Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7488BCB4A41911F0B0D4DCCEDAE4EC9C.roa
File: 7488BCB4A41911F0B0D4DCCEDAE4EC9C.roa (raw, json)
Hash identifier: jlypwUFonBl4iaDKGjYTgI7dUn4aTH+dSsFYrKcy88g=
Subject key identifier: 4D:79:0A:FA:3A:F2:5B:BC:E2:C9:8A:54:89:5A:EC:BC:D3:B6:87:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7488BCB4A41911F0B0D4DCCEDAE4EC9C.roa
Signing time: Wed 08 Oct 2025 07:36:09 +0000
ROA not before: Wed 08 Oct 2025 07:36:02 +0000
ROA not after: Sun 07 Dec 2025 07:36:02 +0000
asID: 139646
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107177 (0x1a2a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 07:36:02 2025 GMT
Not After : Dec 7 07:36:02 2025 GMT
Subject: CN=68e61469-c1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:85:cf:6a:b4:bf:9c:7d:29:8e:f9:22:20:
1b:b4:75:5d:d3:28:0c:45:ef:9f:f6:87:02:fa:d2:
e8:69:e4:38:a0:c3:da:fe:fb:3d:ee:12:c6:b0:1f:
34:91:de:18:2c:ef:40:9f:26:b3:82:2c:ab:68:38:
45:19:64:0d:f2:85:64:9b:44:e7:a4:1f:6e:a9:c8:
65:ae:c0:3a:c3:25:a6:dc:74:84:f8:28:fb:f5:28:
12:e0:c4:a1:41:c3:d0:d2:c2:df:54:8e:45:33:17:
7d:ad:7c:b0:55:f2:1c:67:9a:22:5d:1c:0a:72:d2:
00:bf:b7:46:6c:e2:f3:89:69:2e:ba:0c:12:96:a7:
0b:a9:7a:e1:bc:7b:ab:e4:0b:96:f5:14:9b:f4:a2:
9a:ee:89:91:f4:a9:c3:ca:ac:48:56:4b:43:36:ff:
31:6d:ee:83:eb:d3:31:72:87:c8:a4:a4:fd:cd:71:
6a:b1:b0:cb:78:eb:4c:e5:3b:96:10:e6:2f:19:1e:
d8:d4:95:da:84:bb:bc:e7:fc:3a:24:36:a0:c7:eb:
32:19:c2:5e:42:05:f8:4c:0d:a7:ff:5d:f1:14:1a:
81:91:e4:db:6f:90:a8:85:4b:4d:f3:dd:51:88:ce:
fd:23:c9:78:c1:18:1a:7a:db:f0:04:00:71:b3:55:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:79:0A:FA:3A:F2:5B:BC:E2:C9:8A:54:89:5A:EC:BC:D3:B6:87:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7488BCB4A41911F0B0D4DCCEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e0:f3:bb:b9:cb:65:98:85:51:db:a2:af:fd:f5:85:68:14:
a9:5e:60:28:c3:bc:b1:82:9b:f3:13:18:23:d9:a6:d1:48:3c:
51:c1:c1:59:4d:d1:d2:ab:af:96:1c:04:47:08:ce:f3:5a:8f:
9e:5e:2f:88:1c:0a:4d:4f:9d:a3:d6:9c:38:44:75:b0:7c:c1:
d8:ed:2c:3a:4e:32:47:36:d3:e3:1a:ae:12:57:a5:44:45:54:
77:29:d7:5d:9a:09:0a:dc:35:97:46:1a:5a:86:fc:ea:94:ae:
fb:95:99:e2:04:32:69:7b:54:06:30:15:c1:74:29:8b:8c:c7:
35:67:9f:d9:8a:52:6b:ce:a8:c5:c9:9b:5b:2c:bd:8b:4a:a0:
e6:a7:21:49:23:dc:5c:1e:7c:f5:e8:97:18:17:7a:6b:38:e2:
c5:71:60:9e:3c:d0:7d:dc:a5:91:f2:74:a4:eb:54:c4:86:0a:
3a:e5:5d:44:c6:5e:80:03:14:18:d9:a8:13:ad:99:10:79:ea:
c6:7f:1d:83:99:ba:10:9a:6a:3c:d5:df:26:46:07:ca:df:35:
bc:bc:25:29:b9:b2:6d:27:0e:5c:02:fd:7f:07:d7:35:94:26:
33:cc:0b:95:49:79:2a:c2:0b:c5:d5:1d:98:e1:10:ee:90:12:
48:f5:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:51 2025 by rpki-client