Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60C3F44CAA6211F0B398E0C2DAE4EC9C.roa
File: 60C3F44CAA6211F0B398E0C2DAE4EC9C.roa (raw, json)
Hash identifier: ea9A+lKx0r46azVhUog7Cf0MzcKAdOGq08uaLvXVr90=
Subject key identifier: 04:6D:70:91:F9:14:BC:0C:4C:22:07:51:AC:4E:BE:C8:D8:17:81:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60C3F44CAA6211F0B398E0C2DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 07:33:16 +0000
ROA not before: Thu 16 Oct 2025 07:33:11 +0000
ROA not after: Mon 20 Oct 2025 07:33:11 +0000
asID: 61461
IP address blocks: 154.216.192.0/18 maxlen: 24
154.218.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 07:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107452 (0x1a3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 07:33:11 2025 GMT
Not After : Oct 20 07:33:11 2025 GMT
Subject: CN=68f09fbc-7f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:52:05:df:bb:4f:c9:48:77:e3:31:15:9d:f4:
d2:56:8c:e1:8c:0f:40:f0:28:c5:a1:a2:78:3d:dd:
3b:1f:e8:67:64:b9:a2:b0:13:08:21:9b:25:31:db:
fa:b1:65:04:d4:7f:a1:e4:43:2e:6b:b5:c4:95:1b:
ca:30:de:94:1e:10:a7:8f:0f:b0:00:cd:24:b3:d1:
af:50:56:7f:5a:46:9b:1e:bf:c0:a1:54:5b:54:88:
b6:d1:be:e1:83:4f:91:86:7a:68:b8:77:c8:6c:db:
ec:37:49:19:a6:12:cb:10:1d:94:cf:d0:2a:80:d3:
a0:7c:f4:20:f2:1d:22:ee:4f:e0:c8:0b:8b:aa:d8:
ab:f9:0d:e9:82:1c:d5:83:a8:40:b3:0d:a9:4a:19:
d6:71:3f:e2:bd:6b:a2:5e:a0:bc:66:a0:32:0f:8b:
be:bc:ce:31:b1:67:fd:75:a8:fd:09:e2:53:93:77:
25:9c:5d:fe:90:f4:53:5a:3b:a4:2f:be:98:88:f1:
fa:13:af:3c:81:ac:43:22:01:1f:ec:57:2b:30:c1:
b7:6c:68:ef:d3:e8:6f:c2:d3:f7:d3:af:b4:37:f4:
7f:01:6e:c2:f4:db:ef:c7:f1:7e:4b:37:2a:2a:32:
3d:7e:d5:bf:07:e0:8a:fe:c0:82:0b:8a:69:c8:8c:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6D:70:91:F9:14:BC:0C:4C:22:07:51:AC:4E:BE:C8:D8:17:81:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60C3F44CAA6211F0B398E0C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/18
154.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a8:01:83:88:db:06:69:13:9e:30:47:d0:1c:86:c4:44:da:ca:
54:35:34:df:2f:13:23:59:60:79:6b:1a:43:f4:65:c5:0c:5e:
bf:76:cd:e0:7c:b6:91:22:8d:e9:62:ec:59:d0:85:40:3f:eb:
63:90:86:92:cf:68:24:8c:97:cb:89:ed:f3:78:64:4b:e9:59:
48:7f:9d:b3:a4:1e:67:63:c4:53:74:b1:73:84:f1:9f:3f:26:
69:30:f8:2d:63:7e:6d:28:c8:5d:ad:13:1e:23:f5:0e:e0:38:
ea:30:bb:42:b1:9e:2a:b8:77:e3:3e:db:4c:a3:1b:1b:79:89:
69:45:4e:39:62:a9:99:97:be:37:32:e5:c7:0c:f4:8a:67:fe:
35:55:38:2a:ac:29:75:a9:b1:e8:29:b0:16:81:1f:1d:4f:df:
ee:be:ba:8e:5b:a2:d0:02:d1:1b:b6:32:5a:51:74:21:f0:9e:
96:33:ee:0e:7a:aa:fb:f1:ad:05:ba:4c:64:29:f9:33:97:1f:
bb:f2:04:2b:9f:b1:a9:aa:f0:c8:80:ec:9f:4e:35:82:e8:38:
a2:b7:28:f2:df:ba:5b:00:d5:ed:3e:9f:f4:aa:63:88:ce:e1:
b4:d1:d5:30:4f:4b:95:fc:b2:7d:17:a8:7c:7e:fd:bf:b8:e8:
16:9b:9d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:05 2025 by rpki-client