Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66A3D2F0993811F0B9A40CBCDAE4EC9C.roa
File: 66A3D2F0993811F0B9A40CBCDAE4EC9C.roa (raw, json)
Hash identifier: 5NXpmY+nFF1F7NTkuZOdz80ABAALiuwI36aaIGWA5ok=
Subject key identifier: A0:4C:20:95:F8:81:84:28:A6:E9:0C:57:52:77:5E:AE:52:5F:54:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A052
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66A3D2F0993811F0B9A40CBCDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 11:19:57 +0000
ROA not before: Wed 24 Sep 2025 11:19:52 +0000
ROA not after: Thu 23 Oct 2025 11:19:52 +0000
asID: 63969
IP address blocks: 154.89.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106578 (0x1a052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 11:19:52 2025 GMT
Not After : Oct 23 11:19:52 2025 GMT
Subject: CN=68d3d3dd-feb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:47:49:e0:85:49:ec:d7:a1:93:ee:12:cf:
15:73:cf:3e:bb:d4:d4:12:d9:e7:9e:74:1f:7d:93:
b6:d0:ca:17:82:f5:33:6f:12:48:b6:4b:5a:25:37:
aa:7a:15:b5:11:46:9b:0a:cb:4b:75:7a:61:8d:52:
59:05:04:8a:ed:fb:3f:34:c5:57:97:d1:e9:28:c8:
d4:42:4d:15:9c:e9:a3:8e:99:af:08:32:bc:1e:72:
e4:06:0b:b8:f0:8c:5f:a2:a7:fb:d1:47:9b:74:e6:
1e:b7:dc:e7:48:40:30:8e:55:c8:8e:01:d3:1e:f7:
ee:ea:05:d8:a5:1e:16:ac:8b:c0:a2:2f:26:a3:0a:
5e:43:60:65:9a:d7:b9:71:e5:c5:4a:b2:ab:52:3b:
f0:60:4b:ca:78:63:4b:c0:f9:84:c9:49:3b:5e:ad:
40:10:2d:b1:5b:8d:57:42:56:48:29:8e:ae:6b:7a:
19:3e:62:7e:3e:79:6a:c0:8f:77:06:23:60:b1:bb:
b0:cd:d3:f9:87:28:5b:67:aa:ec:50:7d:c2:94:70:
d0:dc:15:a6:e4:4c:78:48:e2:97:74:a8:9c:25:47:
6f:6b:dd:e1:42:02:5c:b5:ed:84:f5:5f:20:92:a7:
d5:16:ac:e6:5c:b9:6b:5d:3e:16:ea:dd:28:51:d0:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4C:20:95:F8:81:84:28:A6:E9:0C:57:52:77:5E:AE:52:5F:54:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66A3D2F0993811F0B9A40CBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:31:4e:98:ab:0e:ab:c5:63:ef:f7:47:60:f1:09:44:63:76:
ee:ee:2c:62:58:b7:97:69:a4:a1:b3:87:a3:ea:7a:23:c7:49:
2b:3b:d4:ef:0d:52:26:df:6c:60:da:1a:3f:47:e8:bf:8d:7f:
48:ac:51:c4:f8:ea:64:38:14:45:ce:68:65:12:2b:5a:76:c8:
dc:ad:c1:db:57:63:a7:53:f3:27:7d:18:95:dd:ca:b2:ee:72:
a3:3d:43:98:ac:52:09:d4:09:10:5d:b0:f9:32:38:9e:b8:1d:
ac:3b:bf:68:c1:3b:84:7b:28:2b:58:92:d2:ba:28:27:bc:d5:
bf:1b:d7:68:ba:ed:33:5c:7c:d2:23:7f:0b:6a:81:c4:91:7a:
11:07:80:25:30:1a:e6:63:61:4b:f9:11:62:17:12:dc:69:44:
9d:fa:2a:a7:a2:b8:dd:a2:f7:83:65:be:7a:a7:08:20:44:26:
dd:13:03:d9:4c:6e:c7:f8:61:42:d7:8e:dd:c2:65:25:f5:0f:
df:0d:46:46:d2:cd:36:d7:71:2f:5b:3c:73:55:e8:b3:86:44:
78:21:95:6d:ca:b0:c3:d3:1a:a0:b1:d5:8d:36:91:71:43:88:
f5:db:c6:75:62:5a:aa:81:d5:be:b6:f1:94:80:fd:46:3e:f0:
6f:46:b3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:18 2025 by rpki-client