Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71DB1B12A29B11F096DF07A1DAE4EC9C.roa
File: 71DB1B12A29B11F096DF07A1DAE4EC9C.roa (raw, json)
Hash identifier: xQc3EBN1DjlmdV2Hmt/mo4g1p/cLTfI6sp7Ldy5NCAc=
Subject key identifier: D9:37:90:D1:8E:6E:69:D6:72:D6:08:C8:5F:88:DF:1A:0D:68:11:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A279
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71DB1B12A29B11F096DF07A1DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 10:01:37 +0000
ROA not before: Mon 06 Oct 2025 10:01:32 +0000
ROA not after: Mon 08 Dec 2025 10:01:32 +0000
asID: 214808
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107129 (0x1a279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 6 10:01:32 2025 GMT
Not After : Dec 8 10:01:32 2025 GMT
Subject: CN=68e39380-3a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:66:74:d9:13:14:83:71:aa:0f:ff:de:c6:
79:29:a2:f1:b9:6e:1d:fa:a6:b1:7e:21:c0:1b:36:
a7:7b:ef:ae:8e:76:5f:49:e7:cb:48:ef:76:1b:89:
66:03:fe:0e:5a:db:46:46:df:c2:7e:55:a5:3c:40:
3a:b9:76:2b:ff:f0:45:b7:b8:2f:34:04:7c:75:fb:
7b:6d:a8:f8:56:7a:39:96:49:c6:94:b1:f7:f9:92:
02:d3:a1:d9:7f:7e:39:e0:34:e8:52:cf:92:2a:92:
11:f5:5d:ce:d4:1f:71:56:92:79:86:de:0b:10:66:
73:5b:3c:68:65:1d:81:f1:37:a4:7d:12:10:71:39:
07:05:97:eb:a3:87:a9:28:67:80:e0:19:5b:c0:28:
be:e3:d5:be:87:70:c1:89:4a:ba:35:1d:91:66:9e:
71:a3:84:d3:54:6f:1f:65:6a:e0:76:0a:e5:1a:69:
69:be:51:40:f8:0b:ff:79:30:b5:6e:55:4f:88:48:
36:08:fe:37:17:18:b8:e0:0f:84:b7:b2:e7:f3:b1:
05:ec:e3:b9:76:a2:94:63:03:fb:c0:41:60:60:13:
f8:22:8b:15:98:77:ee:04:9e:49:a7:a3:54:79:b4:
51:d3:41:f1:d4:49:13:ba:97:6f:01:90:f0:0f:c5:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:37:90:D1:8E:6E:69:D6:72:D6:08:C8:5F:88:DF:1A:0D:68:11:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71DB1B12A29B11F096DF07A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
72:9b:d8:9b:b2:d8:b6:4b:6c:66:a7:cd:d5:1c:c5:8b:b9:0d:
86:e2:19:26:d2:8f:79:9a:a8:ec:47:06:da:ba:37:dc:5c:36:
e8:de:48:66:2e:9d:34:ac:b3:93:8e:f5:0f:18:35:06:39:2d:
a4:99:a4:ee:26:ac:42:08:3f:32:c9:61:72:94:cc:90:ab:01:
6f:f4:02:ef:51:42:40:f2:b0:e8:a1:a4:53:8e:f6:d8:e1:ad:
c4:6f:be:ba:97:99:70:7b:5a:fd:b7:af:d6:54:60:9d:1c:8a:
da:fc:54:0b:c2:ae:67:17:66:9b:5e:ee:d3:00:e1:5a:5c:11:
4d:63:e1:a2:88:ea:db:39:ac:3d:0e:7b:14:11:b8:8c:a8:d2:
17:2c:52:a4:08:bd:5d:d2:4d:4f:c3:0c:b9:96:09:61:48:16:
64:24:e4:45:3f:33:4a:f4:06:0a:5e:35:b4:79:5d:eb:da:74:
3b:15:5d:f1:d0:db:87:3f:1f:f8:ad:4f:98:a5:ce:83:4d:b2:
50:05:e5:d1:20:74:7b:f0:4f:d2:51:ea:de:e5:68:47:a0:fa:
ac:4b:3c:cf:0d:a1:f1:b1:78:65:f0:8e:14:ea:47:73:12:a4:
0d:be:ba:50:29:0a:d2:0e:08:da:11:e0:c5:c8:bc:04:96:27:
59:74:fc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:43 2025 by rpki-client