Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78633BB69D7F11F0A9C046EADAE4EC9C.roa
File: 78633BB69D7F11F0A9C046EADAE4EC9C.roa (raw, json)
Hash identifier: IG03dJA0ziH6cFjzE0HTb2uRQ201p1ynZ55Q+nmN7mM=
Subject key identifier: 15:EB:8E:FE:06:5A:48:79:33:8A:C3:3F:0D:27:0C:ED:7E:40:D2:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A19B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78633BB69D7F11F0A9C046EADAE4EC9C.roa
Signing time: Mon 29 Sep 2025 21:58:46 +0000
ROA not before: Mon 29 Sep 2025 21:58:41 +0000
ROA not after: Tue 04 Nov 2025 21:58:41 +0000
asID: 398823
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106907 (0x1a19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 21:58:41 2025 GMT
Not After : Nov 4 21:58:41 2025 GMT
Subject: CN=68db0116-2420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:38:61:ba:1e:0d:0f:68:f3:9c:53:48:2b:
cc:8b:9c:fb:ff:11:03:f7:8f:45:11:c0:27:b0:c3:
64:21:48:8e:5a:3c:ef:4f:c3:2d:c1:2b:c4:a6:a3:
2c:b9:e9:0e:9c:85:77:57:5f:dc:3b:05:51:34:37:
e7:35:5b:28:82:9e:de:58:d4:3b:64:95:bb:cf:29:
69:7a:2d:45:15:17:58:7a:d0:eb:d6:0d:50:18:35:
14:74:5b:d5:91:32:ce:ff:0c:4b:1f:29:2f:13:9c:
d2:35:fa:d7:9a:81:ff:15:da:84:b9:8f:a7:6f:ee:
1e:55:ec:d8:07:11:3b:1d:3f:e4:f4:7f:fc:22:96:
f8:a8:88:3a:87:8a:62:70:bd:58:2b:ad:6e:ed:d5:
a4:d4:62:c8:a0:42:d7:13:5c:46:39:85:fd:04:a1:
f9:e1:24:29:d6:22:f2:50:21:9b:1d:55:5c:7a:a3:
94:9b:23:c8:00:97:fa:5d:46:b8:64:64:aa:3d:0b:
73:fd:13:22:6b:16:72:f1:f4:28:85:4b:a2:3d:2d:
2e:25:14:bc:73:18:3f:3a:a9:3d:17:16:91:9d:60:
df:a7:2f:ef:25:50:53:e8:df:ed:58:5d:55:9b:82:
1b:48:7e:52:af:39:ac:d4:df:f8:43:da:24:f9:94:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EB:8E:FE:06:5A:48:79:33:8A:C3:3F:0D:27:0C:ED:7E:40:D2:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78633BB69D7F11F0A9C046EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:47:71:34:fe:50:48:39:c4:e8:50:8a:c3:6e:22:b1:ea:24:
d0:40:0b:c7:10:9d:f3:1f:45:5b:82:1d:b1:41:97:54:42:32:
ce:f8:18:5d:12:bd:70:5a:77:d2:45:5a:b0:27:72:a2:90:1b:
31:6c:15:95:87:09:fe:02:62:c3:03:7b:86:2a:58:cf:c8:f0:
b2:03:86:46:df:ac:12:0c:f3:a1:1c:22:85:e3:be:69:8d:ea:
ed:dc:53:9c:56:aa:70:ae:72:dc:60:5d:4b:7a:28:ed:5a:84:
40:7a:b0:b7:90:85:61:1f:ca:07:c9:2b:7d:c2:72:c8:e6:55:
e5:eb:a0:05:69:68:38:3c:17:46:7e:ce:c1:57:ce:c1:ba:dc:
50:f5:c7:b9:a5:cc:ac:3f:5a:c6:b9:0e:a6:ff:ce:7a:7b:be:
a5:6a:86:02:22:06:c3:ba:83:6b:1b:e0:85:1f:f6:a6:01:eb:
9c:31:d7:44:27:9f:92:b3:65:0b:30:6c:21:15:23:76:69:0c:
05:d2:25:32:1c:f5:d0:51:9f:86:20:80:87:3c:15:7d:04:8a:
52:1f:19:96:47:43:11:b7:18:07:18:80:04:74:a4:21:94:9c:
86:b2:56:fc:de:42:81:6f:60:f6:5f:40:45:03:9e:71:f3:3a:
af:b4:ff:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:12 2025 by rpki-client