Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/307B754AA9AD11F0BFF3FAD9DAE4EC9C.roa
File: 307B754AA9AD11F0BFF3FAD9DAE4EC9C.roa (raw, json)
Hash identifier: zvkqArccMx4AYfXyi+h9dyfsfctpJ+23Feg0ImIcyBA=
Subject key identifier: A9:E1:55:1E:EF:2D:58:E9:20:4A:A5:93:26:D7:8A:37:98:FF:3D:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A38D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/307B754AA9AD11F0BFF3FAD9DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 09:56:16 +0000
ROA not before: Wed 15 Oct 2025 09:56:11 +0000
ROA not after: Fri 24 Oct 2025 09:56:11 +0000
asID: 139880
IP address blocks: 154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107405 (0x1a38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 09:56:11 2025 GMT
Not After : Oct 24 09:56:11 2025 GMT
Subject: CN=68ef6fc0-719f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:31:33:16:d1:2d:02:88:62:22:dd:f3:18:
e0:40:b0:be:8a:96:af:b2:70:a7:3e:17:3a:4d:39:
1c:e8:9f:ec:47:e8:41:36:5b:d1:8a:7d:11:0c:56:
2d:d4:68:0d:24:2a:a9:c7:8c:01:e8:cd:2c:1d:bc:
15:cd:2c:2d:53:06:7b:fc:7b:1b:1e:78:2e:98:c5:
51:a6:06:e2:0a:49:78:1b:60:ce:6d:ca:96:d1:94:
8c:cd:b6:ac:ac:71:28:93:d5:bc:75:35:5d:c3:05:
f0:b9:fd:39:03:e1:f2:35:ad:22:b4:84:d9:f2:2b:
2e:5f:24:64:be:be:e9:53:9d:a0:33:35:51:7b:88:
e1:f0:32:4d:97:34:db:cb:45:8c:94:e2:4e:4e:cf:
4a:03:06:d8:ab:3f:e4:58:ec:2e:d9:5b:b5:04:f1:
f7:ab:d3:e6:f1:b7:46:be:fa:13:69:54:75:00:8c:
48:e9:44:ff:f8:91:49:dd:b9:96:bc:5f:38:68:32:
10:54:c0:cd:61:04:ba:fe:85:0b:82:c3:04:fa:1e:
92:ed:57:05:f8:74:0f:cd:aa:26:65:a9:11:93:0b:
64:00:1a:e1:b1:55:34:61:a9:74:59:5b:4c:14:da:
1d:01:82:6d:d3:6a:3b:75:c4:8d:76:15:0e:26:a8:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E1:55:1E:EF:2D:58:E9:20:4A:A5:93:26:D7:8A:37:98:FF:3D:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/307B754AA9AD11F0BFF3FAD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
10:af:27:76:c4:25:05:13:04:3d:91:b7:00:44:76:2e:70:bc:
87:f5:a8:a7:f4:6c:6b:dd:c9:c9:17:ce:9a:c3:0d:07:0c:03:
58:22:54:37:bb:88:18:04:11:8c:f2:96:8d:12:34:a0:97:72:
b7:98:97:55:96:a6:67:e6:77:8f:2e:f2:b4:13:c4:ad:9a:e3:
88:c8:d9:92:bb:d9:25:8b:89:3c:02:19:aa:d1:1e:76:76:ab:
63:21:f2:17:5e:47:56:b8:66:67:55:0e:13:4f:56:22:0f:9c:
8c:ec:14:8f:93:96:55:b8:4d:4e:36:9e:5c:47:ce:22:9a:1c:
1e:59:78:98:a3:9c:32:db:39:7e:fa:2f:6e:d3:87:3e:f7:dc:
37:c8:ec:9d:e4:c8:86:d6:85:13:73:f4:f4:bd:d1:cf:6a:d7:
aa:77:e5:93:99:d4:40:0b:ee:71:ef:75:7e:98:b7:49:34:a7:
0a:e4:e5:48:70:4b:e2:89:e8:d4:15:68:d2:fe:f2:72:da:b4:
12:b4:77:92:1b:80:73:91:a2:d6:86:f9:02:e9:aa:d1:51:08:
26:81:cd:ca:a6:66:8d:19:70:32:1e:44:d1:97:d8:cc:98:3a:
78:a2:0c:81:d9:46:f8:3f:09:6b:ca:53:d7:0a:37:1a:30:30:
5e:6f:3a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:10 2025 by rpki-client