Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69A292ECA9B011F09894B9EBDAE4EC9C.roa
File: 69A292ECA9B011F09894B9EBDAE4EC9C.roa (raw, json)
Hash identifier: J3Qy2/5H2XnkLOIBdA3VCVBiwAAYvjkgpMDQfMlpWeY=
Subject key identifier: 7C:BC:FF:15:D2:A7:31:00:2A:FE:0A:A5:95:78:FE:7C:44:0C:D5:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A395
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69A292ECA9B011F09894B9EBDAE4EC9C.roa
Signing time: Wed 15 Oct 2025 10:19:20 +0000
ROA not before: Wed 15 Oct 2025 10:19:16 +0000
ROA not after: Thu 20 Nov 2025 10:19:16 +0000
asID: 19318
IP address blocks: 154.194.200.0/22 maxlen: 24
154.213.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107413 (0x1a395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 10:19:16 2025 GMT
Not After : Nov 20 10:19:16 2025 GMT
Subject: CN=68ef7528-a2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:61:91:77:f4:78:e9:2c:11:3a:8b:df:05:
e7:f6:c6:11:fe:b2:56:2a:4f:ee:ed:1c:dc:7b:08:
cc:e3:47:bb:38:5b:88:79:f3:5a:b7:03:69:c8:b4:
54:e7:f2:ad:91:30:80:13:fa:ec:72:15:72:61:2c:
05:37:27:a5:e6:c7:65:27:20:74:c8:74:0a:72:11:
f9:0b:b3:fa:1d:29:1a:e5:a6:d3:a2:2c:95:ae:39:
8c:ce:b3:e6:de:f4:a0:c4:2c:d1:4a:26:0e:98:79:
97:7f:06:d8:db:86:3d:bf:86:d5:b5:e3:ff:db:96:
cf:f3:70:f6:bb:94:96:06:4b:a0:6b:17:3f:d8:2c:
27:06:1f:9c:cc:2f:64:59:e8:97:c5:5b:df:d9:bc:
fb:a3:cf:b1:20:a8:1e:5f:9f:27:78:c5:2d:79:4c:
d3:04:47:46:ba:55:fd:33:35:22:08:a9:98:57:92:
22:26:5f:ee:57:d1:44:95:ee:a1:ee:e7:5c:c5:f3:
ae:3d:08:7f:5d:eb:74:af:fc:a5:e9:0e:ed:4a:8f:
2c:37:c0:fa:ba:c2:e1:b8:45:29:ab:54:49:d1:b6:
ff:45:b3:ad:82:f9:9f:86:8b:60:28:4f:ba:c3:5c:
25:92:07:c9:3d:2d:00:7d:c1:f3:37:a4:71:10:e0:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BC:FF:15:D2:A7:31:00:2A:FE:0A:A5:95:78:FE:7C:44:0C:D5:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69A292ECA9B011F09894B9EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.200.0/22
154.213.196.0/22
Signature Algorithm: sha256WithRSAEncryption
91:7e:17:a3:c6:bd:bf:ab:4b:20:a0:4c:4d:b1:77:a5:2f:3f:
1d:9b:29:5f:0e:05:65:1c:70:00:65:16:fa:9a:1c:50:39:5b:
a9:f3:b6:cd:d8:41:29:54:f9:bb:10:07:34:f3:a4:ab:3c:c4:
8e:e9:a8:4a:7b:30:01:c1:8b:e3:77:21:52:ed:12:c0:7c:4b:
13:82:2e:b4:68:1a:77:22:cd:71:03:08:fe:2a:bc:64:0f:5d:
37:fa:8b:40:d3:57:67:9b:31:b8:8a:4d:a2:d8:a8:c1:57:a8:
c5:91:3d:4a:5c:61:1c:11:cd:4f:24:29:d5:52:1c:98:d6:37:
12:15:01:01:f6:ab:80:bb:d3:bf:d1:e8:8e:8e:d7:c1:aa:6f:
e3:9d:fb:b1:3b:fd:2b:63:d6:84:80:d6:4c:9e:51:91:09:1e:
59:87:d1:c4:04:93:12:22:d6:73:a5:b3:9d:56:c0:48:cf:b4:
a3:ac:17:03:08:f8:b5:28:37:7e:20:9a:63:39:0a:31:fc:2b:
29:66:4a:74:b8:3f:73:8f:c7:3e:fc:2c:b0:00:f3:74:4c:4e:
ca:7a:ea:9b:be:2d:24:0a:88:e1:2d:e1:ea:af:ea:91:96:38:
ed:70:3c:ad:41:8d:6f:2a:71:f9:e2:c5:60:12:c7:17:60:92:
82:3c:bf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:04 2025 by rpki-client