Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45F2795CA44711F0A179AEEFDAE4EC9C.roa
File: 45F2795CA44711F0A179AEEFDAE4EC9C.roa (raw, json)
Hash identifier: xolyiZT69GqJgi7+/aLmxZwm1qaXBpLjg4URyCf2WPk=
Subject key identifier: CD:54:09:69:2C:D8:BA:B9:CA:22:BB:4E:45:8C:D0:1B:F4:B3:D6:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45F2795CA44711F0A179AEEFDAE4EC9C.roa
Signing time: Wed 08 Oct 2025 13:04:07 +0000
ROA not before: Wed 08 Oct 2025 13:04:02 +0000
ROA not after: Thu 27 Nov 2025 13:04:02 +0000
asID: 142032
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107221 (0x1a2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 13:04:02 2025 GMT
Not After : Nov 27 13:04:02 2025 GMT
Subject: CN=68e66147-cade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:72:aa:01:11:dc:9c:f8:64:5a:82:9e:cb:
be:16:76:ec:26:2a:66:04:ef:04:8e:8d:e2:25:52:
21:0a:8c:03:80:1d:33:1b:01:fd:91:d9:90:65:90:
5a:86:22:cf:3a:a9:93:3c:4f:ca:d5:34:28:b1:2f:
b1:25:d6:85:47:fc:1e:a7:52:de:ea:1e:c8:a0:ac:
e3:fd:f8:03:42:d6:0c:87:c5:35:92:3a:2d:b0:52:
c3:a9:54:32:f7:2e:0f:3d:02:c7:8f:dd:0d:7b:4a:
03:2d:a0:ed:05:4c:49:a0:dd:27:f4:26:d4:f0:b2:
71:ee:c6:2f:0b:86:70:28:34:a7:53:ec:31:84:5a:
ab:d7:ef:48:0a:35:d4:f4:18:f3:d8:59:c6:83:76:
1a:38:6d:c5:00:16:7c:85:d0:d9:52:b4:2a:0f:d5:
53:81:2f:1b:84:83:02:9b:1c:31:c8:63:05:cd:56:
b7:07:48:2e:f3:31:77:82:3b:09:3c:5b:45:94:a4:
3c:45:68:d4:e2:c1:18:ea:3d:44:54:92:0a:94:a8:
81:2f:02:87:cd:7b:9b:a3:a8:12:60:d2:d5:ce:8b:
e2:ae:79:74:c0:2b:50:18:41:22:2c:26:61:b1:69:
a0:6a:86:9b:2b:47:11:eb:78:14:a9:0a:35:32:69:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:54:09:69:2C:D8:BA:B9:CA:22:BB:4E:45:8C:D0:1B:F4:B3:D6:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45F2795CA44711F0A179AEEFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:4b:59:82:66:83:0e:0d:ff:e7:50:27:17:63:d5:08:57:ca:
ce:9b:76:f2:11:22:96:23:d2:ab:cb:02:8b:6b:17:d1:91:b4:
15:a6:91:22:d7:31:7b:e3:06:5e:07:18:de:c2:7f:45:88:2e:
03:4a:94:7d:75:88:28:ab:db:d9:b3:54:c4:f6:19:f8:19:12:
7e:ff:e9:67:87:2b:22:ab:7b:27:fe:4b:47:57:6b:ac:25:42:
bc:e6:02:09:30:b3:dd:04:05:ed:bc:02:60:b4:a6:1e:54:c6:
81:93:ed:8a:07:17:69:4b:51:ac:c1:ae:d6:63:6d:81:6b:ca:
d3:8b:5b:f0:88:40:ca:74:64:2c:5a:c4:b2:5d:c0:e6:3a:10:
3b:c9:15:2e:d4:90:0b:6b:ae:aa:78:b4:60:7d:a0:73:d4:17:
d9:2b:cc:88:55:32:7e:bf:3c:c3:ca:25:b5:5c:68:11:2e:09:
46:78:7e:3c:09:5e:67:7f:e6:04:74:64:f2:9b:2f:35:f3:49:
e6:ff:14:3d:9f:2a:4a:3b:81:05:70:26:47:ef:06:91:f9:da:
ec:f7:63:f2:00:08:29:76:16:5c:ed:fc:5b:fd:7d:6c:7a:9c:
05:be:9a:e2:b9:8e:8f:6d:24:b9:3c:b0:21:f1:d0:df:e3:bf:
a5:5f:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:59 2025 by rpki-client