Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B32EE62911211F0980B2E7DDAE4EC9C.roa
File: 4B32EE62911211F0980B2E7DDAE4EC9C.roa (raw, json)
Hash identifier: 9P3qceQepFfYBBtX4q+WO3eWq7OMdtS1zU17r/fQekE=
Subject key identifier: 22:A8:2F:E5:51:07:45:BA:43:79:7A:A8:A2:FE:F4:02:FE:71:0F:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B32EE62911211F0980B2E7DDAE4EC9C.roa
Signing time: Sun 14 Sep 2025 02:27:01 +0000
ROA not before: Sun 14 Sep 2025 02:26:55 +0000
ROA not after: Mon 16 Nov 2026 02:26:55 +0000
asID: 29684
IP address blocks: 154.91.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106398 (0x19f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 02:26:55 2025 GMT
Not After : Nov 16 02:26:55 2026 GMT
Subject: CN=68c627f5-7205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:6a:1e:52:cd:fe:1b:f8:eb:cd:c4:61:af:
f3:49:3b:aa:20:2f:61:2a:4b:13:83:d9:4e:00:89:
d4:82:4a:a8:75:23:9d:a3:d2:7b:52:d3:4a:00:f1:
3d:b6:3a:51:f1:5b:f5:43:2b:08:11:8e:56:c7:1b:
eb:2d:55:23:6b:ff:34:cd:5e:56:74:55:1a:97:cb:
fa:e9:ad:14:6b:73:6a:e2:f5:69:96:45:91:5c:c8:
96:b6:af:82:4a:f7:99:e6:7f:d0:07:95:18:d4:fa:
7c:77:3f:61:b8:ee:88:35:4d:cc:c6:a3:77:63:1e:
d1:75:3b:87:8d:8d:c8:65:a1:e2:d6:67:75:b0:5b:
98:cf:b5:30:2b:cc:3e:8e:35:93:58:c6:2b:20:6e:
bc:f8:99:a6:61:68:31:5d:88:20:7b:cb:31:1a:26:
b3:b9:68:a7:61:7e:50:66:fd:5c:51:34:96:37:ea:
db:6d:cd:09:fb:30:2b:ed:3e:35:7f:16:88:23:cc:
21:32:5f:60:2d:68:87:8f:4f:68:03:23:c4:ea:c3:
8c:0e:11:8e:89:b4:c9:b4:2e:36:d4:12:1c:b5:64:
45:ac:27:87:51:df:13:68:9f:9d:3a:af:6c:dd:f0:
2d:bd:65:1b:18:09:b2:ef:fe:35:6b:27:38:53:e4:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A8:2F:E5:51:07:45:BA:43:79:7A:A8:A2:FE:F4:02:FE:71:0F:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B32EE62911211F0980B2E7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.36.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7d:e4:d7:88:80:97:e0:2f:97:19:30:68:91:f5:7e:4f:24:
d3:63:29:dc:d3:9e:54:6c:3b:cc:68:e8:13:88:5d:50:98:f3:
0f:4c:79:a8:14:27:25:7b:61:3e:39:10:e3:6c:a3:eb:e6:26:
3e:c1:5d:b4:e2:6b:94:99:94:f1:34:1a:a2:f8:e1:c2:c3:22:
7c:67:4e:e3:d1:f7:fe:07:c3:a6:4b:e4:ca:60:39:e5:d8:c7:
89:0a:26:79:6e:2b:9f:01:b5:79:5f:3f:a0:4f:c3:8d:39:ad:
0c:6d:f1:83:12:49:74:39:f2:aa:57:13:bc:90:52:08:b1:ce:
93:3c:52:61:8a:14:c0:1d:a2:d2:c6:1c:e3:f0:43:6b:be:59:
b6:6c:37:9f:ec:e6:d1:c3:86:b3:f4:a1:d2:70:66:e7:cd:4c:
f4:26:af:a1:98:02:33:6e:4d:d8:c5:9a:57:0b:4d:4e:b4:97:
42:4d:a1:25:7d:4c:31:e4:86:43:ce:16:42:20:b8:33:5a:13:
d7:10:ac:6c:1f:2e:c6:20:ce:55:4b:43:97:3d:36:1a:f5:1c:
2e:9c:66:1b:86:91:e4:32:4b:91:24:7b:43:24:0e:50:d8:8d:
af:8c:b1:e0:9d:e4:7e:15:2f:cb:7f:8e:23:87:57:1e:4f:5c:
e9:b3:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:31 2025 by rpki-client