Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/319E0D98A81311F0BAEEFC8DDAE4EC9C.roa
File: 319E0D98A81311F0BAEEFC8DDAE4EC9C.roa (raw, json)
Hash identifier: KHfg+PNVdM0bhX7csWBjvu5QTi4TRNtRGAc8ZUrXfCI=
Subject key identifier: CB:0D:64:BD:DB:D0:53:7A:67:AD:F7:84:58:15:3F:B4:EE:18:B2:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A35C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/319E0D98A81311F0BAEEFC8DDAE4EC9C.roa
Signing time: Mon 13 Oct 2025 09:01:24 +0000
ROA not before: Mon 13 Oct 2025 09:01:19 +0000
ROA not after: Wed 19 Nov 2025 09:01:19 +0000
asID: 11404
IP address blocks: 154.194.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107356 (0x1a35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 13 09:01:19 2025 GMT
Not After : Nov 19 09:01:19 2025 GMT
Subject: CN=68ecbfe4-9cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:92:a9:8e:52:2c:01:d7:fa:c4:73:db:46:
32:f8:5b:72:6e:e1:e6:ee:01:f9:67:44:03:1d:28:
86:23:9b:61:28:cd:3e:03:55:5b:0e:60:a0:f2:f6:
8f:b1:98:38:d7:b2:59:aa:d3:d3:c2:ec:bd:5c:8b:
5c:22:11:df:b9:dc:d1:18:36:7b:ab:cb:44:1e:b5:
eb:38:f6:d1:54:a4:db:44:a6:0b:9f:f6:e9:6c:62:
08:8c:36:ab:87:2e:99:27:7d:a4:6e:9e:03:2e:26:
37:6c:57:fa:b1:c8:c6:db:ed:e6:a3:9d:4e:dc:e6:
76:58:0d:62:29:6e:16:9d:7d:b7:1f:05:0f:ea:43:
6d:62:8f:c4:ad:85:4a:79:3a:f5:1d:91:76:e9:8f:
43:fc:f8:83:aa:f8:0d:13:f4:f0:8b:6a:be:84:14:
69:57:15:a9:6d:02:14:ca:f6:af:20:69:be:09:1b:
5c:92:42:d2:09:06:ce:4e:b5:2f:20:91:fd:a3:28:
9d:34:2c:74:60:47:21:f2:c3:dd:d3:f8:87:22:8a:
f7:d4:f9:e4:25:55:10:5a:9f:ae:30:aa:f8:27:d8:
36:cb:52:ca:25:dd:5a:1b:55:bd:2e:c3:91:3a:5c:
3c:d4:b6:b7:c2:fc:98:33:c0:72:0b:8b:e4:ac:3b:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0D:64:BD:DB:D0:53:7A:67:AD:F7:84:58:15:3F:B4:EE:18:B2:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/319E0D98A81311F0BAEEFC8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.236.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:4c:4a:cc:f7:00:c3:f6:f7:45:a0:05:5a:de:31:6e:87:4e:
fc:70:29:12:c6:51:76:d9:dc:17:f7:81:4e:15:3f:57:8d:f0:
b9:09:63:18:ed:5f:ac:a0:65:5b:13:77:d0:f1:70:5b:1e:17:
67:72:82:79:fa:2b:8d:a5:79:b6:7d:4f:d4:4e:91:fd:d2:dd:
54:cc:6a:6d:cf:5a:fd:d5:48:92:b7:20:c9:26:00:dc:e9:01:
fa:2e:a8:a6:61:e7:81:5c:19:33:21:d0:f9:a8:b9:6c:f3:53:
99:d1:38:79:d7:a7:80:e0:51:fb:c6:e7:f3:63:4b:09:6d:a0:
a5:07:20:6f:30:ce:17:d2:7a:5f:e0:10:c8:b5:37:31:c2:37:
a6:e3:c9:d3:2f:b1:0c:9d:ca:c9:48:90:fd:58:08:27:63:70:
f5:21:57:e9:99:ef:78:22:f4:e2:d3:4d:33:f0:0c:73:8c:fb:
78:fa:16:f3:c0:77:69:e3:d7:a5:75:2b:02:19:0d:7d:8a:b2:
0b:e9:ac:8f:83:aa:64:32:d1:11:fe:bc:b7:ac:53:8b:2c:13:
11:41:b9:0b:17:ee:65:e3:bb:cb:8b:a7:38:cc:5e:09:7d:49:
d2:dc:71:f9:2b:11:4c:28:b4:c7:f4:ab:47:14:78:37:71:f2:
66:f2:5e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:49 2025 by rpki-client