Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56FC85DC99F511F08ADA098DDAE4EC9C.roa
File: 56FC85DC99F511F08ADA098DDAE4EC9C.roa (raw, json)
Hash identifier: NBIun+g4Rq2K9RVofVDMhulss/SeiQ1umdw97xX3TZY=
Subject key identifier: 9B:8D:AA:D3:32:62:13:8F:5B:3C:3D:F4:BE:92:80:AF:4F:28:8D:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56FC85DC99F511F08ADA098DDAE4EC9C.roa
Signing time: Thu 25 Sep 2025 09:52:26 +0000
ROA not before: Thu 25 Sep 2025 09:52:21 +0000
ROA not after: Thu 04 Dec 2025 09:52:21 +0000
asID: 136907
IP address blocks: 154.93.100.0/23 maxlen: 24
154.93.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106737 (0x1a0f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:52:21 2025 GMT
Not After : Dec 4 09:52:21 2025 GMT
Subject: CN=68d510da-103c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:07:16:f6:6f:a6:1f:3f:03:80:47:b7:9a:
64:86:c1:3e:79:25:2c:a0:2a:d4:7e:9b:ba:09:d1:
30:61:5b:b8:60:b4:66:29:24:49:78:96:bc:9e:6e:
f3:87:6c:bd:1c:97:1d:71:f9:59:a8:dd:80:3a:80:
5d:5d:7e:20:71:8a:9a:75:4d:98:22:a5:49:a8:79:
4e:ff:02:2f:22:f0:07:6a:4d:42:c0:b3:53:a1:9e:
c0:9a:73:8b:73:87:24:e2:21:71:9b:64:13:8e:2b:
69:41:46:9e:c7:0a:fe:60:04:14:d2:df:05:86:f6:
72:84:f8:3c:f7:36:5f:04:c1:3d:c0:e3:01:af:04:
d0:31:25:57:ea:0a:2f:e0:b6:b8:23:6a:8a:dc:1f:
db:fb:bd:a1:bf:57:6b:e7:6c:6a:17:97:07:b6:c7:
3f:ab:7f:b0:8e:78:3a:bc:ca:67:de:dd:84:71:66:
fa:72:90:6a:22:ed:0b:66:0a:4c:4a:fb:e0:8f:33:
2c:ea:b1:d0:78:6d:da:3b:db:8d:8d:e4:1e:a2:a6:
04:d5:0f:f0:a0:c2:4d:8c:57:9b:3e:5b:12:2a:ba:
73:33:40:97:e9:59:dd:d0:ec:b2:cb:b5:42:9f:c2:
e0:e0:a2:49:b2:64:17:01:66:d7:64:a5:89:9a:2f:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8D:AA:D3:32:62:13:8F:5B:3C:3D:F4:BE:92:80:AF:4F:28:8D:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56FC85DC99F511F08ADA098DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.100.0/23
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
79:d9:8e:c8:42:de:3f:b8:57:a6:94:e6:e8:67:9e:6c:0b:82:
79:c0:d7:96:8a:99:34:3c:cc:31:04:45:89:6e:c9:ab:b4:b4:
c0:21:a6:58:4c:98:4c:25:2f:3f:66:f5:47:bf:a4:d1:5a:1e:
31:04:81:2c:83:d6:e3:9f:16:d4:3a:e6:8d:18:62:be:1b:a3:
da:35:fe:52:65:d4:8a:bb:58:30:4a:0d:a7:b2:e7:fd:f7:76:
fb:83:b1:37:8a:fb:84:47:c2:81:8c:2f:69:73:bc:da:98:aa:
40:bb:03:ad:12:6d:f4:c6:dd:b0:21:72:74:04:6b:29:bb:78:
7e:03:5a:f0:84:c0:b9:d5:c7:30:5a:4f:24:d9:84:a5:1c:24:
94:48:64:e5:98:ca:22:57:c4:b8:b0:1f:88:20:5a:e0:85:6c:
1e:3e:8e:72:bd:f8:e5:1e:e4:c5:8f:bc:2d:2f:cd:7e:8c:ea:
a2:63:d4:5e:a9:2b:7a:22:dd:d0:8b:ec:d0:1c:e6:29:7c:92:
b6:0f:0c:1e:b6:42:c7:1f:12:d1:1a:6b:d8:2d:bc:f5:89:c0:
c7:12:e6:90:61:bc:c5:ef:3e:5f:18:84:62:f8:ab:27:44:8a:
94:f7:18:c9:b5:14:87:43:59:3f:d0:4f:d4:fd:ae:cf:de:0b:
e1:52:2c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:05 2025 by rpki-client