Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4EBE689D7B11F0BC0C7FD0DAE4EC9C.roa
File: 6B4EBE689D7B11F0BC0C7FD0DAE4EC9C.roa (raw, json)
Hash identifier: KKwT3Kd7tmkGS3uD29pRkU0nE3Bthv/XuNowYOzr+1Y=
Subject key identifier: F2:C2:4F:C1:B4:4E:E0:AC:45:B5:FE:03:E5:80:98:2D:30:9F:27:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A18F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4EBE689D7B11F0BC0C7FD0DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 21:29:46 +0000
ROA not before: Mon 29 Sep 2025 21:29:39 +0000
ROA not after: Fri 09 Oct 2026 21:29:39 +0000
asID: 132839
IP address blocks: 154.201.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106895 (0x1a18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 21:29:39 2025 GMT
Not After : Oct 9 21:29:39 2026 GMT
Subject: CN=68dafa4a-d378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:0d:79:d6:b4:e5:a9:d1:4b:e0:67:aa:68:
85:fe:07:b1:15:7d:c2:73:93:e7:ba:3c:f9:e6:e2:
b1:6b:cc:16:a8:42:98:28:51:c5:74:27:bb:22:75:
7f:63:40:67:9e:c5:e6:f4:76:6f:99:99:20:ce:cf:
e7:db:20:3b:0c:b1:d8:bd:43:12:d8:c9:43:6d:9c:
09:87:a9:5d:ac:ad:29:2f:14:f7:77:70:50:8c:54:
be:31:6b:4c:a5:de:65:07:3b:13:0a:66:5e:11:04:
eb:67:2f:0a:69:66:1d:3f:5c:d7:6c:60:f2:fc:e6:
ce:25:f3:82:b5:24:4f:27:e9:52:a9:30:73:a9:3d:
31:91:2f:e4:5b:7c:12:ea:0f:89:ff:33:1a:12:5d:
be:39:5a:50:ab:76:59:fb:e0:2d:5c:ec:f9:f3:dd:
5c:bb:a9:f0:a3:03:00:7e:e1:d5:94:03:26:ef:9b:
75:4a:d6:2a:8b:dd:7c:f0:49:89:85:5a:89:bb:c3:
ac:5f:a1:81:f0:5d:92:84:4c:f3:24:48:03:78:b7:
7c:b4:77:4c:c0:e2:b5:50:db:bf:81:11:39:ed:28:
88:db:38:2a:fd:56:db:40:0a:be:05:8c:bc:f7:2a:
de:0a:5d:fc:f6:db:1e:3f:f7:6b:17:b2:54:ef:a4:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C2:4F:C1:B4:4E:E0:AC:45:B5:FE:03:E5:80:98:2D:30:9F:27:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4EBE689D7B11F0BC0C7FD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7f:a2:9b:7e:24:0d:7a:ec:91:a1:5a:fd:7f:34:1b:08:1c:c8:
53:8d:ea:93:ab:58:50:fc:91:5b:d9:12:c5:48:ff:d8:ee:7c:
f9:f9:ab:4f:a2:73:62:b3:c8:8d:4b:7b:9c:6f:0d:c6:7f:5c:
ef:24:4f:1c:d1:a7:a0:60:e6:a3:66:08:b5:67:59:b2:78:c7:
0e:59:b2:c1:9e:e1:18:38:73:17:3d:7b:96:60:aa:f5:de:c8:
0e:6d:66:51:43:95:2d:fb:d7:64:95:04:a8:24:dc:32:93:93:
1e:4b:1e:1e:36:b4:2f:19:2a:bf:20:56:7b:8f:38:48:c2:bb:
47:cc:fe:93:be:5b:ea:c9:37:74:c0:90:e4:72:30:09:f3:86:
78:08:bd:94:15:ae:84:53:b5:02:39:5b:f8:10:eb:f4:59:a6:
18:e1:77:4b:b6:ee:c7:1b:9d:d9:83:51:da:11:1a:c8:21:5a:
87:8c:ce:4c:5d:2f:36:0c:47:40:1c:de:4f:a6:ea:67:cc:a8:
07:88:78:f1:36:8b:fc:77:1e:3e:07:28:4e:73:4b:b8:c4:19:
e5:54:1b:43:ef:9c:c3:b3:60:c4:58:df:c4:a2:83:c6:3c:77:
7f:a1:46:c3:41:46:09:6f:de:be:a3:de:80:5a:33:d9:22:d8:
eb:f4:28:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:43 2025 by rpki-client