Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78499E94921311F0AB542887DAE4EC9C.roa
File: 78499E94921311F0AB542887DAE4EC9C.roa (raw, json)
Hash identifier: C+HMM/AA385lZdDtgj77AsdugNG5SIdfrvldxnWXMAI=
Subject key identifier: 5E:8C:2B:FB:9C:82:F0:E0:CA:06:4B:C9:8A:7D:B2:FB:EE:15:CB:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78499E94921311F0AB542887DAE4EC9C.roa
Signing time: Mon 15 Sep 2025 09:07:57 +0000
ROA not before: Mon 15 Sep 2025 09:07:53 +0000
ROA not after: Sat 25 Oct 2025 09:07:53 +0000
asID: 401615
IP address blocks: 154.85.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106420 (0x19fb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 09:07:53 2025 GMT
Not After : Oct 25 09:07:53 2025 GMT
Subject: CN=68c7d76d-3c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:19:c3:48:a6:88:c6:53:59:5b:b4:c9:6f:
7d:d2:c9:44:50:da:4b:80:ad:0b:7c:11:28:19:b8:
33:73:3a:07:e4:46:ca:9b:26:c7:81:3f:2b:33:63:
26:e9:86:74:7c:0f:34:db:93:b6:4d:ad:20:79:ea:
7c:e1:93:92:1a:01:00:f2:fb:61:60:af:0f:b4:d0:
61:4c:be:ac:b8:e6:3e:fb:18:47:75:c5:e8:3f:85:
ff:d8:8f:5b:f2:15:18:be:3c:e6:db:80:01:3a:ae:
36:17:70:df:0f:b9:bd:7f:06:73:ac:e8:47:ac:5b:
ac:69:37:b7:76:79:4f:04:fc:45:d4:e3:75:73:0c:
b6:ee:89:98:86:8f:3f:9d:a1:fa:c1:bc:c8:ad:00:
c2:47:6e:60:90:8c:03:c7:53:fb:e8:c6:41:54:94:
7e:a4:a2:01:dd:60:80:6f:d2:d2:75:85:4c:22:9c:
ea:20:7d:fe:8f:26:bc:24:dc:58:c4:85:ac:67:79:
27:36:1a:39:55:b7:fe:0d:82:b8:35:a7:6c:6c:ca:
e9:d8:75:93:f2:f4:2f:55:d5:42:f0:01:9a:09:f7:
04:34:1e:14:d2:79:66:fa:91:d6:37:24:75:5c:c4:
5f:ac:f4:46:09:33:d1:e4:dd:8c:e4:fd:10:89:85:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8C:2B:FB:9C:82:F0:E0:CA:06:4B:C9:8A:7D:B2:FB:EE:15:CB:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78499E94921311F0AB542887DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:25:87:bd:a6:38:94:39:bb:65:55:8b:46:97:46:db:ab:a8:
af:38:65:d8:05:63:6e:fa:cb:06:5b:e4:37:b6:5f:ce:f9:5c:
78:d6:30:eb:5c:28:3e:66:22:06:57:6a:82:75:1a:78:a3:f0:
7f:d1:51:ef:cf:f5:4a:da:98:35:dd:9d:07:8d:6d:f0:ab:ca:
ec:b5:fd:50:0b:88:4f:51:e7:7f:4a:d0:c7:83:8b:1e:ce:ea:
78:eb:1b:37:ff:39:d2:32:cf:89:d8:a0:15:a5:46:c5:3f:a3:
b9:73:5f:0d:9d:77:4a:c8:ed:cc:94:c5:93:00:01:c0:29:e5:
30:39:d7:25:4a:db:c9:37:39:61:7e:fd:bf:21:d0:10:c1:6c:
10:5f:5f:ba:ef:db:67:9b:35:d6:92:9e:58:9f:35:57:3d:6a:
5c:f0:31:3b:da:c3:91:aa:85:11:61:57:53:c8:68:0a:69:eb:
4e:2d:03:bf:50:2f:82:66:9d:90:a4:4d:23:90:27:a6:52:06:
2d:e5:29:ac:0b:76:33:21:a7:7e:1d:13:62:7c:e9:9a:64:6a:
b7:be:9b:9b:71:94:e6:14:d9:af:37:6d:95:9e:82:9c:26:4f:
6c:52:6d:f0:d0:e4:22:34:5a:d5:f5:0c:26:ca:5f:af:27:af:
71:1f:a9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:08 2025 by rpki-client