Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/715C2372A1F411F095EDBAE2DAE4EC9C.roa
File: 715C2372A1F411F095EDBAE2DAE4EC9C.roa (raw, json)
Hash identifier: /WJnDYgDkk0uMAucFajhzRRuLX+CIFehODhSdzEmcmM=
Subject key identifier: 3E:6D:C8:88:BB:9E:C6:37:34:4D:C7:C9:BB:0A:C0:B1:FC:C9:D6:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A247
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/715C2372A1F411F095EDBAE2DAE4EC9C.roa
Signing time: Sun 05 Oct 2025 14:06:10 +0000
ROA not before: Sun 05 Oct 2025 14:06:01 +0000
ROA not after: Sun 09 Nov 2025 14:06:01 +0000
asID: 200373
IP address blocks: 154.213.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107079 (0x1a247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 5 14:06:01 2025 GMT
Not After : Nov 9 14:06:01 2025 GMT
Subject: CN=68e27b52-3536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:7f:19:70:b5:c9:fe:ae:6a:de:5b:a8:d3:
5d:87:aa:7b:8d:e0:0a:22:23:17:d5:6d:3d:cb:c0:
1c:25:10:17:06:50:7f:35:7c:7b:6e:2b:00:ec:96:
65:37:8c:bb:8c:bb:59:40:bc:04:47:d9:b5:6d:5f:
bc:74:a8:e1:6d:20:c7:01:b9:89:6d:1d:fb:3a:29:
f2:74:66:52:a7:1b:26:52:89:35:fc:80:c0:d0:8f:
b2:2d:91:81:ca:b2:80:d1:f2:9b:d3:2c:4b:6e:ff:
69:f7:b1:cb:99:05:7f:f5:5b:71:c8:95:15:54:4f:
c8:00:49:30:8c:09:f9:19:0a:59:ac:2c:28:bb:30:
89:9f:f8:a6:4b:2b:6c:45:e2:c4:8d:1a:77:71:9f:
3a:c2:b4:df:f6:cc:da:5d:2b:2f:58:f7:68:aa:fc:
87:17:b5:75:9a:67:27:cf:9c:8d:77:f0:84:44:9b:
51:39:04:b3:e0:ef:60:0d:c3:6c:6f:ca:10:8a:cc:
86:cd:7d:ef:bd:0b:85:49:18:06:e6:b1:ca:e7:e8:
56:4e:aa:8d:d4:e8:19:1c:ba:28:47:f0:55:e8:00:
51:f5:d1:c4:43:2a:7a:75:d4:87:2c:cb:32:85:36:
27:23:3e:3a:e4:d0:bb:3f:98:97:13:57:64:33:c7:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6D:C8:88:BB:9E:C6:37:34:4D:C7:C9:BB:0A:C0:B1:FC:C9:D6:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/715C2372A1F411F095EDBAE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.160.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:6b:33:f6:fb:3d:1f:a2:f1:02:e6:47:15:ea:76:29:d3:b7:
48:cb:8d:5c:44:18:48:ec:83:cf:62:d8:a6:2b:0f:16:76:1d:
55:f6:56:ae:33:d6:cc:5b:8e:89:58:97:b1:55:e3:b4:a7:ed:
49:a7:9a:15:b9:62:24:56:89:c2:f2:80:05:9c:be:1c:51:1c:
b1:5b:fc:75:14:34:67:17:ae:32:2d:e7:8d:f1:0b:3e:82:0b:
78:fb:86:b0:99:6d:d3:c5:03:0b:8d:f8:8c:58:9b:0b:d8:55:
e4:04:05:40:49:65:56:08:e1:77:2e:50:b4:d1:77:aa:fa:c8:
51:d0:c0:49:e1:2c:b2:23:6a:80:bc:f4:96:9d:a1:48:07:98:
c7:e0:d0:76:11:9a:49:d8:4e:e1:65:2a:07:2e:2c:12:05:64:
ab:7e:08:1c:02:12:4d:71:20:54:b8:cc:5c:ff:3a:69:7f:32:
22:86:03:89:50:29:c2:cb:d6:ab:88:da:66:2e:c8:12:22:33:
ad:70:ba:d0:75:9b:11:f7:ba:b5:b7:d1:1d:5a:08:c3:d4:00:
de:97:14:03:01:5e:91:3e:db:14:24:6e:9e:71:3d:17:ff:6b:
94:c3:d2:30:7e:fb:4a:18:e5:f1:27:8b:2b:b5:06:55:30:d4:
c9:2d:c7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:00 2025 by rpki-client