Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48457D908CA911F0A96B36BCDAE4EC9C.roa
File: 48457D908CA911F0A96B36BCDAE4EC9C.roa (raw, json)
Hash identifier: bPLuBi92pOEDuWVo3B4xDGTCV613Okb4+Ggk71QDMPs=
Subject key identifier: E1:F5:2B:F3:F3:8F:BA:04:09:C0:90:F1:17:F9:51:36:2F:D2:9C:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019ECB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48457D908CA911F0A96B36BCDAE4EC9C.roa
Signing time: Mon 08 Sep 2025 11:45:14 +0000
ROA not before: Mon 08 Sep 2025 11:45:10 +0000
ROA not after: Mon 27 Oct 2025 11:45:10 +0000
asID: 401701
IP address blocks: 154.219.96.0/19 maxlen: 24
154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106187 (0x19ecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 11:45:10 2025 GMT
Not After : Oct 27 11:45:10 2025 GMT
Subject: CN=68bec1ca-c278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1a:11:bd:3b:74:a0:28:30:e5:2c:c1:2a:39:
53:9d:2b:67:74:95:de:71:47:62:60:b5:0a:d0:49:
24:c4:28:31:ab:e3:b1:04:0b:80:c7:88:e9:8c:13:
8c:e8:8a:39:fd:a5:18:15:da:dc:5d:60:45:29:24:
23:6a:86:cd:dd:d4:00:85:8c:27:dc:86:19:20:78:
2c:27:ef:52:9a:d5:5f:94:6a:68:f6:eb:d0:02:18:
78:ba:dc:58:f8:8e:76:a0:f1:be:53:b5:60:84:d3:
85:92:83:1f:24:aa:d3:c1:f3:2f:c7:a2:3a:d6:33:
29:bd:34:25:ce:1e:f7:4b:2c:c8:93:de:de:9b:74:
c3:c5:1a:ce:fe:87:84:a1:41:10:dc:a6:93:f8:f0:
79:93:51:48:b6:8a:ea:38:6e:4c:bc:60:d4:ed:e4:
a5:d1:32:a7:42:04:0e:22:b0:99:8f:1d:70:71:f8:
78:c8:0b:c6:25:88:e1:c4:04:1d:55:be:66:17:f3:
a6:0c:10:cb:9e:11:c3:09:d3:6a:aa:58:52:8f:97:
59:67:44:3f:27:44:38:c9:b2:61:ff:9c:a0:b8:24:
67:f7:f3:53:f4:33:20:da:44:63:2b:31:10:d8:9d:
4a:ae:80:ff:70:c1:4b:4d:a2:a4:48:df:c7:c3:9e:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F5:2B:F3:F3:8F:BA:04:09:C0:90:F1:17:F9:51:36:2F:D2:9C:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48457D908CA911F0A96B36BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:ce:c3:8d:87:ec:67:be:a7:cd:3a:c4:99:9c:6b:94:a5:2d:
bd:e3:88:d2:71:c9:45:bf:af:74:91:8e:2b:25:ad:76:80:eb:
09:c7:7d:21:1d:08:34:79:17:c9:9c:91:95:97:a3:74:c4:88:
78:76:30:da:52:dd:e4:0e:41:43:63:1e:49:f0:68:21:ba:f7:
45:24:4e:a3:e4:3f:2b:6f:c6:bb:7c:72:f3:e3:70:3c:34:27:
30:e6:52:46:0f:0d:c7:f0:41:12:60:27:a8:b1:e2:9c:98:b2:
f7:e9:57:df:91:f3:ee:3b:b4:91:df:75:05:ae:27:48:ea:46:
cc:bb:0d:25:d9:33:8b:64:4a:ba:39:1c:a1:b4:c5:66:67:21:
9b:bd:f5:f6:b6:16:fd:b3:13:f5:47:06:bf:ed:93:46:9d:27:
17:52:89:e0:d1:13:c7:d6:ae:75:45:cd:3a:b9:40:58:47:ed:
8b:d7:0f:e9:c2:19:1e:a3:8a:f4:d0:c6:66:f9:3b:78:46:ae:
a3:b8:33:c9:fb:46:f8:04:53:4c:14:2a:f0:9c:f7:2a:0c:89:
a5:2e:ce:0d:09:f8:47:30:7e:40:19:87:70:81:a6:60:60:1d:
5a:8c:31:c6:8b:a7:5f:72:75:02:72:8a:2c:d8:f5:77:48:38:
1a:30:d1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:18 2025 by rpki-client