Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B0C24F2987411F0B38FE5C8DAE4EC9C.roa
File: 5B0C24F2987411F0B38FE5C8DAE4EC9C.roa (raw, json)
Hash identifier: swC2UhBsK7wkxrVvZ1yMMB5lL04jr9fLYGNG8SrWakA=
Subject key identifier: FA:98:B8:1A:1A:53:50:A3:1A:D6:4A:29:79:F6:60:A4:DC:EB:B9:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A03D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B0C24F2987411F0B38FE5C8DAE4EC9C.roa
Signing time: Tue 23 Sep 2025 11:56:36 +0000
ROA not before: Tue 23 Sep 2025 11:56:28 +0000
ROA not after: Wed 29 Oct 2025 11:56:28 +0000
asID: 57043
IP address blocks: 154.83.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106557 (0x1a03d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 23 11:56:28 2025 GMT
Not After : Oct 29 11:56:28 2025 GMT
Subject: CN=68d28af4-a0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:34:66:17:0a:5a:b0:7f:e2:9d:86:eb:3b:
37:c4:c4:03:17:68:4d:32:87:d0:a7:c2:bd:95:1f:
64:7c:86:c9:ab:5f:70:ba:22:1f:0f:45:c2:bb:e8:
b3:f8:49:7e:56:97:a6:98:ac:d3:34:4f:16:6e:fe:
a6:a4:8d:16:8c:eb:5b:1a:92:fc:20:2a:bf:8f:7d:
24:78:60:2d:c9:e4:0b:02:33:16:49:a0:86:ca:13:
2f:5e:8c:84:e4:23:de:a3:7a:34:cf:b6:12:df:dc:
a3:f9:c4:08:66:a6:c4:e2:30:10:de:85:3a:34:bd:
c1:0e:57:86:c6:f3:b6:b3:0b:c3:04:6e:85:57:31:
52:ac:c1:40:ff:c8:5e:1e:bf:d4:ed:67:43:71:1d:
e1:56:78:3f:bf:ef:61:48:fe:13:1b:d5:99:e1:19:
79:98:96:a8:30:2a:4b:bb:49:79:12:b2:26:f0:82:
ba:b1:c0:ac:fd:1e:11:9a:f0:80:bd:4c:28:bc:dd:
cb:39:21:72:12:c2:20:aa:14:9e:c8:52:3a:fc:4e:
c0:2b:2b:0a:bc:81:84:dd:8c:75:70:bb:5c:7c:ac:
7b:5e:c7:2f:7c:f0:fe:db:d8:ae:76:e4:1b:c2:93:
a4:b8:c1:de:2c:05:7d:d4:0d:64:f1:6c:6d:a1:61:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:98:B8:1A:1A:53:50:A3:1A:D6:4A:29:79:F6:60:A4:DC:EB:B9:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B0C24F2987411F0B38FE5C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.146.0/23
Signature Algorithm: sha256WithRSAEncryption
77:87:4e:f1:73:80:a3:a4:c4:c6:16:78:d9:b1:5a:79:f0:c6:
41:84:b9:91:50:91:db:f9:e9:c0:b3:6e:8a:15:d9:24:a2:1c:
57:fc:1b:cb:c1:23:4e:e7:46:74:99:f8:57:ed:7c:2a:69:fc:
1f:3c:2c:6f:96:77:97:32:c9:37:7a:1f:04:5a:09:38:b9:b9:
3c:e0:e2:e6:1d:2a:73:0d:e1:24:bc:02:e3:cf:10:b1:ac:67:
8f:85:78:37:f9:11:b2:57:79:07:41:6c:f7:ac:d1:9f:4b:21:
38:fa:ba:0d:85:70:64:12:ab:ac:8f:96:24:3b:ba:04:95:b1:
ca:43:dc:87:2a:26:a8:ab:83:a0:59:6f:6e:46:a9:74:c8:b9:
25:84:47:6d:0a:db:71:c1:cb:2a:7f:c3:5f:79:6b:f9:eb:90:
57:aa:27:c9:a9:f5:38:5e:09:b7:6d:b0:b0:5e:c1:08:24:b4:
50:9d:b8:a9:63:9e:56:8b:74:b8:cc:91:ad:b8:56:3a:e3:cd:
6a:71:65:4f:f4:28:80:9a:0c:05:fe:32:f0:19:30:b9:62:d6:
b1:d2:b2:14:35:f9:0a:22:e3:6c:8c:30:aa:fa:a2:24:19:78:
2f:42:99:12:c5:66:27:ad:b2:a6:4a:ea:14:61:a1:62:29:c8:
0d:7e:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:13 2025 by rpki-client