Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7608CF62AA4411F082771C7EDAE4EC9C.roa
File: 7608CF62AA4411F082771C7EDAE4EC9C.roa (raw, json)
Hash identifier: roqjkR5sA7tAkVsZHY24+LucVF+WhbGYKNxPAPZGRSA=
Subject key identifier: DF:3C:19:91:AD:0C:DF:1A:CC:81:B4:8B:FC:1E:DC:EF:26:68:0D:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7608CF62AA4411F082771C7EDAE4EC9C.roa
Signing time: Thu 16 Oct 2025 03:59:07 +0000
ROA not before: Thu 16 Oct 2025 03:59:02 +0000
ROA not after: Fri 17 Jul 2026 03:59:02 +0000
asID: 329611
IP address blocks: 154.211.4.0/22 maxlen: 24
154.211.4.0/23 maxlen: 24
154.211.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107447 (0x1a3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 03:59:02 2025 GMT
Not After : Jul 17 03:59:02 2026 GMT
Subject: CN=68f06d8b-fa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:e8:37:52:d0:35:c1:f4:aa:49:af:d3:c2:
60:f7:e8:b6:47:10:09:04:4c:63:c6:22:e2:2c:52:
9d:49:7c:6c:39:3a:89:ec:78:61:3b:8d:75:c0:82:
08:86:0e:e4:b4:a7:51:79:26:e5:03:7d:3c:aa:42:
38:d6:08:8f:51:0c:2b:39:b5:5c:02:88:a6:e0:44:
cc:ef:ad:45:a6:b2:b8:09:92:e8:94:34:e0:cd:86:
20:f3:32:21:47:72:97:0d:5a:78:42:2f:37:3b:ed:
32:b2:ae:1e:58:c9:fc:e8:6a:a4:01:fe:80:93:62:
f0:88:37:e2:58:ca:a9:94:0d:a2:b5:a8:5c:f5:42:
d3:dd:97:24:f4:0a:7e:c7:f7:e0:0a:02:ca:76:dc:
df:f7:d8:c7:b2:6f:9d:d3:4c:77:18:13:b2:31:fe:
b1:56:66:47:36:3f:33:02:61:5a:da:eb:75:c4:4c:
70:8f:8f:9f:6d:3d:0c:9f:51:90:47:25:d0:49:1a:
eb:dd:33:4d:15:3b:dd:db:8b:57:48:36:dd:f7:78:
86:c1:4f:7e:03:0e:e4:0a:f2:b2:fd:21:11:23:96:
2a:cb:be:9b:ce:d6:04:ee:c4:68:bc:50:90:c1:a8:
64:3f:43:0a:79:10:71:e7:70:74:6e:4a:c7:e7:59:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3C:19:91:AD:0C:DF:1A:CC:81:B4:8B:FC:1E:DC:EF:26:68:0D:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7608CF62AA4411F082771C7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.4.0/22
Signature Algorithm: sha256WithRSAEncryption
94:94:05:e1:0b:0f:09:47:bc:71:90:44:a6:66:e4:d3:d7:6c:
c7:b2:8c:81:f2:04:80:1a:8a:3c:8a:f1:9c:b8:8e:ab:d6:38:
b1:ee:90:a2:6d:ec:f2:95:a8:81:1a:28:10:cd:12:e2:96:d4:
6b:f4:6c:53:4a:c4:0d:0f:ba:bd:9d:79:e8:4f:40:e5:02:a3:
e2:2f:f4:b9:98:b1:c0:e4:bc:3d:ba:37:42:ec:72:ba:bb:99:
5a:53:67:67:a8:1b:cc:41:77:5a:fe:c0:c4:1f:07:8c:1c:13:
aa:bd:20:c3:b2:53:50:ad:11:1f:af:0f:28:d6:1b:b5:e7:99:
a9:7c:03:a1:b8:8b:1f:90:bf:9c:6c:8c:b9:a6:1c:09:76:e7:
cd:d7:76:aa:8b:7d:c3:ed:48:89:58:89:ac:7b:9a:c6:76:6c:
8f:95:9d:0e:a0:1d:1a:8d:11:7b:b3:da:74:1d:78:9c:a6:da:
20:0d:d2:03:8f:98:85:c8:26:75:c6:25:27:22:c5:a3:e4:7f:
8f:35:46:ba:13:b8:53:f1:bb:c2:05:3f:cf:59:5e:ee:81:ca:
2a:52:0b:97:b7:c7:b2:f2:51:d8:53:b7:e7:a6:08:4c:6e:48:
63:79:20:01:09:05:47:b8:98:df:1c:c4:0d:9d:3f:e4:61:ff:
bf:0d:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:45 2025 by rpki-client