Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69A1D808A36F11F081C95F7BDAE4EC9C.roa
File: 69A1D808A36F11F081C95F7BDAE4EC9C.roa (raw, json)
Hash identifier: wGrTDkiX3IyT2lVyQYh9W8LtlB95VyhJoFKwvYzU59E=
Subject key identifier: 9B:50:88:25:AA:C3:59:5F:1E:14:B9:84:94:44:6D:5D:60:88:71:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A294
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69A1D808A36F11F081C95F7BDAE4EC9C.roa
Signing time: Tue 07 Oct 2025 11:18:56 +0000
ROA not before: Tue 07 Oct 2025 11:18:50 +0000
ROA not after: Sun 07 Dec 2025 11:18:50 +0000
asID: 54801
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107156 (0x1a294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 7 11:18:50 2025 GMT
Not After : Dec 7 11:18:50 2025 GMT
Subject: CN=68e4f720-5b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:e1:01:36:80:f4:6d:a8:63:cd:84:36:0d:
c6:99:4f:b7:36:03:8c:f6:a7:58:8b:2c:7a:d1:f8:
18:18:5c:49:07:bd:4f:dd:d7:26:77:3a:d6:3c:8d:
be:1a:27:6a:b0:ee:14:ad:c6:12:6c:3a:62:44:8d:
1c:7f:de:20:e3:42:01:0b:9c:5c:fd:ed:cf:c2:ed:
59:fa:8d:66:b5:05:34:dc:d9:10:2e:d0:25:30:20:
8d:cb:cc:d1:e3:27:40:7e:42:9c:7d:6f:b8:e5:9d:
af:e8:7f:75:42:31:8c:18:d2:95:43:86:45:0b:32:
5f:fc:ea:d2:34:de:36:16:07:ae:88:df:a1:e0:a4:
da:0e:b9:34:59:30:35:07:99:bf:81:d4:26:a9:b6:
bc:7b:65:c1:e9:40:5d:73:9d:35:18:ab:fa:33:09:
a7:77:f7:e4:09:e8:1f:24:7c:19:74:a5:c3:10:eb:
65:a4:92:a0:f8:19:60:12:5a:f5:dc:1b:74:d3:c6:
a6:84:ff:e4:63:f2:01:ed:5f:1b:6c:51:02:11:01:
f5:2a:52:76:d6:12:e9:ed:da:c5:62:34:41:85:58:
43:a3:d4:aa:df:64:9f:d2:21:ea:50:87:97:da:1c:
dd:05:9c:f3:92:42:ca:f1:ba:50:2e:3f:8a:d9:75:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:88:25:AA:C3:59:5F:1E:14:B9:84:94:44:6D:5D:60:88:71:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69A1D808A36F11F081C95F7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:48:c8:fb:8f:42:62:9e:f9:5d:bb:8b:a4:67:97:7d:12:22:
c4:15:f6:1b:95:0a:ac:3d:6f:e2:cc:aa:a5:cb:fc:e0:40:3e:
2d:1c:da:c1:f0:b9:ac:0f:14:24:c1:5d:2a:8c:38:76:80:ea:
dc:60:61:9a:7c:bf:b3:4e:50:0d:50:d5:29:cf:ca:8f:e5:14:
40:d5:53:51:cb:27:b3:97:ad:9d:97:0d:13:55:56:86:b5:25:
5d:06:7f:30:da:77:03:75:df:a2:aa:ac:04:bc:90:db:e7:ee:
21:8f:8c:c9:7c:b3:c0:e6:29:df:5c:38:2b:f6:48:27:a0:f7:
af:5f:8a:df:9c:b1:02:9e:64:1d:33:de:ab:23:d4:81:1d:60:
4c:4b:75:83:9e:6d:48:4c:2a:e0:92:e1:ec:fa:b0:16:a7:fa:
52:4a:86:0a:c2:3d:51:ad:a0:03:52:61:9f:fc:f7:5b:ce:50:
53:64:f0:4c:46:0c:2e:b5:01:b5:bf:0e:d9:f9:f2:95:be:cd:
cf:66:5b:9e:d4:ed:d7:43:43:37:ea:d1:5e:40:17:78:d2:df:
1f:51:83:78:78:18:83:50:6e:5a:7e:0b:47:46:28:da:c3:b2:
b8:7b:18:00:7c:d4:17:ca:cd:36:98:09:7d:b1:60:40:5a:78:
28:ad:fb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:35 2025 by rpki-client