Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33AF27A8A82111F0843FE9E5DAE4EC9C.roa
File: 33AF27A8A82111F0843FE9E5DAE4EC9C.roa (raw, json)
Hash identifier: FzIsNBdNGe25M0FD41RzAcPGIZgvlYwPlXc4L8/JXyI=
Subject key identifier: 9B:47:99:18:52:79:58:03:5A:B0:72:80:6A:3A:B8:1D:21:57:FA:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A371
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33AF27A8A82111F0843FE9E5DAE4EC9C.roa
Signing time: Mon 13 Oct 2025 10:41:41 +0000
ROA not before: Mon 13 Oct 2025 10:41:35 +0000
ROA not after: Wed 22 Oct 2025 10:41:35 +0000
asID: 138959
IP address blocks: 154.91.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107377 (0x1a371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 13 10:41:35 2025 GMT
Not After : Oct 22 10:41:35 2025 GMT
Subject: CN=68ecd765-734c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:c6:f3:af:05:6a:84:b7:cd:28:46:26:a2:
f6:4c:cf:fd:a9:32:03:2e:74:08:c5:e9:e2:2a:fe:
af:36:e8:9f:d0:d8:f5:0d:cc:82:fb:a6:91:c4:97:
40:4b:a0:c1:e6:7b:a8:66:9c:bc:f3:6d:81:a0:ca:
16:9c:b7:3a:5e:d0:6b:a3:cb:ef:48:c6:21:30:83:
96:43:f4:a7:b7:e9:e9:2a:5b:30:81:e7:b0:a1:ae:
50:22:83:32:b1:32:b6:15:28:07:75:8e:8a:e8:0c:
20:6b:e0:1b:5d:f0:52:40:04:ca:9e:9c:6e:1c:d2:
d3:35:7f:6f:74:30:db:28:0d:44:84:b4:08:b9:9d:
e7:4b:21:69:93:dc:a6:1d:5a:19:8d:1b:fa:5f:82:
a9:3f:3c:42:9c:ed:e7:19:49:86:55:be:fb:aa:9b:
45:7c:44:74:7b:28:2f:bc:e8:0c:5e:f6:75:52:9a:
6b:ac:b7:0f:b0:34:c3:e7:f2:2a:b7:37:22:ab:90:
ba:33:0e:f8:b1:e5:fe:9c:a0:64:7b:30:f9:f1:47:
9e:b9:f9:89:c7:1e:5c:7c:b2:4f:0b:5d:b0:99:9c:
96:8d:1a:1c:01:a0:fe:a7:ad:a0:8c:08:88:c4:22:
99:ad:38:87:29:04:d6:7a:3a:8d:26:7e:16:4a:d4:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:47:99:18:52:79:58:03:5A:B0:72:80:6A:3A:B8:1D:21:57:FA:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33AF27A8A82111F0843FE9E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.1.0/24
Signature Algorithm: sha256WithRSAEncryption
75:87:2a:f0:4d:af:00:e3:4c:76:43:33:f9:ce:7a:b6:ba:01:
f8:fa:d8:d1:fa:59:60:87:af:bd:19:0c:88:9e:db:ec:bf:12:
f2:d0:e4:b8:41:1f:08:59:d2:2b:56:f0:7c:17:89:d0:64:73:
8a:c7:ff:cb:f6:0d:9d:1f:2e:9f:9d:af:1e:e6:81:9c:72:8b:
21:8f:90:1a:53:36:00:83:d7:bc:59:df:f7:bb:d7:f2:17:c9:
b6:b3:04:17:1a:97:8c:f3:24:36:96:25:c7:40:6d:b4:81:9b:
45:59:9c:3c:e0:dc:1f:da:47:41:a4:8a:09:a7:35:ee:2c:6d:
5f:28:78:53:91:30:b4:fa:bc:83:bb:e7:67:29:fe:ca:96:c5:
33:2b:ab:bb:b8:85:db:56:ec:48:cc:c5:66:74:81:c8:5c:9b:
c2:dc:8b:71:a1:49:0b:1c:39:03:3e:ee:5b:b2:43:a1:f4:32:
b8:7f:66:34:2b:4e:fd:61:02:e1:7b:2f:cb:a7:4a:fc:69:1c:
89:e5:6e:44:a6:fe:e4:71:a4:3d:ef:7b:e9:c6:8b:89:d8:22:
6b:85:fd:83:a5:46:49:ae:7c:14:02:78:25:e3:86:a6:cd:ab:
e6:09:4b:e7:c2:70:f1:be:70:f5:2a:71:0d:d2:e4:38:5c:1b:
c7:10:f2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:03 2025 by rpki-client