Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C77B8B092A011F09437DC86DAE4EC9C.roa
File: 2C77B8B092A011F09437DC86DAE4EC9C.roa (raw, json)
Hash identifier: /6ZfQAPKInaLJ8tQFvXAW7n/xcQ6aw5dkW+FiQFDW+c=
Subject key identifier: 96:0E:ED:43:C8:2A:A0:81:B8:53:38:E2:4E:BE:3A:67:52:0A:0E:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C77B8B092A011F09437DC86DAE4EC9C.roa
Signing time: Tue 16 Sep 2025 01:55:09 +0000
ROA not before: Tue 16 Sep 2025 01:55:04 +0000
ROA not after: Mon 03 Nov 2025 01:55:04 +0000
asID: 150706
IP address blocks: 154.215.8.0/24 maxlen: 24
154.218.6.0/24 maxlen: 24
154.218.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106429 (0x19fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 16 01:55:04 2025 GMT
Not After : Nov 3 01:55:04 2025 GMT
Subject: CN=68c8c37d-ad84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:fb:ab:b7:8b:05:16:73:52:b8:31:f3:be:
3f:39:cc:94:7a:f3:7e:ec:43:a7:37:ae:17:df:e9:
6a:fb:5e:48:23:c6:4e:81:dd:50:41:d1:c7:a7:74:
2f:9e:7f:5d:af:ad:f0:8f:3e:a5:44:b7:32:5a:8c:
04:30:ac:db:2b:0f:16:09:bb:22:a6:e2:67:a9:cc:
60:bf:a6:d1:6e:a6:f3:59:72:26:1f:09:b3:b1:32:
e2:9e:e0:1e:00:4a:0d:00:c0:05:da:4c:af:69:a6:
46:60:58:6c:53:f0:75:fd:17:a6:5e:26:be:7d:4e:
be:82:1c:26:35:b2:15:bb:26:8a:fa:54:fc:6d:8a:
88:49:8a:b8:50:72:b8:9b:e7:95:83:c4:33:98:3e:
5b:56:aa:71:bf:eb:ea:3f:ba:f0:ac:1f:01:ff:d4:
57:ff:ee:74:8c:bd:e4:df:a8:35:58:49:ea:bc:2a:
4c:7b:ed:39:94:2c:e5:a1:18:5b:ad:c0:7a:25:af:
b4:7e:b7:58:7c:b0:82:60:34:94:53:57:b4:13:48:
f9:4b:65:3c:a6:7c:e8:1f:b4:5d:40:1b:17:7c:a5:
be:b2:be:f4:57:e4:f8:03:82:31:77:91:70:dc:02:
b9:59:92:55:35:70:58:f9:9a:62:6b:52:60:e4:dc:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0E:ED:43:C8:2A:A0:81:B8:53:38:E2:4E:BE:3A:67:52:0A:0E:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C77B8B092A011F09437DC86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.8.0/24
154.218.6.0/23
Signature Algorithm: sha256WithRSAEncryption
85:bd:c0:f1:00:a1:99:e7:91:22:af:09:45:c5:a3:e3:70:71:
f1:83:4f:fd:37:7f:af:12:69:a3:4b:9f:57:47:b3:7d:f4:51:
08:5d:f8:c5:61:63:d4:e0:89:03:26:2a:b1:c3:73:5c:21:f5:
1a:f5:25:ac:db:0f:12:c9:44:70:15:5b:75:39:86:55:9c:dc:
a6:80:e3:71:b7:a8:1b:a4:ff:db:e6:76:4b:e6:3b:9d:95:5b:
79:b3:76:67:f1:6e:83:54:a2:7e:af:d4:c4:83:f3:cf:2c:f4:
87:54:e1:44:5a:6c:16:23:46:d9:e1:79:0b:97:65:a0:19:57:
0e:8f:25:a5:2a:85:df:a3:f0:8a:14:df:22:9e:8b:31:c3:68:
db:52:8a:60:e6:f0:db:c2:f5:c4:05:ef:c9:72:f3:fe:3a:6c:
5c:cc:73:5e:fc:cc:a5:32:f1:88:23:43:fb:14:80:29:bc:c8:
bb:23:e2:fb:4e:e0:a2:fa:68:47:b1:27:3e:b9:c0:70:6a:af:
d3:9d:da:c0:5a:05:87:1a:25:34:5e:cd:c1:d8:6d:d7:70:4c:
c4:2f:79:49:6e:b4:f0:95:82:b8:6f:d1:1c:d5:0d:29:ae:b7:
4f:f6:b2:21:fc:e8:04:c7:1d:11:fa:ea:50:a2:dc:1b:7d:05:
b2:d6:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:59 2025 by rpki-client