Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D89E8892D011F09ADA93CDDAE4EC9C.roa
File: 50D89E8892D011F09ADA93CDDAE4EC9C.roa (raw, json)
Hash identifier: 6JdeIdZ4BSurqavk/yki4oVJVMO3c8NMT2LOCxXLADc=
Subject key identifier: 8C:D5:AE:5C:CB:12:03:24:8B:E6:52:48:01:9E:B8:FF:49:34:C5:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D89E8892D011F09ADA93CDDAE4EC9C.roa
Signing time: Tue 16 Sep 2025 07:39:46 +0000
ROA not before: Tue 16 Sep 2025 07:39:41 +0000
ROA not after: Sat 25 Oct 2025 07:39:41 +0000
asID: 14315
IP address blocks: 154.82.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106454 (0x19fd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 16 07:39:41 2025 GMT
Not After : Oct 25 07:39:41 2025 GMT
Subject: CN=68c91442-de4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:03:28:fa:a2:8a:5c:b1:07:a3:f6:cc:44:
fc:33:e9:35:cc:d2:6e:10:13:a0:18:4c:ad:b2:a1:
da:38:09:3c:2b:68:a0:24:f8:48:b0:0e:6c:10:a9:
18:9c:c7:57:40:15:50:3f:4a:79:f8:15:ce:a8:e9:
96:b9:fb:70:e4:7b:cf:26:67:e5:ae:1a:5c:49:e7:
40:b9:d7:52:90:44:bd:8b:25:0d:60:34:a3:96:16:
6e:c0:f4:e4:63:f2:24:33:9b:dd:dd:04:0a:a0:3a:
55:bf:ef:f2:32:d6:75:07:a0:20:d8:37:cd:81:3e:
17:6a:6c:6f:23:3b:51:32:79:42:66:b9:72:00:cc:
c8:af:ef:2f:4e:e5:42:cd:67:0d:bf:d7:b0:a4:70:
4e:ee:9d:df:25:a8:ef:10:9c:9b:52:19:26:c0:e0:
0a:78:ac:dd:fc:a6:f7:7d:46:15:49:14:5d:37:db:
b8:b3:60:a0:fc:c3:11:9a:40:eb:f1:8e:de:73:25:
a3:fd:eb:5b:6d:08:eb:12:d9:24:55:8a:34:69:d6:
70:f6:77:50:25:28:38:84:6b:81:21:50:f4:1a:cb:
b1:4d:91:0d:07:32:a8:44:35:b8:f2:43:9c:2e:58:
06:6d:f9:49:48:b8:5f:17:d5:7c:9a:2c:97:0e:87:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D5:AE:5C:CB:12:03:24:8B:E6:52:48:01:9E:B8:FF:49:34:C5:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D89E8892D011F09ADA93CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d1:63:11:7a:b4:71:dd:28:f7:40:86:36:47:01:2f:d1:25:
c7:c6:bc:35:d4:a1:83:64:24:b8:3f:d9:91:f8:a4:45:54:b4:
58:c2:5f:30:ec:51:3f:b4:63:71:1a:ba:9c:84:98:a8:1e:50:
ac:f6:f6:50:80:89:53:e3:f6:12:e5:f3:cd:1b:1c:c0:e5:4f:
f1:90:4f:02:6b:21:9d:32:0f:ab:ad:60:1e:80:53:2f:d8:3b:
2c:d4:8a:67:72:ec:2a:36:f5:ba:be:b3:5c:78:60:22:5a:de:
79:50:bf:20:a7:44:70:ff:32:e5:48:ad:23:4b:ad:38:d3:22:
45:01:f3:ef:34:a5:cf:92:f4:ff:f1:00:d4:b0:49:68:fe:8c:
a8:9c:90:b0:34:03:6b:2b:c5:82:45:b1:f9:da:e4:b2:5e:c6:
5c:cc:d8:df:30:3d:a0:60:80:86:29:24:d4:26:5a:8f:7d:f2:
01:0c:0e:53:b7:c2:9d:5c:2f:a9:08:96:ab:9e:99:ad:a4:82:
a7:b3:46:68:25:7c:86:60:b9:89:c0:ee:f5:a3:e7:b3:c9:84:
02:5b:c8:83:b8:be:70:62:35:c3:c7:a9:2c:25:10:82:50:23:
20:cc:11:05:6d:ec:d0:89:c6:c6:e3:c9:6b:13:05:f2:e9:4a:
19:b7:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:51 2025 by rpki-client