Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39AEE69AA4EB11F08A45E69CDAE4EC9C.roa
File: 39AEE69AA4EB11F08A45E69CDAE4EC9C.roa (raw, json)
Hash identifier: HA9EOLjG/MJeAxa8dq/KjQ61FeAZ+khvSiC5hnhvTog=
Subject key identifier: 68:D2:74:04:99:1D:E3:AD:DF:B8:FB:F0:3D:74:3C:EF:61:76:4F:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39AEE69AA4EB11F08A45E69CDAE4EC9C.roa
Signing time: Thu 09 Oct 2025 08:37:44 +0000
ROA not before: Thu 09 Oct 2025 08:37:40 +0000
ROA not after: Mon 17 Nov 2025 08:37:40 +0000
asID: 153671
IP address blocks: 154.196.170.0/23 maxlen: 24
154.196.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107256 (0x1a2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 08:37:40 2025 GMT
Not After : Nov 17 08:37:40 2025 GMT
Subject: CN=68e77458-cfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:ac:93:ba:a0:80:cc:0d:54:c8:b2:7c:cb:
c1:46:91:ef:7a:66:b9:8f:15:31:35:5a:6c:ca:e4:
79:ee:d4:7c:51:74:cd:81:ec:22:66:e8:5b:ce:5f:
a9:27:78:c6:ec:47:b0:e0:50:f0:05:d8:49:76:7e:
c7:83:29:14:ba:91:ae:ae:61:28:a2:20:eb:a1:4c:
fb:4c:57:e1:c1:cc:86:b8:43:ac:1a:11:b9:3a:76:
a2:b1:dc:94:c5:9b:8b:df:ef:b2:35:61:3f:f7:46:
a8:b9:b1:ea:fb:cd:83:d8:73:ea:23:ce:d6:5b:15:
61:bb:c3:d7:84:c4:97:4b:9a:4a:1f:64:33:85:1e:
d6:8d:76:22:58:a7:a3:ca:49:ba:3c:53:c3:9a:dc:
6a:6b:6c:e2:dd:55:24:d3:7c:d0:57:26:b2:7b:1e:
c9:8d:6e:a8:bc:83:18:9c:40:97:b7:56:70:9c:47:
0c:f7:24:dc:41:05:1d:91:0a:22:3e:78:b3:d5:16:
d3:ae:22:36:4a:df:93:76:30:05:ab:88:1e:42:f4:
f3:15:e2:fe:ce:f2:7c:95:8a:c2:46:ca:b6:6a:3a:
6d:12:06:ed:15:22:b9:69:99:5c:d0:28:a4:15:8f:
83:7e:3b:aa:77:7b:66:3e:21:17:55:8b:14:cb:a5:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D2:74:04:99:1D:E3:AD:DF:B8:FB:F0:3D:74:3C:EF:61:76:4F:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39AEE69AA4EB11F08A45E69CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.170.0/23
154.196.248.0/22
Signature Algorithm: sha256WithRSAEncryption
87:82:a8:d0:45:1d:3d:aa:5b:df:6e:ef:7d:ae:0c:61:c3:c9:
ff:db:53:15:6c:00:d7:88:60:fe:6f:ee:3d:4f:bd:59:dd:a8:
bc:18:74:c0:37:72:b9:36:a2:83:14:28:06:f9:09:fe:3d:1e:
1d:82:e0:dc:d9:db:ac:1d:4e:51:fd:85:c7:bc:e8:9c:6b:b2:
8d:58:8c:67:77:ff:f6:0f:87:5e:26:d0:4c:96:e0:1f:d3:76:
f1:0b:b4:4f:de:4f:f2:53:94:1f:ef:69:02:8c:15:cf:2d:b4:
25:cb:37:91:85:d9:cb:4b:8c:ab:f2:d2:e0:1e:d3:21:81:ba:
ed:24:fb:4d:f8:be:c2:e5:31:40:dd:0e:d4:44:15:5a:d4:5f:
bd:dd:a5:7a:48:6b:63:9c:99:46:1f:6c:5c:0e:32:3d:a2:1c:
4a:ef:a1:b5:70:d5:71:1a:02:a2:71:e7:98:5f:27:a6:a7:b6:
b8:7e:ff:7c:79:d0:db:d4:31:4b:b4:95:83:6f:a6:81:7f:b3:
2b:e3:d9:93:e3:43:d2:ce:c5:31:e4:2b:04:db:1f:5a:c5:1d:
52:50:5e:55:7d:30:cd:ab:8b:07:7e:d7:03:2c:88:ed:9b:77:
f0:6e:e5:4b:c3:45:18:23:5b:83:34:60:df:53:a6:21:d3:f1:
1e:52:30:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:46 2025 by rpki-client