Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FC45D36A34811F0916F1B83DAE4EC9C.roa
File: 6FC45D36A34811F0916F1B83DAE4EC9C.roa (raw, json)
Hash identifier: PHUvixEsDfK93c228wP6DNhdm3wz3x95VfKQpaE8/Ns=
Subject key identifier: 49:D8:B9:8F:AC:83:B2:18:41:80:FE:79:8F:89:DD:43:E4:93:01:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A280
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FC45D36A34811F0916F1B83DAE4EC9C.roa
Signing time: Tue 07 Oct 2025 06:39:56 +0000
ROA not before: Tue 07 Oct 2025 06:39:50 +0000
ROA not after: Sun 09 Nov 2025 06:39:50 +0000
asID: 395793
IP address blocks: 154.93.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107136 (0x1a280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 7 06:39:50 2025 GMT
Not After : Nov 9 06:39:50 2025 GMT
Subject: CN=68e4b5bc-7426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:11:b7:1e:0a:64:92:2b:65:6e:b4:e2:f3:
77:1d:7f:1f:2f:89:cd:9e:c6:bb:75:33:33:9f:26:
36:ef:68:fd:eb:ae:8a:27:4a:a5:8f:f1:e7:c6:8e:
fc:bb:bc:10:7f:7c:af:a4:7a:4d:dd:9a:ed:3b:03:
bb:99:f9:95:82:51:ca:31:95:0e:5e:c0:c1:65:ac:
01:d0:46:c7:a9:01:9e:c8:32:30:bc:38:ba:0f:4d:
3c:04:0e:e0:ea:1e:63:d3:d2:fe:03:0e:e0:43:fb:
b6:95:60:77:a7:30:c8:d0:01:0f:3b:ee:03:fe:47:
ad:2f:64:6c:f7:b1:3c:5d:48:3c:29:d5:fe:ba:9e:
25:c9:2a:2d:46:66:78:3b:3a:a2:93:2d:6b:70:2d:
3a:29:c3:ac:d0:d5:1a:a2:72:39:c7:3f:b6:1d:4c:
fa:f6:fd:3d:68:0c:c5:a6:16:bc:68:37:42:d1:b5:
b5:7f:93:2d:9a:e8:0a:c5:6b:b0:ab:24:1d:53:3f:
a5:d4:d5:0b:38:5d:c0:23:ae:83:93:9c:13:bd:30:
07:f8:0c:3e:5d:4b:43:25:6c:6f:b8:32:c4:f0:da:
63:0a:ba:d1:56:2c:04:0b:40:85:d3:6e:23:4f:bd:
ed:2f:41:12:7e:90:1e:ed:f0:a2:c7:e1:72:32:93:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D8:B9:8F:AC:83:B2:18:41:80:FE:79:8F:89:DD:43:E4:93:01:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FC45D36A34811F0916F1B83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
84:dc:5b:84:93:ab:5b:66:c9:cf:05:13:e1:96:91:63:35:70:
e5:d3:ee:53:dd:54:d2:1f:b2:88:ff:3b:de:10:8b:bc:fb:8a:
a2:78:f6:20:da:be:32:ae:58:6b:22:7a:bb:8f:43:c4:94:45:
4c:12:3a:55:43:c8:1e:22:89:f2:5e:e8:ce:13:46:b9:9c:6b:
ba:64:90:29:9d:7a:cf:00:1d:80:bd:c5:19:2a:bd:ae:ec:dc:
71:bd:f7:b9:d6:ef:a1:e3:ad:cc:88:75:1a:74:25:6e:e4:2a:
65:2c:42:22:ae:f1:09:b5:0a:28:e1:20:23:d1:f3:2d:22:5d:
1d:f0:c0:90:9a:3d:1c:07:33:10:9e:92:dd:69:ef:cc:ba:1a:
46:5d:6e:9c:78:32:8e:22:c5:ce:57:02:6c:e1:11:69:6b:8c:
d4:44:da:0b:16:9e:a5:04:01:eb:85:9a:4a:4b:9b:d8:ca:6a:
c0:fa:63:9b:9d:9f:6c:86:d6:a2:07:06:d3:5f:c9:85:82:3b:
4c:c3:2f:b9:40:f1:91:9e:e3:a5:69:43:03:cc:8e:19:1a:fa:
c2:b4:cf:bf:f2:60:ce:d4:72:66:68:af:b9:12:4f:8e:6f:fa:
50:40:87:08:c3:ba:eb:37:38:44:af:41:15:84:11:90:ae:20:
fb:ac:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:04 2025 by rpki-client