Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C759B58999011F0BCA28CEDDAE4EC9C.roa
File: 5C759B58999011F0BCA28CEDDAE4EC9C.roa (raw, json)
Hash identifier: C+dve148chNuGsVm4sXTudQi0+u0sNpbIFIbZocQmXM=
Subject key identifier: 6B:FC:DE:2F:AC:FD:AE:81:D2:76:BA:F8:BB:2C:8A:5D:F1:2D:8D:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C759B58999011F0BCA28CEDDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 21:49:36 +0000
ROA not before: Wed 24 Sep 2025 21:49:31 +0000
ROA not after: Thu 06 Nov 2025 21:49:31 +0000
asID: 20326
IP address blocks: 154.84.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106708 (0x1a0d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 21:49:31 2025 GMT
Not After : Nov 6 21:49:31 2025 GMT
Subject: CN=68d46770-f4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:0e:ec:7a:5d:f8:4f:2e:d2:c3:6e:c2:99:
69:17:8c:46:71:3c:31:b7:a4:bd:62:bd:83:d2:68:
2c:1c:fd:db:ac:b8:a3:8f:f1:03:ce:e9:88:6b:9c:
0c:a0:89:c4:a0:4b:5b:e7:9d:79:2e:e1:0f:41:d9:
e4:57:08:ab:06:27:cd:8c:64:47:72:e9:1c:93:61:
7c:12:39:9c:64:d1:72:67:c7:c5:ac:b5:95:f6:4d:
53:b0:2f:f6:e5:d1:0a:9d:a0:71:ef:2e:83:b3:53:
c9:ee:2f:76:8d:b3:ba:78:77:b3:c2:e6:b2:4a:a1:
83:8d:8d:78:ae:59:6d:55:00:23:a3:01:96:5d:d7:
75:b0:7e:8e:5b:46:e0:3c:e5:11:55:dc:5b:36:6a:
0f:7d:ec:fd:f8:7d:60:8d:6d:44:62:b0:d0:ad:3b:
17:37:bc:38:b5:95:11:ba:a5:3d:4a:e2:97:6a:a4:
4b:54:86:c6:94:5f:0b:07:a7:af:29:48:b2:04:df:
ef:2d:c3:55:9c:81:4d:98:e5:13:67:fe:74:dc:6f:
66:3a:98:12:a9:4b:18:c4:d6:47:86:30:77:ab:78:
fe:05:f8:8a:5d:8d:10:d4:d6:42:32:10:a8:de:09:
a4:26:c2:c4:80:94:a2:a8:78:d9:d8:27:e1:2a:82:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FC:DE:2F:AC:FD:AE:81:D2:76:BA:F8:BB:2C:8A:5D:F1:2D:8D:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C759B58999011F0BCA28CEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.188.0/23
Signature Algorithm: sha256WithRSAEncryption
51:05:a0:ee:62:87:72:08:96:57:66:e9:d2:37:67:00:14:ac:
ac:17:e6:86:0e:9d:72:71:c6:60:30:a4:eb:c4:5d:14:20:03:
7f:53:1f:ba:86:22:ff:f3:d8:64:c7:9b:03:23:ab:3e:19:37:
3e:7e:71:ae:04:df:ea:40:52:3c:9e:43:8b:77:43:2c:91:f5:
29:1a:2a:15:82:8a:43:88:0f:bb:f5:aa:33:d2:f3:0c:66:4c:
ca:98:68:f4:6c:0d:c2:f4:6b:8c:2f:62:a7:41:71:e6:28:76:
01:86:47:c8:99:7a:30:dd:c4:00:96:a9:47:24:52:da:bc:0a:
43:01:ac:9d:62:04:9a:a1:ba:d5:0b:fc:18:4e:de:79:30:a9:
32:ab:53:6a:b5:c2:3a:18:c5:c6:da:e9:a7:1c:96:e9:70:fe:
b1:9c:e4:f9:a8:d7:07:8e:30:96:f1:5b:2b:1e:f3:e7:02:d8:
00:92:a0:8d:09:9c:ee:3f:a9:3a:1f:79:0b:64:83:dd:c1:0c:
6f:b9:59:f0:28:65:fe:b3:ae:49:1a:b7:5e:07:a6:2c:85:5d:
77:7f:05:bf:03:8d:22:f7:b5:2b:56:15:a7:7f:bc:88:d8:4b:
a2:06:0d:cd:c3:a5:f9:6c:17:f3:6a:c3:c7:6e:62:c4:ae:ca:
5c:eb:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:49 2025 by rpki-client