50:b9:59:b7:67:
0e:4f:57:b9:5b:82:51:d6:14:b2:d3:6d:8a:c0:ca:
cf:92:9b:b1:7c:06:8b:32:10:b9:ee:0a:51:96:b8:
f8:c0:95:bd:5d:8d:f9:e7:46:9c:7f:e9:4b:ae:01:
00:b7:5c:64:b7:06:85:d0:f7:2e:83:d4:1c:47:b5:
a9:e1:5a:43:2a:f5:dd:bd:ca:66:ef:46:14:d6:7b:
55:e2:a7:25:2c:b2:b9:e0:69:22:ce:9b:32:09:5d:
a7:1d:8f:68:69:75:db:cf:02:6a:6a:fc:fe:83:a7:
22:b4:46:dc:6f:d1:75:5a:9c:de:ee:31:57:1a:ab:
ba:53:21:1d:9e:26:69:22:76:c5:1a:54:7d:9e:fd:
d6:b6:b9:52:c7:10:29:fa:cd:17:33:22:5f:16:95:
f1:f1:33:e2:53:88:da:1c:92:25:f6:84:fc:a5:d2:
c8:39:3c:2c:3f:0e:ed:d6:29:29:58:cc:f2:44:d0:
de:6c:d8:fb:24:73:bd:c9:f9:62:e6:39:dd:6a:ab:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:49:83:44:02:73:7E:B3:14:5E:9A:71:60:0D:93:7F:1C:32:24:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2607BC8E921211F0A8346D7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.18.0/23
Signature Algorithm: sha256WithRSAEncryption
87:d6:05:de:eb:cc:fb:3b:ab:27:55:e1:83:46:67:19:72:71:
f3:73:8f:d6:34:6e:53:d5:df:ce:26:c5:8b:23:78:0d:d8:75:
11:5a:a7:98:65:07:81:67:91:01:83:05:dd:5f:5e:cc:8e:f9:
8a:3c:b2:2b:11:2a:de:a1:0e:e5:95:c6:d2:48:6e:44:62:df:
e3:fe:a2:6d:16:de:b3:86:6a:e8:d4:da:8b:12:1f:1d:58:02:
78:18:6a:11:89:0b:ec:00:3b:d5:a3:b4:60:42:2c:4a:61:a8:
ca:40:c8:0c:63:71:c9:30:07:73:06:e0:d7:72:82:59:4d:6c:
32:de:f9:81:3c:e0:05:de:16:5a:a8:8e:72:7f:0f:fb:dc:e9:
72:f5:f3:1b:d4:89:69:aa:f9:5e:24:21:ff:1c:93:a6:87:3f:
b8:cf:98:e2:0c:83:d2:49:ea:5a:e9:f7:72:73:cf:e9:2a:a5:
3b:e2:6e:47:2a:39:5e:6a:39:27:6b:af:a8:33:6b:ea:a5:35:
ee:96:8d:d6:f1:b3:fb:36:83:bd:f3:d1:f9:f1:64:4b:78:e4:
43:8b:50:22:06:32:99:d1:55:d1:a6:e9:16:f7:36:19:fc:07:
c5:70:3f:a0:3c:86:07:75:31:ff:d5:14:79:86:d1:94:af:28:
04:a8:1a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:01 2025 by rpki-client