Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A197549EA811F08486CE7DDAE4EC9C.roa
File: 61A197549EA811F08486CE7DDAE4EC9C.roa (raw, json)
Hash identifier: ZQeO/av16CzY9KezshO6Esa5YtbmeP4R/U5E+5+bREk=
Subject key identifier: DD:C0:8A:EC:9F:9B:7D:4F:46:5B:9D:AD:17:0E:2D:59:1E:45:3E:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A197549EA811F08486CE7DDAE4EC9C.roa
Signing time: Wed 01 Oct 2025 09:24:08 +0000
ROA not before: Wed 01 Oct 2025 09:24:03 +0000
ROA not after: Mon 10 Nov 2025 09:24:03 +0000
asID: 8796
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106981 (0x1a1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 1 09:24:03 2025 GMT
Not After : Nov 10 09:24:03 2025 GMT
Subject: CN=68dcf338-17dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:59:8d:79:af:ee:8d:11:f7:83:01:c5:2d:
f7:1e:f3:06:bc:e8:69:07:66:ed:f6:35:59:ee:59:
18:e3:c5:2e:1a:18:b6:75:19:29:31:4f:04:8a:68:
9b:bc:03:c6:5a:34:26:b7:d8:f1:d3:ad:31:f1:43:
ea:8c:4e:f7:5b:c6:75:b3:0d:00:76:f8:03:dd:b7:
a1:60:ea:11:65:8a:21:e9:7b:03:ff:f3:fd:da:f1:
57:6a:79:ad:12:95:f2:bb:85:c6:df:90:cb:08:0e:
36:18:a0:63:c7:c0:e8:08:ed:29:11:a2:12:aa:e9:
a2:4e:a0:f3:3f:40:e5:12:0d:5a:6b:39:67:c6:b8:
9d:f3:4f:d7:54:34:74:6d:36:34:95:77:79:e6:0f:
52:c7:2d:2c:ef:98:93:81:81:15:40:4f:65:51:09:
0b:a5:ac:d7:5a:38:1e:c4:2c:10:0f:b8:bb:30:a7:
c0:02:31:5c:39:87:83:d1:52:0f:52:98:6a:4a:42:
33:f6:95:ab:55:6e:49:d5:4c:cf:41:52:ee:aa:41:
62:40:76:8f:b8:78:bf:ab:6f:dc:49:73:2d:d2:e4:
e2:b5:4f:71:95:3e:15:69:ac:87:10:af:00:a5:07:
c0:8e:75:24:65:c3:ad:0c:ff:a4:34:ec:7d:b7:c7:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C0:8A:EC:9F:9B:7D:4F:46:5B:9D:AD:17:0E:2D:59:1E:45:3E:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A197549EA811F08486CE7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:02:d6:0e:9c:fb:d0:c2:7a:2a:51:d4:25:5f:ac:65:7c:39:
85:9d:1f:2d:b4:73:1c:5b:91:0f:57:d6:d3:10:45:a4:38:1f:
9c:eb:1b:d0:9e:c1:d5:26:58:31:ba:01:b2:d0:b7:32:7f:e1:
21:34:fb:1f:eb:91:5e:db:51:95:6e:b2:9a:46:44:6f:35:54:
da:84:83:66:4b:13:87:4d:b7:7d:0f:24:da:10:85:ac:66:e5:
32:12:9d:f0:c1:93:eb:36:34:0e:04:36:c6:f2:50:58:be:a6:
1d:0f:a5:e9:2a:c0:f4:96:96:8e:d6:3d:4d:42:2d:83:93:c7:
3b:e8:2f:62:35:92:ec:fa:b1:66:34:96:4d:4c:28:9c:ef:92:
60:66:aa:71:ad:6b:74:72:29:ce:c8:d0:bb:43:e9:08:48:21:
a7:22:c2:e6:3f:b3:53:12:f8:96:30:2a:91:79:d8:ae:f3:a8:
47:7b:ec:c3:36:9e:fb:23:8f:33:45:88:77:c9:2d:07:d9:d0:
28:eb:e9:45:76:ef:e2:5f:7c:29:98:28:f3:24:1f:8f:4b:75:
56:40:b3:02:3d:73:c3:5a:5f:9b:0e:59:56:e6:02:3a:6b:61:
60:17:6e:69:06:a2:83:3f:b0:6b:2a:ad:e7:e4:02:cc:b4:0d:
16:40:06:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:25 2025 by rpki-client